Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
File:                     UgO7TxlYEfjXcjygGgsv-963Whs.mft (raw, json)
Hash identifier:          48oXS7ULxOan1q8lAYwaiuVm2R5+10SE6SLkeveKDFI=
Subject key identifier:   FB:7D:E5:14:05:C0:4F:AC:C8:17:D0:B7:B2:97:A3:F5:EF:DD:D7:A8
Authority key identifier: 52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
Certificate issuer:       /CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Certificate serial:       019E2023EFB3FF76926EB8B03226FA409E32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
Manifest number:          053C
Signing time:             Wed 13 May 2026 07:01:26 +0000
Manifest this update:     Wed 13 May 2026 07:01:26 +0000
Manifest next update:     Thu 14 May 2026 07:01:26 +0000
Files and hashes:         1: AcOd55sVqvOO3XHczvl-zosJmzk.roa (hash: e+MSkkLADvHFn1+ehMsTrvhCUFfbRzhM94S4F/DWLXY=)
                          2: UgO7TxlYEfjXcjygGgsv-963Whs.crl (hash: e406iIZ8sAfCZVAH7TKoVqufQt3hr3pA+qpQHDSN5z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:ef:b3:ff:76:92:6e:b8:b0:32:26:fa:40:9e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
        Validity
            Not Before: May 13 07:01:26 2026 GMT
            Not After : May 14 07:01:26 2026 GMT
        Subject: CN=fb7de51405c04facc817d0b7b297a3f5efddd7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b1:c3:b5:d6:4e:3a:9b:9b:37:63:30:bb:55:
                    e4:07:6d:ac:6a:b9:cb:05:24:25:bb:61:67:1f:b2:
                    7c:be:a6:b1:2c:ce:24:d2:76:74:a7:ed:c0:17:46:
                    66:1a:8f:3d:ae:2f:24:e7:bf:f0:64:5a:20:6b:3e:
                    b0:d3:ee:bb:39:9b:74:73:a4:7c:30:64:bc:15:8e:
                    f3:4e:7a:3c:79:a2:e3:59:35:c7:5b:64:13:a6:b1:
                    63:a3:f2:85:d3:8e:34:4a:d0:3b:94:34:8e:99:30:
                    e8:34:e5:08:bc:56:50:ab:6b:73:cc:c6:eb:1e:33:
                    1d:07:ee:50:f6:cb:ae:97:ff:f4:7c:a3:36:d0:67:
                    15:6c:e1:29:e0:87:0e:89:f5:67:a5:f1:e4:7a:c7:
                    ec:a2:80:ce:a3:03:63:6c:18:c3:7a:23:44:76:9d:
                    91:a7:eb:78:f6:04:a1:31:af:dd:08:df:4f:6d:59:
                    95:08:6c:46:d0:6e:98:24:0d:50:d9:33:19:c7:34:
                    3b:9d:88:83:df:f1:5a:b4:be:91:1c:ed:9f:fb:f2:
                    ae:77:71:5b:a5:90:9c:e8:d1:5e:e1:b6:cc:18:cf:
                    86:ce:09:af:bc:78:33:82:6b:25:fc:ca:c1:cd:e2:
                    06:9c:a3:6b:40:76:ee:bc:fd:5c:ec:b1:ba:56:15:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7D:E5:14:05:C0:4F:AC:C8:17:D0:B7:B2:97:A3:F5:EF:DD:D7:A8
            X509v3 Authority Key Identifier:
                keyid:52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:20:8c:6a:c2:17:9e:35:04:47:d9:80:61:47:ec:85:e3:b3:
         1a:ca:d9:58:90:77:51:65:1e:61:51:ab:58:08:00:fa:c1:f1:
         39:15:1b:91:fe:b4:12:dd:51:56:ee:95:12:a1:bc:7b:b6:9d:
         56:bc:f4:c0:4d:b9:e1:c9:12:32:19:6a:b8:c8:48:91:b6:87:
         77:ab:21:d7:1e:86:aa:be:ce:0f:a3:5a:4c:76:0b:37:bc:8a:
         18:7f:69:08:8b:cf:52:89:59:f0:a2:59:9d:63:3c:33:f8:33:
         19:33:d0:c5:3f:98:7a:d8:c7:f2:73:35:42:76:f6:eb:89:43:
         10:10:48:25:f6:5c:03:86:20:8b:70:3f:a5:06:b1:f5:c8:e2:
         05:86:0e:19:d1:59:ce:1a:1d:35:71:d1:e2:d0:9e:25:46:5c:
         8d:eb:60:0b:4a:37:60:76:fe:55:be:c2:a8:80:1b:91:67:f2:
         e9:b0:2d:1a:6d:ae:39:8f:46:b0:ba:8d:fb:72:0b:19:3c:e9:
         52:2d:f4:31:f1:4b:84:cd:0d:d8:da:73:47:f5:c6:02:dc:d9:
         43:79:e8:88:f5:7b:c0:b5:07:4c:22:a8:f2:b8:4a:c4:03:3f:
         e6:98:4f:5a:6f:e8:09:f2:28:35:74:c6:e3:97:72:38:cf:7f:
         75:24:a8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:40 2026 by rpki-client