Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
File:                     UoMHMHbmc6Mrfda83A-8wW83tqE.mft (raw, json)
Hash identifier:          cmO6CeC9g02C0+gpnegF9u9Cns1tFqt059ec73OHlm8=
Subject key identifier:   92:6D:02:A2:B9:58:A6:96:29:28:5E:D2:6D:F8:F7:F3:08:37:D5:9A
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Certificate issuer:       /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial:       019E1DFEB7AA40CD299DFB7AF6AA5775FAB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 21:01:32 +0000
Manifest this update:     Tue 12 May 2026 21:01:32 +0000
Manifest next update:     Wed 13 May 2026 21:01:32 +0000
Files and hashes:         1: Jl1SU-xkBOcLP1W_NElxZ0fZTis.roa (hash: wF2WX53G3BqzGaZSb7k+E/KvA+vOFQAtSMl5iV+YPMg=)
                          2: UoMHMHbmc6Mrfda83A-8wW83tqE.crl (hash: pI/LkDO2tfT97FR6mJ4iRVk2k6+vc7IEU/irUag34m0=)
                          3: e37qSS4lM51pp_7NmwBBNPNYUQs.roa (hash: ASWof8eb9bNGVZSD2vAjoFRDN+8AOfifbyspUkbdPAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:b7:aa:40:cd:29:9d:fb:7a:f6:aa:57:75:fa:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
        Validity
            Not Before: May 12 21:01:32 2026 GMT
            Not After : May 13 21:01:32 2026 GMT
        Subject: CN=926d02a2b958a69629285ed26df8f7f30837d59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:69:6a:a9:7c:ba:b5:53:ef:6e:c8:94:6f:
                    79:7b:39:aa:2f:2e:c2:7b:10:9a:df:3d:f4:6c:45:
                    3c:8b:27:f6:e2:be:77:46:6c:16:7d:db:80:b3:33:
                    22:4d:3a:28:05:29:ed:0e:88:28:4d:44:b5:92:83:
                    ba:6b:db:a9:68:41:0d:32:83:dc:af:67:89:f0:c8:
                    d2:ed:10:f9:e5:20:c5:fd:61:bf:5c:8b:fa:02:56:
                    af:df:ee:3d:e9:34:4d:54:b9:77:22:56:2e:1c:27:
                    99:ff:66:ef:85:7b:14:e4:3b:30:dd:69:5f:cc:53:
                    67:33:f7:70:fc:c4:71:03:de:6c:d0:a8:2f:1f:c6:
                    f9:e6:3c:08:af:74:75:ba:5e:e5:82:e6:d0:90:ba:
                    78:99:8e:c1:db:2d:c6:19:47:93:4f:02:e9:78:0c:
                    f8:83:2a:7c:03:16:33:b2:01:f5:c7:1d:82:1b:ef:
                    88:1e:2c:e5:31:00:13:88:0e:fc:a0:77:85:23:a7:
                    bc:ac:3d:7d:6b:be:16:99:89:92:e5:ad:ec:14:17:
                    0e:fd:8e:b4:d1:4f:1c:f9:78:89:23:55:02:40:cf:
                    19:e3:c3:c1:51:d8:f4:93:58:49:25:66:2e:90:22:
                    f7:83:8a:78:fe:29:d4:f8:99:72:9d:dc:2d:6a:78:
                    ed:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6D:02:A2:B9:58:A6:96:29:28:5E:D2:6D:F8:F7:F3:08:37:D5:9A
            X509v3 Authority Key Identifier:
                keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e1:ab:5e:2c:2d:cb:ae:ff:15:fb:eb:51:99:1b:f1:09:d8:
         40:38:43:c5:3c:8e:2e:58:b2:66:85:26:56:c4:c9:fb:9a:0a:
         69:d6:1c:d5:f0:c3:45:08:61:94:08:68:10:ff:63:cc:f2:18:
         dd:b9:2e:fe:95:b3:c6:58:99:12:18:60:19:12:ab:a5:71:c2:
         4c:31:46:d1:8c:26:a6:b0:79:46:2d:a0:17:f4:d9:29:71:c3:
         9c:33:8a:c5:ff:b3:b3:67:05:0b:38:31:f9:00:6c:4f:9f:8e:
         a2:f7:91:a4:11:cb:0b:78:87:2a:fd:1d:41:3c:0b:7d:d9:c2:
         ea:65:7a:f0:03:cf:91:a7:c7:ac:81:48:a0:84:ed:90:1e:38:
         ad:f2:57:32:cb:d2:ac:32:43:8c:e5:8c:48:e0:c5:c4:ec:4b:
         16:eb:07:d5:9e:a9:5f:ba:dd:4d:5e:54:41:83:fb:ad:a0:bb:
         7a:88:3c:54:f0:c4:6b:8c:19:0c:cf:b4:4a:59:be:e2:10:8e:
         da:b0:e4:a3:ac:aa:ee:75:e9:e3:27:90:19:dc:d9:ff:34:22:
         cf:d1:66:58:c9:ce:98:50:0d:f7:b8:6e:97:68:ed:f8:9e:d1:
         ec:26:f5:95:10:cf:d2:12:0d:ab:2f:8c:1d:5f:5b:3a:0b:2b:
         72:41:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:47 2026 by rpki-client