Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
File:                     uUQn2LeWZF92S05mvxmtOOSr7hw.mft (raw, json)
Hash identifier:          bNQ1nIezzSTYvMzZQeCF5jW+u41ZfwI9oSfe3tOuZr0=
Subject key identifier:   F7:2E:67:C6:4A:40:AE:AE:66:B5:07:C5:47:81:C0:CB:5B:D2:7E:9D
Authority key identifier: B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
Certificate issuer:       /CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Certificate serial:       019E1DC71865287BC5E5A12E826E642D6E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
Manifest number:          0255
Signing time:             Tue 12 May 2026 20:00:47 +0000
Manifest this update:     Tue 12 May 2026 20:00:47 +0000
Manifest next update:     Wed 13 May 2026 20:00:47 +0000
Files and hashes:         1: uUQn2LeWZF92S05mvxmtOOSr7hw.crl (hash: S0FT2Bc4cf7Lx1s2JaF11XJWOgxRuY+wAsnAkft5dxM=)
                          2: y8g_KNg4CQpGLUtViNE4UcIwqGE.roa (hash: 3BP+uFbBHzZ2F6fJMPn4trgJdQyNQ1NxWfOoEPvI+IQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:18:65:28:7b:c5:e5:a1:2e:82:6e:64:2d:6e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
        Validity
            Not Before: May 12 20:00:47 2026 GMT
            Not After : May 13 20:00:47 2026 GMT
        Subject: CN=f72e67c64a40aeae66b507c54781c0cb5bd27e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:18:e7:b3:3e:46:a3:9e:91:5e:fa:54:6b:
                    aa:4a:81:bc:6a:62:f0:94:71:2a:c6:d0:74:c7:f3:
                    fc:c2:29:1f:64:e1:86:92:a8:14:07:75:c7:73:0a:
                    5c:c8:65:ee:1a:2d:45:54:b8:4b:a8:f9:43:a0:27:
                    00:6f:1a:ad:e0:2d:51:2b:0d:19:df:57:bc:fb:db:
                    22:43:6a:38:9f:65:83:a5:48:38:a5:f1:93:03:5d:
                    7d:24:8d:66:a1:b2:74:cd:fb:1d:ce:91:07:bd:84:
                    19:83:0b:66:e4:74:ac:97:31:cb:1a:8a:3c:6a:ba:
                    2b:55:ec:52:b4:36:68:c9:b6:88:b8:bd:c2:47:e7:
                    b0:5b:6c:37:14:8c:1a:37:07:37:ef:1e:f5:76:be:
                    95:8b:7e:ca:ad:74:23:7f:b0:c7:c2:c9:59:57:e5:
                    7c:bb:3b:0a:d5:73:57:a8:5b:c4:c3:c4:d5:7c:1b:
                    fe:9a:ec:75:b9:a4:2b:69:19:47:42:61:65:f8:db:
                    4a:d6:fc:b5:b2:f3:26:16:06:d0:bd:fe:6d:f7:b4:
                    0a:cc:c0:dc:de:1a:16:12:f6:f9:b0:9f:0d:ee:b4:
                    56:1f:84:cf:8a:95:ef:7d:f8:c0:77:18:3f:9d:37:
                    84:a2:a3:d6:d3:f4:93:5c:01:c1:b7:02:0e:ce:55:
                    8c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2E:67:C6:4A:40:AE:AE:66:B5:07:C5:47:81:C0:CB:5B:D2:7E:9D
            X509v3 Authority Key Identifier:
                keyid:B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a4:33:fb:a9:28:9f:5c:3e:bd:5d:f4:15:ae:5b:a7:a6:57:
         4a:aa:0d:ee:fd:dc:cd:26:cd:5e:51:7e:81:b1:6e:8d:ca:bf:
         cb:4c:3d:17:07:28:51:88:f8:7e:b3:37:91:d1:57:82:a5:bc:
         17:84:31:61:0a:05:f5:26:57:06:d6:be:27:10:d2:53:1b:60:
         bf:18:b7:94:90:3d:38:c9:b4:71:1c:dc:c6:77:69:80:07:00:
         8f:a2:be:23:12:96:5f:a7:ec:1a:36:1f:89:85:a0:84:4d:0c:
         46:3c:aa:ff:25:70:f9:4d:fb:21:ea:33:60:19:97:72:dc:bf:
         d8:ab:37:b5:d8:1e:fe:df:38:29:12:81:b1:2f:97:00:18:29:
         4a:e4:2f:e5:a4:dd:5e:4c:0e:2d:99:7a:77:7d:00:88:5f:3b:
         50:77:c1:f6:d2:e8:80:c0:3c:6b:35:68:c0:80:02:ed:20:1c:
         39:e8:43:19:ee:0a:81:99:62:9a:b7:5c:67:f8:46:da:67:4f:
         f8:0e:69:a7:80:40:c1:00:2a:22:e1:4a:40:74:33:53:17:d0:
         50:08:80:8b:84:f5:47:51:4e:c8:00:64:35:8e:51:fd:56:c9:
         1d:a0:8b:94:4d:95:d0:b8:43:8e:0e:bc:de:77:69:0a:76:67:
         a4:8a:ea:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:41 2026 by rpki-client