Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File:                     UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier:          U2TUlCchdQQH0UBxq4MP4k41yhD6EQhHXFUnzQpKo/4=
Subject key identifier:   1D:78:85:06:6D:B8:F9:61:D5:24:13:02:BB:38:10:7E:07:96:4A:5D
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer:       /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial:       019E1F10B436B14A45C1BA83D92F28E896EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number:          0414
Signing time:             Wed 13 May 2026 02:00:48 +0000
Manifest this update:     Wed 13 May 2026 02:00:48 +0000
Manifest next update:     Thu 14 May 2026 02:00:48 +0000
Files and hashes:         1: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: 5g4Jt9/PxJpOVyynZwLL1C4MwlPqslB2UBlT4SQLK0U=)
                          2: s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa (hash: gFIZdnfNAaCxSgU4XX/5DvqZKxy3vUU3BhECHFZPGJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:b4:36:b1:4a:45:c1:ba:83:d9:2f:28:e8:96:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
        Validity
            Not Before: May 13 02:00:48 2026 GMT
            Not After : May 14 02:00:48 2026 GMT
        Subject: CN=1d7885066db8f961d5241302bb38107e07964a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:12:2c:d3:69:5d:19:29:4a:c8:f0:08:52:
                    d4:88:3f:32:81:65:e7:30:3a:ce:f3:c5:78:16:9b:
                    88:8f:46:cd:45:09:df:b0:24:db:56:55:57:80:8e:
                    5a:59:32:b1:40:3a:ef:60:7c:9c:99:a8:e8:b0:b2:
                    29:93:b6:8c:5a:6f:99:18:94:7b:fb:a4:8a:ee:5c:
                    b3:fb:1f:ba:0a:e0:55:f9:55:5d:31:df:80:2d:46:
                    4f:2e:39:b9:21:9c:cf:ad:9a:99:b9:a6:42:19:d2:
                    7f:b3:38:7b:27:04:76:e4:86:f2:c3:63:51:d4:98:
                    ee:e7:e1:43:33:bd:08:93:0b:74:af:fa:54:75:a6:
                    4e:54:00:91:12:ae:70:53:b9:f4:0e:a8:3b:b1:eb:
                    7b:59:29:f0:05:1f:8f:00:b5:39:fd:b8:d9:ce:0f:
                    c3:f5:93:25:e7:2e:b5:2e:44:9a:29:b7:f1:07:70:
                    40:5d:b7:76:a9:71:ef:01:8b:b2:19:c7:e9:03:05:
                    8f:64:15:c5:97:e5:00:62:cd:fc:3a:04:ae:17:e6:
                    df:a5:eb:a5:3e:c1:7d:59:9e:4b:6c:72:ac:14:9d:
                    9a:3d:eb:0b:27:da:a4:51:e0:ab:27:67:7f:25:c1:
                    45:d4:83:5d:a5:f6:25:b7:17:92:45:99:c5:64:99:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:78:85:06:6D:B8:F9:61:D5:24:13:02:BB:38:10:7E:07:96:4A:5D
            X509v3 Authority Key Identifier:
                keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:06:3e:6b:88:dc:40:5f:73:66:e3:87:46:47:c7:e2:a3:03:
         d1:bd:05:8a:b1:6b:5e:d3:96:78:34:dc:8e:1b:19:a0:bc:d0:
         19:af:04:7d:fe:f0:4b:49:ec:20:69:c5:a1:d1:51:d9:17:dc:
         44:8e:29:b1:1b:4f:4c:62:9e:0e:4c:2e:70:3c:ec:16:c6:86:
         b2:4c:0d:58:52:f7:08:a7:63:6b:dc:ac:66:dc:a1:50:30:9f:
         4c:1c:5e:ed:79:3d:51:32:3f:0d:34:ab:67:2c:15:da:27:08:
         cb:ca:2f:91:b1:66:2b:8c:37:5b:3c:cf:f0:e5:f7:eb:2f:61:
         d7:e0:3d:25:ef:6e:89:da:f1:8e:9f:c0:af:74:b0:f9:43:88:
         ff:2e:0d:7b:6b:35:f8:be:f9:7f:7a:22:0e:f9:bb:fa:af:ac:
         e6:77:cc:ad:1d:67:c3:57:0e:07:52:38:3f:ce:5f:c4:d4:ae:
         5b:e8:1e:31:0f:75:d1:28:ff:19:88:e8:b8:14:9a:30:a9:fc:
         24:96:8a:f2:a3:6a:cc:b8:b1:18:a4:27:fe:05:b6:ec:2b:14:
         9c:91:94:75:7e:8f:70:53:c9:eb:4f:3a:3f:81:3d:ab:17:f7:
         82:5d:de:24:20:4c:a5:40:38:86:07:52:57:44:c0:15:24:75:
         40:d6:49:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:16 2026 by rpki-client