Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
File:                     ukQzhlmFp7teJpw3lK5vFkz8Lds.mft (raw, json)
Hash identifier:          22AWz2OkLzmilFwtN2oL8VjUq05dcXNPpTkfyE2xeoY=
Subject key identifier:   C4:49:AA:64:9D:DB:57:ED:85:8B:43:95:20:16:48:74:00:4A:B3:F3
Authority key identifier: BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
Certificate issuer:       /CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Certificate serial:       019E209209481A0B57D85D95ABB8E179F291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
Manifest number:          08E7
Signing time:             Wed 13 May 2026 09:01:41 +0000
Manifest this update:     Wed 13 May 2026 09:01:41 +0000
Manifest next update:     Thu 14 May 2026 09:01:41 +0000
Files and hashes:         1: UfxnZEwkQdyHN4gibAtk_ce1zeI.roa (hash: Bl9GgITeZ3znWiaIE2fwC3TQwsJfWdhy5zENaMdMELI=)
                          2: ukQzhlmFp7teJpw3lK5vFkz8Lds.crl (hash: FwoxLGjT1f04WmdhvgQPVT64bpxkayDe8YwMa2q0bY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:09:48:1a:0b:57:d8:5d:95:ab:b8:e1:79:f2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
        Validity
            Not Before: May 13 09:01:41 2026 GMT
            Not After : May 14 09:01:41 2026 GMT
        Subject: CN=c449aa649ddb57ed858b439520164874004ab3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:7b:21:e2:87:dd:7b:43:c0:73:35:a6:77:
                    76:5c:e3:7f:f9:fd:69:9f:a1:3d:4a:34:09:31:20:
                    a5:4a:8a:24:2a:e9:48:ff:d6:d3:14:91:40:51:cf:
                    1a:7d:a7:fe:91:ec:4e:4f:f7:61:71:57:3f:25:4e:
                    3d:4d:f4:a5:9a:60:12:b1:76:1e:ec:54:bb:6a:7c:
                    ce:3c:2c:a4:19:3a:f8:3e:5d:1c:e2:de:31:88:04:
                    45:b0:3b:74:e1:1e:fc:94:5d:0a:41:0c:81:61:fb:
                    1d:60:48:fe:af:21:84:8c:0b:c9:61:21:0b:4f:45:
                    4a:b9:23:72:55:57:c7:76:39:6c:a5:17:b4:33:ea:
                    ad:07:10:1d:de:fe:ea:61:97:17:6e:fb:ca:7d:11:
                    12:b2:19:35:fb:32:a0:c7:92:df:68:48:17:2d:75:
                    9b:06:85:50:f3:ad:ce:38:97:69:e1:a7:3c:40:e8:
                    f5:d0:09:e0:b8:f0:46:9a:e0:c5:f6:31:bc:fd:57:
                    43:71:f6:79:7e:7e:1c:2b:ed:7f:91:bc:b9:a7:d8:
                    37:90:93:22:f5:9a:dc:2e:8a:7b:f1:af:b3:5d:39:
                    63:59:8e:c5:30:06:96:c4:57:8f:05:15:e2:8a:53:
                    23:cd:f2:71:38:53:47:f5:33:a7:ec:02:c6:d3:09:
                    94:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:49:AA:64:9D:DB:57:ED:85:8B:43:95:20:16:48:74:00:4A:B3:F3
            X509v3 Authority Key Identifier:
                keyid:BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:92:38:a8:32:e1:4b:05:a4:01:f4:65:06:73:c3:61:17:e3:
         41:4f:95:9a:c7:fe:1c:c2:81:4d:58:1b:55:42:99:96:7e:47:
         06:c7:06:ce:5d:15:8d:77:03:97:1f:8b:b8:cc:95:56:6d:68:
         62:35:86:30:11:93:ef:fd:69:a5:57:23:4e:5a:61:a1:1b:52:
         da:b6:fe:a7:1c:d8:d2:f4:46:4b:8b:9a:dd:1d:75:3f:9b:27:
         45:8a:06:4e:a6:37:96:5f:87:2f:48:e5:ce:1b:1f:2b:8b:6e:
         fc:81:2c:01:57:a5:7d:ca:68:38:64:5b:45:78:02:82:4e:e3:
         70:4d:5b:f9:dd:7d:43:52:49:f0:86:a9:52:2c:54:f1:cc:77:
         f3:39:ed:fc:e4:40:70:75:67:67:66:2a:8f:76:e7:7f:24:44:
         25:1f:6b:86:11:6e:ff:24:d1:85:80:fd:fd:b7:f0:aa:5a:ed:
         3e:5b:01:7b:e1:15:f2:13:93:9e:46:c6:44:e5:28:38:69:a3:
         c3:c9:5f:9d:7a:76:71:1f:e4:e8:e9:e7:a4:3b:3b:c9:22:24:
         65:a9:62:51:d1:8f:31:47:1b:5a:5d:e1:36:51:fc:17:6f:ce:
         48:0c:04:8b:80:ff:01:e6:f8:77:53:4f:da:e4:86:a7:43:c2:
         81:6a:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:14:30 2026 by rpki-client