Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File:                     uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier:          ExZuPeddiZe6bnMc820+dkoBLEeZwEOgljbQmaD5bvE=
Subject key identifier:   40:C0:E1:81:36:2A:AB:BE:C5:78:A7:31:E2:6E:5A:67:24:51:F8:A1
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer:       /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial:       019E1EA2D0A292A2F3EF94B19D367FFFBE1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number:          1062
Signing time:             Wed 13 May 2026 00:00:47 +0000
Manifest this update:     Wed 13 May 2026 00:00:47 +0000
Manifest next update:     Thu 14 May 2026 00:00:47 +0000
Files and hashes:         1: lWdEpowAzHConUoYGbrc4-nSOV4.roa (hash: 9/NPZ8xgxrX7894j4qUQTxzBQ0X/YCJM81igBGzxaPE=)
                          2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: 3R/8/2VzpnfIRfbfUPa2Zdkl2wyJnWZVqcT37HcOff4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:d0:a2:92:a2:f3:ef:94:b1:9d:36:7f:ff:be:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
        Validity
            Not Before: May 13 00:00:47 2026 GMT
            Not After : May 14 00:00:47 2026 GMT
        Subject: CN=40c0e181362aabbec578a731e26e5a672451f8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:4c:b1:c9:60:6a:92:4b:f5:74:14:50:62:
                    d0:c7:3d:7e:1f:62:c9:ac:99:c0:78:52:18:8f:62:
                    f9:67:4c:b1:3a:7b:28:23:90:f5:66:67:04:da:54:
                    38:7f:f5:6a:b9:00:83:df:01:89:36:d2:e3:3a:61:
                    59:8b:7b:09:81:9e:c9:f4:a7:24:20:c5:80:72:1b:
                    e8:ea:4b:58:eb:b0:94:40:85:47:58:aa:98:34:06:
                    ff:bb:71:77:b3:50:23:78:74:0e:ba:5e:8c:ee:70:
                    84:0f:65:0b:42:c8:56:d5:47:08:00:96:24:30:be:
                    31:56:4b:39:89:5c:f6:c6:08:c2:9f:31:d1:67:96:
                    6b:ef:60:0a:ef:8c:ff:14:37:84:c9:36:c9:f5:c4:
                    b4:32:ae:a1:65:86:bd:95:f1:d5:61:64:09:6e:d8:
                    55:c8:65:e1:b4:e5:c9:d3:4d:b2:1d:a9:a1:f5:05:
                    b8:7f:58:ef:15:09:8c:f4:10:08:86:99:dc:09:5a:
                    f6:74:3a:75:15:58:68:0b:69:37:94:e0:02:61:37:
                    93:8f:6c:67:60:19:08:5b:13:2b:c7:3c:6b:28:ff:
                    08:3f:7e:ac:b6:fd:97:b0:f3:65:83:4d:29:c6:67:
                    34:79:3a:46:9f:21:e3:22:df:e3:25:1f:b1:be:6f:
                    b6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C0:E1:81:36:2A:AB:BE:C5:78:A7:31:E2:6E:5A:67:24:51:F8:A1
            X509v3 Authority Key Identifier:
                keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:83:c9:08:1e:2a:14:bb:7f:c9:1b:e3:a9:50:25:3e:7e:d2:
         78:ac:56:ae:bf:62:e8:4e:52:81:d8:f7:08:b8:ca:15:2a:eb:
         a8:e8:36:04:93:07:97:a1:ac:54:44:b7:40:60:42:fd:8e:f7:
         b3:15:4c:0d:e5:db:c5:2d:4d:c4:9a:d0:c9:0a:c7:26:da:2f:
         89:06:69:c1:3d:ed:ec:6a:e7:1d:09:ff:e4:2a:36:eb:0d:6b:
         d2:69:3a:db:25:c1:06:ce:d3:5a:96:48:60:06:06:7b:e9:4e:
         22:b6:7a:23:66:23:8e:13:04:76:f2:1b:84:b6:4e:bb:0f:e0:
         d5:51:7e:62:89:17:82:b4:f2:c8:2f:91:c1:78:4f:ff:23:5b:
         6f:0a:98:42:92:ca:c2:1d:1a:9a:0a:5d:e5:86:e5:79:bb:bb:
         12:4a:1b:e3:70:fd:c8:53:1b:0e:02:44:af:3d:20:bf:29:e4:
         84:09:a2:7c:e7:d6:d0:45:46:6b:a1:e4:74:55:18:f0:0c:74:
         61:35:c0:ce:38:97:17:5b:26:76:91:f4:2b:8f:75:2a:a6:a7:
         89:55:70:cf:4a:d9:1b:41:0d:9a:a7:ba:61:86:99:d9:6e:02:
         33:78:cb:b5:b1:55:48:64:ed:13:32:f3:69:16:88:2d:c4:c6:
         36:12:98:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:38 2026 by rpki-client