Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
File:                     U0lylWvf-DsNiB4Br9PWxSZR4Es.mft (raw, json)
Hash identifier:          x753iNpnmXOyWOfkFc9ailL0syYfAoHvs40hr82KrrY=
Subject key identifier:   BE:F2:49:C3:99:15:4F:3C:3F:15:7D:24:C5:A2:6C:CC:C3:0A:DA:15
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Certificate issuer:       /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial:       019E1EDA8187F17ADA2F22C59414A33E0DE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
Manifest number:          09B5
Signing time:             Wed 13 May 2026 01:01:36 +0000
Manifest this update:     Wed 13 May 2026 01:01:36 +0000
Manifest next update:     Thu 14 May 2026 01:01:36 +0000
Files and hashes:         1: U0lylWvf-DsNiB4Br9PWxSZR4Es.crl (hash: Pzv5NY15JQCaPAVdWj1SGGREEeLUlOUwQDGnFOY9AZo=)
                          2: r2FzkDk8bJYrPqzaqgtlaBonfqk.roa (hash: f1HN7BXYId6gEL/AZojIIht1vxFDri+lbHrSLek1YkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:81:87:f1:7a:da:2f:22:c5:94:14:a3:3e:0d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
        Validity
            Not Before: May 13 01:01:36 2026 GMT
            Not After : May 14 01:01:36 2026 GMT
        Subject: CN=bef249c399154f3c3f157d24c5a26cccc30ada15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:3f:bf:fb:02:03:2d:36:c7:f6:62:72:ba:
                    61:6b:56:a1:e4:3b:78:5f:7c:02:45:4d:67:14:d2:
                    9d:d7:76:5b:6f:16:a3:12:b6:a8:a8:5c:d6:62:21:
                    03:4d:9f:1a:90:56:30:e5:95:7f:50:19:25:30:dd:
                    9b:a1:b6:99:84:0e:dc:02:85:6b:7b:c9:cf:26:d9:
                    67:fd:78:c5:01:fe:47:82:06:bc:be:ad:f5:d9:d8:
                    ad:03:72:d7:71:5a:a7:a9:45:36:2b:6e:81:00:52:
                    8c:0a:fb:e6:e6:a9:67:5d:cb:1b:82:5c:6d:30:3e:
                    22:bf:5f:5a:4e:5c:d1:8b:60:30:a4:8e:5a:4b:6a:
                    cb:4e:80:94:2c:ea:3c:38:02:60:30:c4:1e:ba:da:
                    98:f5:b0:8c:20:6d:c4:0b:e4:02:c2:ed:eb:0f:4b:
                    eb:e0:e9:3d:0e:db:3c:84:2e:e3:d9:b2:3b:03:db:
                    6b:7e:bc:65:db:55:ce:8f:84:d5:9f:55:6f:77:0c:
                    c1:45:25:e4:43:20:1e:a6:5b:a7:05:b1:54:e7:26:
                    bd:e9:fc:95:9c:72:7e:99:a3:45:fb:53:1a:9a:15:
                    c9:7e:f4:67:a7:bc:b4:3f:90:64:af:da:ec:d1:37:
                    6c:01:81:ce:cc:0a:b8:af:0b:a1:80:a4:b6:c3:3a:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F2:49:C3:99:15:4F:3C:3F:15:7D:24:C5:A2:6C:CC:C3:0A:DA:15
            X509v3 Authority Key Identifier:
                keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:83:b0:c3:fd:64:01:70:30:aa:7b:7d:03:5c:f1:1d:b0:f6:
         ce:ed:9e:44:53:a4:a6:64:ae:01:aa:32:57:98:92:f3:9d:02:
         ce:7c:29:c4:d7:53:5d:4f:ea:65:17:e2:16:27:d1:fe:24:7d:
         89:d2:e9:f6:b5:8b:a3:fc:ee:2c:5d:51:a4:f5:26:ab:30:67:
         b0:cd:a8:9d:75:f3:93:88:0f:4b:e0:64:86:b2:48:96:5f:3b:
         8e:57:6b:90:55:8d:94:09:c8:26:c4:7a:12:7a:28:03:36:c0:
         f9:a2:14:38:fc:b2:9f:9c:36:6a:8b:86:8c:30:91:3c:7d:81:
         e7:74:25:d6:f9:11:64:d1:88:fb:1e:1c:60:92:05:1e:7c:16:
         e3:1d:4f:a0:df:a4:d4:dc:df:0d:a4:c5:62:e1:f0:f5:bf:7d:
         12:d2:c3:9a:e7:5d:87:39:a4:50:27:88:88:be:8b:43:81:18:
         54:63:ff:d0:5f:9b:e1:95:28:13:6b:c1:22:ba:a1:97:e6:fc:
         53:4d:e4:56:98:d9:6b:fb:c4:a8:18:86:18:ed:bf:67:d6:aa:
         90:90:bb:e3:ce:3c:f4:32:ae:b2:cc:9a:63:15:0f:1b:3b:cf:
         f8:32:62:95:f0:f2:9e:67:27:83:95:14:fa:3f:81:d4:4e:6d:
         b0:77:eb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:01 2026 by rpki-client