Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File:                     uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier:          J0jxp4uGtxvIqx2aRpeXz1AbL/htHfTBNc0vYn+POnQ=
Subject key identifier:   39:AB:EF:42:83:2D:59:26:64:D3:D5:8A:10:BB:8B:2C:ED:01:CF:56
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer:       /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial:       019E1E3586B8D94895BB48A53B94DF1188E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 22:01:24 +0000
Manifest this update:     Tue 12 May 2026 22:01:24 +0000
Manifest next update:     Wed 13 May 2026 22:01:24 +0000
Files and hashes:         1: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (hash: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI=)
                          2: hTUAMk4ivW-zcf6qV0iH6m50Tko.roa (hash: VBCrCjN466HYq/3fbWnNr2nU6AFrUJpSz4d+MsDsH6k=)
                          3: po2AjEIA0cEB2DRz3ItNN0tLtJA.roa (hash: emEIyu5B7Cay8ES1oJZR9gyFPVy8pKl4tqO8qQcgwDQ=)
                          4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: PO0RbDetXcLkA8qRLnHugeu6PvzS0wSVj1U0SNldtK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:86:b8:d9:48:95:bb:48:a5:3b:94:df:11:88:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
        Validity
            Not Before: May 12 22:01:24 2026 GMT
            Not After : May 13 22:01:24 2026 GMT
        Subject: CN=39abef42832d592664d3d58a10bb8b2ced01cf56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:d1:22:d6:ca:f5:6e:2e:44:08:40:7b:dd:
                    c2:c7:03:2e:ea:cf:e2:4d:83:37:fe:fa:ec:8f:a6:
                    49:86:b0:7b:a0:bf:14:29:af:15:e9:4d:59:c5:cc:
                    80:14:08:b1:0b:4c:5f:12:32:ff:83:f4:21:59:de:
                    dd:7a:98:51:72:ea:48:90:dd:c2:ca:9a:50:5b:cb:
                    fa:87:cb:a5:de:f2:20:77:28:0b:79:7d:c6:a3:51:
                    33:42:0d:02:02:de:f0:2e:28:d1:66:7a:9d:e2:6a:
                    1a:65:61:43:13:65:f4:94:ed:3d:d1:0c:68:2f:0e:
                    1c:06:87:9e:62:6f:35:11:1c:c6:de:b9:2a:17:ba:
                    3d:9c:ad:30:e8:93:e4:59:98:c9:12:fd:73:4d:9b:
                    41:83:8b:54:fb:ee:8a:59:2b:69:54:4a:68:f5:7d:
                    d6:71:7f:6c:d6:96:43:82:eb:85:8b:9f:af:a6:c6:
                    5d:04:6c:d2:43:ee:f8:ce:62:21:4d:67:39:02:d0:
                    01:f3:36:3a:9d:1c:9e:1b:26:02:85:a1:b0:80:6a:
                    cc:f2:ce:79:cc:38:0b:51:94:62:b9:22:e4:53:73:
                    2d:e7:84:34:2a:34:f8:16:4b:28:f1:e0:0b:23:9f:
                    40:ef:d6:20:74:7a:b5:95:64:1f:83:93:fa:bb:bf:
                    ff:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AB:EF:42:83:2D:59:26:64:D3:D5:8A:10:BB:8B:2C:ED:01:CF:56
            X509v3 Authority Key Identifier:
                keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c6:68:4a:ca:e5:0c:68:ad:c2:7f:27:77:c5:30:f9:d8:83:
         6b:04:29:7a:3d:21:ae:e5:42:01:95:58:ab:1c:95:6e:b4:93:
         9d:33:4c:88:74:b7:b9:c4:f0:31:d6:33:fd:45:f8:23:59:ad:
         5c:6c:2c:14:d4:a7:22:d7:25:b4:1c:10:b9:29:38:e9:e7:96:
         b7:b8:d2:c7:72:3a:2c:b3:49:fd:8d:83:bb:99:45:43:e0:4c:
         f8:bd:2f:cc:38:61:6d:42:bc:9d:9a:13:19:70:9f:99:c8:c6:
         da:48:d3:46:29:01:21:c1:75:69:ba:25:9d:8a:4e:86:74:2d:
         f6:44:c5:b2:90:44:69:57:d0:43:c1:3c:f0:7a:c0:6f:72:32:
         89:cd:24:64:28:fa:8e:0a:5e:5c:45:5d:22:b4:fb:7b:c4:aa:
         42:63:a6:34:fd:0f:26:96:76:50:cd:4a:35:eb:06:fa:4f:99:
         dc:49:30:d5:24:cc:e2:47:a4:f1:50:da:49:6c:76:82:f3:37:
         6a:1e:c1:cb:22:b2:c5:7b:2d:87:94:38:03:99:f6:f8:af:87:
         3e:82:cc:f6:a2:1f:e3:61:e8:5b:5b:19:9e:2b:13:9a:cf:1e:
         06:ac:b9:3f:5b:60:e2:a3:1d:56:4b:17:78:32:28:52:42:f0:
         70:d4:0f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:24 2026 by rpki-client