Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File:                     uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier:          WUKFgWDgIBM9/f82UBRytyjg1AcgmYVUWkgWLfZKbfs=
Subject key identifier:   F8:10:99:7A:78:11:D6:6B:CF:44:29:65:B1:DA:AC:9F:8A:1B:25:0F
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer:       /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial:       019E205A5527B57925D2BE8B5BCCD104432D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number:          1712
Signing time:             Wed 13 May 2026 08:00:51 +0000
Manifest this update:     Wed 13 May 2026 08:00:51 +0000
Manifest next update:     Thu 14 May 2026 08:00:51 +0000
Files and hashes:         1: 0sG02fRT--XJolYuZ7_jXyMamw4.roa (hash: YsaXqtsrHkKSzKqIrNyEZ6rkNj200yF1XlYMTQ9by/Q=)
                          2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: qIjgR4TSo/2m2oJffVdqodH0wYot3mKYmVkrCQYfPoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:55:27:b5:79:25:d2:be:8b:5b:cc:d1:04:43:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
        Validity
            Not Before: May 13 08:00:51 2026 GMT
            Not After : May 14 08:00:51 2026 GMT
        Subject: CN=f810997a7811d66bcf442965b1daac9f8a1b250f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d7:00:0a:04:7c:e3:0e:8d:df:2e:a0:94:27:
                    b1:ed:25:98:80:d2:52:db:39:38:4c:5d:1b:ef:53:
                    a6:1c:96:ca:5f:7d:6f:83:95:a3:61:13:16:1b:54:
                    d5:11:1e:fa:98:56:38:b0:2e:2d:94:f3:72:78:60:
                    ff:02:9b:5a:39:39:2b:18:74:f6:06:c5:6b:16:5f:
                    40:6d:97:12:66:88:8a:3c:e7:48:f8:33:4f:82:43:
                    25:c6:1a:e5:cc:dd:e6:ae:4d:7a:55:18:44:ca:32:
                    5d:bd:ec:7f:06:30:01:27:25:f8:72:e7:5f:24:c7:
                    d2:b0:fb:14:2d:37:e1:34:3a:97:7d:ef:98:59:3c:
                    b0:0e:dc:0d:26:fb:68:48:24:d5:50:17:f4:2b:6e:
                    88:98:4c:cc:6b:6a:9b:db:93:ee:27:04:b3:4c:f7:
                    35:89:25:fc:b7:d1:11:48:30:c5:71:47:5f:bf:77:
                    51:d0:1a:94:8e:6e:f4:d5:d3:1e:78:ad:ec:a9:a2:
                    26:5a:9b:8a:0d:75:a0:1c:60:3d:eb:18:93:7b:ff:
                    50:a5:67:f1:1e:64:d0:6b:9e:02:66:e1:6c:5f:d8:
                    12:ff:87:b3:ec:df:0e:55:b1:0f:01:b2:bb:6c:44:
                    d7:86:e9:95:1f:16:45:53:b8:68:c2:ea:0b:c9:f1:
                    18:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:10:99:7A:78:11:D6:6B:CF:44:29:65:B1:DA:AC:9F:8A:1B:25:0F
            X509v3 Authority Key Identifier:
                keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:91:13:a0:c4:6e:5d:d5:75:bc:48:16:84:61:ba:6a:fc:3b:
         aa:b9:ef:37:af:27:83:c4:81:3f:f2:70:cc:38:89:5f:8a:c9:
         7d:63:b2:57:a6:c3:c9:65:b4:b8:b0:75:5d:32:72:cc:50:dc:
         7b:f6:5b:e3:c8:dd:93:c8:97:eb:ba:77:39:cb:6f:74:33:22:
         39:f7:be:14:28:e4:48:13:a3:98:08:43:8b:ff:34:3b:94:5b:
         70:8e:d7:db:a5:1d:79:0e:7b:fb:e8:8c:a7:c4:a1:5c:16:45:
         91:84:1e:2f:c1:f6:27:6e:13:86:4a:fb:aa:cd:91:df:5a:66:
         82:3b:91:d7:3b:b2:22:0f:e8:77:d9:06:d7:48:7c:0a:51:42:
         50:87:a5:62:ce:51:74:09:1b:b8:25:ae:65:49:c3:24:89:bd:
         a1:23:5b:45:ca:3f:28:58:ff:45:51:96:8e:ae:98:cc:12:22:
         56:0c:d0:74:82:84:c7:58:37:e7:c5:30:31:fc:e3:de:b9:f1:
         9d:60:e4:a0:18:83:d8:f6:58:bf:8e:89:f1:36:0f:fc:af:15:
         30:4d:e6:61:1b:98:86:f1:70:18:19:2e:a2:e8:d7:47:d6:a2:
         9b:95:33:70:f2:aa:01:cf:5a:30:71:3f:27:e6:a9:66:48:34:
         f8:54:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:29 2026 by rpki-client