Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File:                     uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier:          j37wNAskm4ly/EbBc8Nv/HWrpgs7977q8N2NrRFJBKM=
Subject key identifier:   83:56:61:78:69:08:B5:FF:87:44:4B:85:60:56:BF:46:10:CD:98:79
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer:       /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial:       019E1E35A21B6A283A166EDA34A0C7479F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number:          089F
Signing time:             Tue 12 May 2026 22:01:31 +0000
Manifest this update:     Tue 12 May 2026 22:01:31 +0000
Manifest next update:     Wed 13 May 2026 22:01:31 +0000
Files and hashes:         1: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=)
                          2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: +viwZQK5dB0LnRfDR88EgFKvjO57nLEi3fTjJj4UwvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:a2:1b:6a:28:3a:16:6e:da:34:a0:c7:47:9f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
        Validity
            Not Before: May 12 22:01:31 2026 GMT
            Not After : May 13 22:01:31 2026 GMT
        Subject: CN=835661786908b5ff87444b856056bf4610cd9879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ea:ce:72:89:83:ea:52:06:02:71:2d:60:1c:
                    3c:64:1c:4e:78:f7:70:b9:07:a3:d1:11:2d:a6:78:
                    5d:5e:b9:1e:3d:d9:7c:bd:1f:78:c7:70:97:27:e4:
                    34:a7:43:13:90:26:f7:1c:22:35:73:b0:c7:7c:79:
                    31:65:46:be:8f:bc:85:34:03:c0:1c:d2:2e:f9:f8:
                    29:c5:b5:03:a4:79:42:46:8e:94:ce:05:71:16:07:
                    11:e2:b9:8f:b7:63:0d:6b:76:e0:0e:5f:03:8e:a4:
                    b5:2e:85:55:e7:1d:34:79:34:53:8a:2e:78:b3:40:
                    c3:4a:66:40:6a:20:c6:6f:68:72:eb:18:c4:03:6d:
                    7b:a1:19:ea:03:ba:cb:09:9e:f9:1c:8c:0c:bd:d3:
                    8e:ab:a9:4d:03:41:58:e0:a9:3a:6a:1e:0a:69:2e:
                    a2:86:8d:39:d9:18:30:51:a0:15:6e:41:0f:e0:91:
                    7a:3d:08:5c:81:9e:05:69:a6:e7:17:c0:f7:40:9e:
                    78:46:53:39:69:ad:7a:61:4e:7b:f0:f8:1c:e9:31:
                    58:9b:65:af:64:8e:e4:eb:9c:9f:11:f1:4f:6a:0c:
                    df:8f:1e:dd:ac:04:cd:48:51:3d:ba:47:04:7f:6d:
                    0b:1a:6b:b9:b6:f2:5b:7c:34:c7:4f:db:e9:dc:83:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:56:61:78:69:08:B5:FF:87:44:4B:85:60:56:BF:46:10:CD:98:79
            X509v3 Authority Key Identifier:
                keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b4:3c:fb:08:85:6c:92:a6:33:1f:42:b6:0d:1a:d1:c2:cf:
         70:29:d0:84:18:10:27:9a:2f:ff:10:55:f9:b4:ab:34:55:3b:
         65:bd:27:73:0d:9c:1c:34:90:d0:ec:fb:98:bf:07:97:e4:10:
         95:43:18:1b:c5:d9:65:50:37:11:a9:1e:d6:ca:25:e4:f6:b7:
         e3:58:50:eb:79:f5:93:2b:4d:89:a5:57:9d:ed:85:6d:c6:99:
         8f:66:14:10:95:d3:45:04:12:9d:f1:ea:dd:f6:12:9d:fd:a0:
         91:f8:dc:54:cd:3b:ad:62:47:3b:2c:f1:9f:48:ed:8e:4e:9b:
         6b:f3:45:82:51:60:fd:ea:63:36:20:da:6d:b5:17:63:72:89:
         3c:c7:33:c7:91:4a:20:94:f0:5e:a9:a5:f2:83:b7:3b:21:8e:
         ec:cb:aa:1c:b6:9a:33:64:c2:54:ee:47:5e:bb:fd:3a:f6:74:
         af:d8:32:0f:c7:5d:09:09:a0:75:5d:64:19:d6:10:3f:e5:a8:
         a0:7f:7c:30:48:c1:06:8d:d3:de:32:b0:73:30:57:68:36:33:
         97:9e:3b:de:d4:0a:6b:42:d0:fc:30:5c:fc:51:18:2c:0c:8e:
         a5:be:5e:64:9f:ef:ac:ce:8b:99:5a:19:5e:fe:73:ee:e8:53:
         0c:af:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:00 2026 by rpki-client