Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
File:                     UoPLS4EObFkudHmvpCEY91XH-H4.mft (raw, json)
Hash identifier:          dOyMVJZuzWoeXpGTcqQTMPlONkBHyp7mbuviHxd4mwc=
Subject key identifier:   09:C4:37:96:86:8E:D1:F8:4B:F9:31:25:FF:AD:62:4E:9D:74:3A:B8
Authority key identifier: 52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Certificate issuer:       /CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Certificate serial:       019E1FED0963FC3A67850F6DB51D1D9D80DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
Manifest number:          089D
Signing time:             Wed 13 May 2026 06:01:28 +0000
Manifest this update:     Wed 13 May 2026 06:01:28 +0000
Manifest next update:     Thu 14 May 2026 06:01:28 +0000
Files and hashes:         1: HmNqE0h2Fdp2DXd4XO_8pqpFAsM.roa (hash: +R7voTq5Oy//ohBpR1uYG9F4X7IsrLd7JvniEXqhDlQ=)
                          2: UoPLS4EObFkudHmvpCEY91XH-H4.crl (hash: DSZPjFQA1I3CfDsj86hLFqM75k4zuHakcNLUev3OH9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ed:09:63:fc:3a:67:85:0f:6d:b5:1d:1d:9d:80:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
        Validity
            Not Before: May 13 06:01:28 2026 GMT
            Not After : May 14 06:01:28 2026 GMT
        Subject: CN=09c43796868ed1f84bf93125ffad624e9d743ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c5:ad:92:50:58:2b:22:ff:da:6f:b4:3d:26:
                    ae:9e:06:8b:ac:20:5e:01:47:5d:7c:6b:93:8c:34:
                    ae:56:dd:d4:c7:af:db:41:c5:69:62:73:3c:6f:5e:
                    42:af:34:27:12:e8:3e:3c:af:9b:7b:ff:68:d7:01:
                    25:dc:fd:c0:22:4f:cf:ee:72:50:aa:1d:64:28:a9:
                    df:df:52:cc:b9:33:a3:cf:f4:35:d6:10:08:b1:ea:
                    7d:07:85:51:82:44:8d:cc:5d:a3:2d:bf:64:b9:20:
                    ed:3f:69:fa:00:42:9a:9f:78:9a:0e:59:34:6c:f8:
                    28:fd:33:5e:76:1a:86:4c:59:a2:7a:6d:ef:00:72:
                    c4:74:f8:0f:55:03:c8:39:e7:b9:b4:b4:cc:88:eb:
                    a4:b8:69:2e:28:07:5c:0f:d8:20:de:5b:14:5e:1b:
                    6b:aa:f3:eb:f3:ef:f1:cf:be:f2:18:48:0a:b7:2b:
                    89:fe:5f:f5:32:e2:68:cb:82:1a:12:4a:b7:96:95:
                    e0:d0:ce:1f:3f:08:1c:8a:bf:c4:5d:2f:77:e9:d0:
                    3e:ab:47:4e:96:ad:55:9e:f6:12:2c:48:21:f4:c9:
                    11:04:50:6b:20:31:bd:02:95:30:71:eb:79:6f:d8:
                    22:2f:5c:68:68:32:cf:41:a7:d3:a2:6f:a9:6a:5b:
                    1a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C4:37:96:86:8E:D1:F8:4B:F9:31:25:FF:AD:62:4E:9D:74:3A:B8
            X509v3 Authority Key Identifier:
                keyid:52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:16:73:87:eb:43:62:db:7a:60:88:ec:3a:32:35:73:a0:5b:
         6e:63:47:41:2e:9f:cd:c0:3a:90:94:fc:92:11:e0:b6:a5:1c:
         54:6e:87:19:1a:a4:0a:2a:1f:d6:51:1c:bd:9f:a4:8c:89:c6:
         ca:11:ee:b1:d2:d3:77:21:eb:db:e9:f2:8f:4c:3c:81:66:a5:
         52:39:10:08:40:d0:18:af:9e:34:b8:0e:0e:ec:ca:18:32:34:
         ee:48:c1:1c:db:22:95:1f:00:a6:43:e9:16:ea:2e:3c:2d:a4:
         1f:26:66:64:90:0c:f5:f4:00:48:7f:2a:90:1a:af:fc:e7:e7:
         ba:d6:4d:d8:1f:61:8b:52:82:18:32:a9:4f:ec:ff:0d:d2:cf:
         e4:7e:6c:31:01:20:2f:fa:ef:9b:7b:45:74:b4:72:51:9f:2a:
         fe:17:79:31:03:e7:6f:e2:8f:f0:33:54:b8:05:3c:fd:ae:62:
         5c:9a:b4:a5:33:6a:66:f9:c6:72:3d:48:70:72:ab:42:bc:28:
         44:71:09:4a:4f:25:ee:59:2a:bc:ba:80:ed:b7:90:a6:d7:c6:
         12:67:8e:ec:19:4f:02:f1:14:2e:c4:1a:75:87:cc:da:f9:26:
         f8:cf:55:1d:cd:b7:73:c3:64:bc:d4:46:07:87:fa:37:69:81:
         3d:8c:a5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:10 2026 by rpki-client