Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
File:                     UAVevD0cUvF65lrCkuvgmTEAnPY.mft (raw, json)
Hash identifier:          TEJtJXQ8P1m9LEW88mJfv9TBqBdUcVxmKvy64lKYo+g=
Subject key identifier:   41:4B:CA:A8:C1:7D:14:7F:36:54:76:C9:EB:9C:D0:5F:0A:DB:23:72
Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
Certificate issuer:       /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Certificate serial:       019E1F112595AAA73724C8E66CB2FBE9EAB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 02:01:17 +0000
Manifest this update:     Wed 13 May 2026 02:01:17 +0000
Manifest next update:     Thu 14 May 2026 02:01:17 +0000
Files and hashes:         1: 8ho9HiR8WuGSEcLEuAu9vgoeEOk.roa (hash: 9ykIDcmL5cz0ycTHRWIGIZIZVyJ5BAMWzb6yGqt8tNU=)
                          2: UAVevD0cUvF65lrCkuvgmTEAnPY.crl (hash: s57YjLwgD/lJdW4/oKvEweUZpfuWwY5BMuuRxQkBxMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:25:95:aa:a7:37:24:c8:e6:6c:b2:fb:e9:ea:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
        Validity
            Not Before: May 13 02:01:17 2026 GMT
            Not After : May 14 02:01:17 2026 GMT
        Subject: CN=414bcaa8c17d147f365476c9eb9cd05f0adb2372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:17:e3:39:0a:db:39:a4:3b:a7:5a:a9:6a:
                    d4:e3:25:47:48:56:26:a8:2f:81:92:14:4e:40:1a:
                    1e:70:d4:f4:c9:3f:af:ab:c3:3d:35:68:1d:42:a5:
                    09:82:bd:83:a1:73:7a:cc:91:f6:23:d7:08:5e:93:
                    fc:a8:15:a5:64:c8:0f:a8:8d:d7:4d:2a:d4:4e:7a:
                    f6:8f:cc:29:f2:0e:47:5f:a9:fb:50:ca:7f:09:59:
                    3b:c2:c9:7b:54:76:78:62:61:c6:26:28:10:7a:8b:
                    64:2b:a6:4c:b9:e2:00:7b:a8:4e:29:11:99:c6:2a:
                    45:71:b0:f2:02:32:10:95:1f:5e:69:ab:cf:33:7c:
                    4f:14:e3:b9:45:47:6c:04:ab:90:32:2d:6d:38:fd:
                    f9:73:2d:dd:92:ee:a0:e2:25:ab:f0:97:ac:88:2e:
                    f2:18:10:81:99:75:c8:eb:39:2f:2d:54:99:fb:af:
                    51:ed:48:01:ba:9a:a0:21:ca:b7:a5:42:97:ef:ed:
                    85:d7:65:2c:f7:9f:c4:44:cf:26:78:c2:b8:3c:ab:
                    e4:99:f9:22:a0:6e:8a:6c:eb:f1:ac:f2:1b:23:02:
                    47:b1:3a:33:ab:eb:70:50:2e:6e:de:3a:c0:6a:30:
                    76:78:5a:29:bb:0f:f3:63:0d:68:59:5e:1f:7f:5c:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4B:CA:A8:C1:7D:14:7F:36:54:76:C9:EB:9C:D0:5F:0A:DB:23:72
            X509v3 Authority Key Identifier:
                keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:cf:28:bc:1d:15:f8:01:cd:a4:f0:ee:36:b3:d3:09:ac:b7:
         1f:68:44:19:25:b1:a3:3c:0f:82:30:1c:5e:45:d5:b7:75:2e:
         f3:af:7e:1f:6f:80:0f:33:e6:bf:a7:e3:70:79:04:fe:e7:2c:
         1a:bd:5a:62:e8:c2:75:04:2f:cd:54:6d:61:19:30:a6:0c:50:
         46:7a:fd:65:9d:9d:c8:f3:98:09:3e:ff:71:6d:ed:c7:6a:b0:
         15:42:71:da:b4:82:2b:cb:e2:12:e2:6b:0c:27:2e:3d:ec:37:
         28:7c:c4:e8:50:d9:d2:9b:d2:0f:60:d9:a0:ef:57:07:dc:8f:
         17:f9:80:e6:c7:ca:88:a4:a7:19:dc:19:dd:f1:85:e4:a6:58:
         0f:b4:9f:88:af:8f:be:84:2d:0b:bf:2b:4a:bd:85:4f:50:1f:
         32:0e:85:75:79:97:e3:20:9b:e6:06:65:5f:73:8c:b2:5a:cc:
         00:c0:46:2e:7a:54:c6:42:4f:28:cf:fc:8d:6c:f2:2b:2f:35:
         f3:57:32:52:08:72:fc:ac:c0:4f:44:c2:db:70:42:74:df:6c:
         c3:53:90:20:62:da:9f:cd:c9:08:d9:c3:e5:07:ca:b4:c5:bc:
         78:ab:3b:38:b7:5a:de:a7:c8:2c:a5:fd:5a:a1:59:d2:b7:f1:
         0b:34:69:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fESWVqqc3JMjmbLL76eq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMDU1ZWJjM2QxYzUyZjE3YWU2NWFjMjkyZWJlMDk5MzEw
MDljZjYwHhcNMjYwNTEzMDIwMTE3WhcNMjYwNTE0MDIwMTE3WjAzMTEwLwYDVQQD
Eyg0MTRiY2FhOGMxN2QxNDdmMzY1NDc2YzllYjljZDA1ZjBhZGIyMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjQX4zkK2zmkO6daqWrU4yVHSFYm
qC+BkhROQBoecNT0yT+vq8M9NWgdQqUJgr2DoXN6zJH2I9cIXpP8qBWlZMgPqI3X
TSrUTnr2j8wp8g5HX6n7UMp/CVk7wsl7VHZ4YmHGJigQeotkK6ZMueIAe6hOKRGZ
xipFcbDyAjIQlR9eaavPM3xPFOO5RUdsBKuQMi1tOP35cy3dku6g4iWr8JesiC7y
GBCBmXXI6zkvLVSZ+69R7UgBupqgIcq3pUKX7+2F12Us95/ERM8meMK4PKvkmfki
oG6KbOvxrPIbIwJHsTozq+twUC5u3jrAajB2eFopuw/zYw1oWV4ff1w8tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFLyqjBfRR/NlR2yeuc0F8K2yNyMB8GA1UdIwQY
MBaAFFAFXrw9HFLxeuZawpLr4JkxAJz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82ZTJhZTItOWIzZS00ZWI4LTgzZDQt
Yzc4MTMyNGI3OTc5LzEvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni82ZTJhZTItOWIzZS00ZWI4LTgzZDQtYzc4MTMyNGI3OTc5
LzEvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZc8ovB0V
+AHNpPDuNrPTCay3H2hEGSWxozwPgjAcXkXVt3Uu869+H2+ADzPmv6fjcHkE/ucs
Gr1aYujCdQQvzVRtYRkwpgxQRnr9ZZ2dyPOYCT7/cW3tx2qwFUJx2rSCK8viEuJr
DCcuPew3KHzE6FDZ0pvSD2DZoO9XB9yPF/mA5sfKiKSnGdwZ3fGF5KZYD7SfiK+P
voQtC78rSr2FT1AfMg6FdXmX4yCb5gZlX3OMslrMAMBGLnpUxkJPKM/8jWzyKy81
81cyUghy/KzAT0TC23BCdN9sw1OQIGLan83JCNnD5QfKtMW8eKs7OLda3qfILKX9
WqFZ0rfxCzRpaQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:33:59 2026 by rpki-client