Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
File:                     uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json)
Hash identifier:          l5UnuJPwW3/UNJ7pWOFHKOQUEmB+K3FK/1gLdzlMZPI=
Subject key identifier:   E2:E8:E0:41:DD:02:F4:40:8A:94:4F:DE:BD:B6:E1:E6:D5:AC:91:C9
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Certificate issuer:       /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial:       019E1F11861578688C0AD631C71B42B47174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
Manifest number:          0957
Signing time:             Wed 13 May 2026 02:01:42 +0000
Manifest this update:     Wed 13 May 2026 02:01:42 +0000
Manifest next update:     Thu 14 May 2026 02:01:42 +0000
Files and hashes:         1: 8pZUXvACu9QhvKuW-qMjjg-zMpg.roa (hash: 0/gavMRZtZdbhY3KH3ekU0vMqEL7/EvqYK9+J6uWS6E=)
                          2: G-toJfPo5_lPvfgOuGF2O7gK5MU.roa (hash: f/HsVZaK7DlKBZfvaInpx95ilwjwGX/MKV/SRXvYXG8=)
                          3: GSvze0OvgyB86_aIjXE_zYpEcJ8.roa (hash: i0T9AmgsVXvoJ7juXc0u6ILs8JxVxErhczJ27Ywnx4c=)
                          4: WEBxfBgljdO2-_OPHWGZu1V4u-E.roa (hash: nt1blU8jTILJsm/QWLFQx/HjDxyXCoII44gqy3P+yHo=)
                          5: daB6TCjb0g5mJAh5C9L7PP2C3bU.roa (hash: LCCpR6Wg5909zrCuVhiyOKBdbzncNfnlYiYr8mrOsJg=)
                          6: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: f/pgSn8ryEq+RJh5jLzdh4C98988AbGRD8Wa+Twb18I=)
                          7: yvd72ao7oZeloqF7PcjwFXQOaKg.roa (hash: p8n/0jBEU3JxwNl8gzkR0TyAriDfbE7fJ2mPGP83LhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:86:15:78:68:8c:0a:d6:31:c7:1b:42:b4:71:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
        Validity
            Not Before: May 13 02:01:42 2026 GMT
            Not After : May 14 02:01:42 2026 GMT
        Subject: CN=e2e8e041dd02f4408a944fdebdb6e1e6d5ac91c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:15:5d:be:34:28:19:31:a3:70:06:c1:38:68:
                    39:48:13:ac:01:e4:b5:04:b6:bd:5c:a5:72:2a:1d:
                    c0:eb:5f:3c:11:bf:12:70:fe:74:53:9e:50:e9:7f:
                    eb:c7:7c:ca:51:91:13:c6:f6:b6:2f:a8:fa:52:35:
                    66:8d:0d:2d:e2:64:5d:53:d3:3e:ef:2d:49:4e:15:
                    cb:e9:5d:dd:5b:3d:fb:4e:28:5d:54:23:a3:2f:27:
                    78:23:0b:af:11:0f:01:5a:d1:0b:b5:b6:3a:fd:f1:
                    6f:68:e2:43:d9:97:fa:a6:36:59:50:08:54:0e:0e:
                    bf:77:58:52:ca:5b:19:c8:7b:56:f0:f4:52:99:ec:
                    3e:99:c3:df:65:f8:42:45:9a:e6:d2:73:70:a7:87:
                    20:17:37:03:48:eb:bb:c7:59:99:8a:2e:76:7c:be:
                    90:95:e0:e6:94:69:43:ba:15:e5:99:87:7a:a3:aa:
                    67:3e:77:0d:51:f3:ad:a5:76:28:89:23:0f:3a:35:
                    5a:26:5f:ba:63:aa:a3:9b:01:17:3d:37:f3:80:22:
                    11:a0:77:fe:6d:61:39:85:a4:ae:72:ab:e5:8e:ff:
                    f9:5d:fb:77:f6:91:ef:bd:8a:cb:55:7e:72:50:81:
                    6b:dd:95:09:f1:09:ce:09:65:dd:ea:96:7c:57:3e:
                    7f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E8:E0:41:DD:02:F4:40:8A:94:4F:DE:BD:B6:E1:E6:D5:AC:91:C9
            X509v3 Authority Key Identifier:
                keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:8a:28:4f:af:22:cd:3b:85:8a:9d:9a:b1:74:84:f2:56:
         c0:d6:27:ba:da:1e:6e:33:90:1f:4d:33:5d:b7:c7:a3:ef:c2:
         71:fc:e6:d8:17:79:cc:23:68:28:80:34:ba:00:7f:4b:58:76:
         9f:06:f1:5e:04:42:c5:b2:c9:4e:b8:21:91:45:47:5e:f3:75:
         13:32:0f:61:12:14:d7:13:e6:71:21:d7:8c:cd:57:a8:57:5a:
         e0:51:7b:36:29:03:b9:16:f8:23:55:89:6c:ba:2d:b7:d4:31:
         e8:08:1a:2f:d4:c9:51:11:c6:62:75:9b:1d:a0:87:7e:fc:81:
         53:3d:16:52:ef:09:a1:c9:da:7a:61:c9:96:f1:17:36:e7:40:
         9f:f8:cf:46:9c:57:bd:c6:b8:6c:62:20:ab:b1:7a:81:87:28:
         f4:27:26:ba:56:62:7a:7d:64:66:9d:7d:5e:45:7c:e7:1f:b1:
         8e:40:94:3a:1c:f0:5b:f8:45:1f:62:bf:9d:85:19:19:1e:0b:
         81:30:82:ac:ed:91:e7:93:dc:f1:fd:6b:55:ab:32:0a:ad:1d:
         5e:f6:a1:6c:17:d6:3f:aa:7f:bd:c3:8a:79:97:af:01:00:4c:
         c7:cb:4b:96:c8:18:a1:a4:ab:6e:07:a6:4a:01:a8:2b:dd:49:
         ea:20:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:12:40 2026 by rpki-client