Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File:                     U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier:          tnZkg3oESOvKZUGSCI7Oki1pREGKgh4tKluco1ooM+8=
Subject key identifier:   06:0D:8B:EB:E9:DB:CC:C8:A9:36:60:D9:DC:9F:24:B7:F2:E9:AE:19
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer:       /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial:       019E1ED9D2213A12C3996C0E392FE943B97B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number:          18EF
Signing time:             Wed 13 May 2026 01:00:51 +0000
Manifest this update:     Wed 13 May 2026 01:00:51 +0000
Manifest next update:     Thu 14 May 2026 01:00:51 +0000
Files and hashes:         1: NnLh8TC21_I7aIxYqBVOxMDsYn8.roa (hash: abZc4byKeRvjtv7jM3QRQhlxOH/1CVxvgCdUA7yEv1Y=)
                          2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: Zh51vjeop+h+5Ffc6j5B3pouFE+w16PALSLRDztJUp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:d2:21:3a:12:c3:99:6c:0e:39:2f:e9:43:b9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
        Validity
            Not Before: May 13 01:00:51 2026 GMT
            Not After : May 14 01:00:51 2026 GMT
        Subject: CN=060d8bebe9dbccc8a93660d9dc9f24b7f2e9ae19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:9d:bf:19:92:d9:bb:e6:1a:c5:f8:4f:dc:
                    88:51:39:17:62:a5:aa:95:13:de:35:a8:7c:99:b2:
                    89:e6:f0:9d:36:74:c6:34:40:5e:80:32:ab:33:10:
                    83:b7:90:a3:f9:67:0a:88:44:ca:c8:df:86:1a:ea:
                    24:c7:b9:f7:da:09:95:ea:70:3a:02:e3:32:37:63:
                    3f:eb:c9:3b:3d:a4:4f:0e:44:7c:37:e9:99:6d:40:
                    eb:59:49:ef:50:42:9f:d7:87:e8:05:d4:e4:c6:0e:
                    c8:05:30:58:92:94:65:c4:ad:b0:c0:d1:5b:12:fb:
                    cd:dc:a3:09:45:f1:bf:9a:4a:cf:48:78:db:7a:13:
                    a9:67:22:86:87:ae:34:9c:cc:b2:ea:85:8d:cc:5e:
                    a3:04:bf:bb:b1:46:95:87:98:63:0a:b7:22:66:f8:
                    53:9a:ca:91:06:40:89:28:4b:43:72:6e:f1:35:42:
                    ab:04:93:eb:32:aa:7e:f2:7f:c0:f6:29:76:92:1b:
                    d2:8e:41:76:46:87:17:c3:88:23:9f:57:83:73:7c:
                    0b:fe:35:94:e2:56:05:1f:39:16:bf:ab:d7:6b:89:
                    5e:c9:74:21:d2:fa:16:89:c8:6d:23:c8:33:96:0c:
                    8b:bb:d7:ea:1f:9d:25:17:87:78:ab:63:a7:25:65:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0D:8B:EB:E9:DB:CC:C8:A9:36:60:D9:DC:9F:24:B7:F2:E9:AE:19
            X509v3 Authority Key Identifier:
                keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0f:e0:93:6b:cc:c0:6a:5e:ae:b0:3b:b2:8a:2f:b9:ae:bf:
         25:e2:12:b6:76:9f:23:8a:55:76:b7:72:f4:20:0c:01:b2:a4:
         f0:d8:b1:bb:23:02:40:04:3f:f6:da:6d:1d:d9:f7:83:70:99:
         0d:9a:d5:fa:c4:20:fa:f5:6d:41:ad:6c:5f:87:d8:3d:51:1d:
         4e:f9:dd:2d:2f:92:8f:0b:f1:d9:d6:28:67:c1:66:91:c6:0b:
         50:f9:e5:21:88:a2:04:76:30:99:27:29:25:aa:20:45:e5:04:
         41:55:f2:f1:7a:c1:d9:72:8d:b1:66:51:14:1f:41:1a:dd:50:
         aa:e3:fa:30:82:4b:2d:2d:c2:32:f2:56:a8:a2:21:c7:82:9a:
         6c:9f:ec:05:e3:70:4e:ff:a8:1e:57:a8:90:78:19:d8:c9:14:
         06:65:16:4c:b6:f8:7f:94:32:46:f4:78:94:8f:88:c0:14:3e:
         ef:d6:25:7f:48:08:76:97:c0:90:ed:77:8a:9b:e4:59:ce:02:
         5f:ee:8f:84:39:24:49:10:1a:c6:b8:6b:cd:38:df:97:90:c7:
         f7:cc:5c:9f:cc:b3:f6:0f:66:28:60:a6:b8:aa:89:39:d6:36:
         71:53:fc:6b:75:6b:63:1f:92:aa:fa:f4:12:7a:a0:61:e1:9e:
         07:9e:69:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:57 2026 by rpki-client