Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
File:                     2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft (raw, json)
Hash identifier:          /8UT2sHdZmrWEymHXMcO+HKUO6p5cG91FRO6F8/4RnM=
Subject key identifier:   C8:FD:06:CE:26:EF:84:B4:E0:00:80:69:A1:83:7F:02:16:44:31:4A
Authority key identifier: D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E
Certificate issuer:       /CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
Certificate serial:       019E1CB49892050CC929D3728DDDEDAA6A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
Manifest number:          122E
Signing time:             Tue 12 May 2026 15:00:57 +0000
Manifest this update:     Tue 12 May 2026 15:00:57 +0000
Manifest next update:     Wed 13 May 2026 15:00:57 +0000
Files and hashes:         1: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl (hash: nRvwDUF3Dhu2dNGDr9XbgD/53GaLkbBDKeC+ua92onE=)
                          2: eI1TfXKJJjbPAxbPrjONicZptUI.roa (hash: Y1zpjxcPPaHmDlUK3ZwaUZS5k7qwhiP3vZdCGMyYu54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:98:92:05:0c:c9:29:d3:72:8d:dd:ed:aa:6a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
        Validity
            Not Before: May 12 15:00:57 2026 GMT
            Not After : May 13 15:00:57 2026 GMT
        Subject: CN=c8fd06ce26ef84b4e0008069a1837f021644314a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:28:95:a1:d3:32:85:b8:90:9d:03:bf:8d:
                    e8:20:fa:db:bd:24:36:e9:ea:fd:6c:1d:60:0a:f5:
                    5c:f2:ab:d6:8c:db:a2:8e:16:ff:91:18:59:fa:62:
                    5e:bd:cb:97:bc:4e:5d:e0:42:ce:60:e3:6d:0f:82:
                    4a:99:43:1f:95:ea:50:e9:58:81:bb:44:90:a4:a1:
                    54:5e:38:c5:a4:88:25:54:a2:09:c8:b4:c0:d0:af:
                    e0:6b:56:e4:bd:2a:06:57:d9:2f:9c:01:55:14:f9:
                    99:2c:16:82:fd:a3:af:ea:ef:80:16:34:d0:c0:d8:
                    b4:e3:cf:25:7c:8d:49:e9:d2:b0:dd:a9:c6:28:02:
                    bb:e9:01:fe:71:94:cd:09:a0:57:8c:40:ac:d6:a9:
                    6d:c9:f5:ad:fd:0e:58:54:7e:04:4c:60:0a:9e:8b:
                    4c:1b:20:5f:28:f1:01:7c:53:91:3f:7e:03:42:5e:
                    57:c9:11:36:6a:1a:0c:e6:70:e5:86:9e:e9:ac:26:
                    e5:be:11:70:63:50:79:47:f4:ec:7d:17:53:e8:98:
                    55:f0:d3:9d:e7:51:ab:ba:f9:0d:1b:1c:bc:49:38:
                    fe:24:1a:72:86:12:a9:7b:bb:5c:8b:07:bd:8f:79:
                    79:67:32:cf:9b:d6:82:f8:11:a3:b5:dd:96:00:27:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FD:06:CE:26:EF:84:B4:E0:00:80:69:A1:83:7F:02:16:44:31:4A
            X509v3 Authority Key Identifier:
                keyid:D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c9:10:77:08:ba:64:50:93:0f:56:8d:e0:aa:60:bd:0d:d3:
         eb:38:7d:d9:2d:78:57:0c:d9:d7:03:d5:be:57:7f:e6:80:2d:
         c2:41:51:0f:1a:32:af:7d:94:92:ed:ad:90:1d:77:91:c7:8e:
         a3:1d:2a:7e:b5:59:98:09:b2:dd:2d:3f:62:d1:a5:ce:2d:5d:
         ee:88:b7:1b:40:1d:7c:3e:29:4c:c5:4a:50:28:e6:45:8c:36:
         3a:c4:b3:8f:c1:6b:b4:08:4c:a1:74:9e:52:cb:4c:51:b7:14:
         6e:15:be:17:13:8c:3e:b3:01:a0:6e:90:c4:d1:89:95:c5:05:
         66:2b:c3:05:1d:b5:b8:3a:d0:f2:8f:e6:2f:17:42:2d:dc:8f:
         a4:b1:e6:d4:81:63:b4:51:c8:9c:10:fb:8c:28:a1:a1:74:66:
         5e:cd:25:91:85:11:c0:8a:20:b2:9c:cb:1b:60:32:40:55:6d:
         ee:50:0d:55:47:a0:0a:c5:7e:c0:23:15:b5:5b:cc:b8:d2:0a:
         3f:ff:1d:70:e5:0b:04:3b:d8:8c:2f:86:ed:3e:62:dd:9b:6b:
         51:e7:2b:cb:9f:0d:0f:ec:77:57:93:64:88:0a:1f:3a:d5:38:
         4c:ed:64:10:f0:1c:38:72:08:74:31:2b:5d:98:6f:d5:35:46:
         a9:a1:4a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:23 2026 by rpki-client