Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
File:                     UyQUSSuyz6QI_1c6oGj8-aXneO4.mft (raw, json)
Hash identifier:          DVMYwWkIVY9CsJeil48f5Ir68+v/I/zPFTR6LP8QRtw=
Subject key identifier:   A8:65:9D:9F:6B:96:D6:F7:A5:64:33:68:8B:C8:35:ED:E9:61:51:11
Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
Certificate issuer:       /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Certificate serial:       019E205A1E29F5644BB218DD24ABB9D10742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
Manifest number:          1258
Signing time:             Wed 13 May 2026 08:00:37 +0000
Manifest this update:     Wed 13 May 2026 08:00:37 +0000
Manifest next update:     Thu 14 May 2026 08:00:37 +0000
Files and hashes:         1: 1-vw_YpjLtL2osMGBDqhaMbBPjy0.roa (hash: y1eYYcI99eIq1QFUMBnmXcbeI9owv4tyUVDJFPBTheQ=)
                          2: UyQUSSuyz6QI_1c6oGj8-aXneO4.crl (hash: QxgG8ia0iUFnfX7b3VEVPiqK3IzBzrZQA4UApcUCVCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:1e:29:f5:64:4b:b2:18:dd:24:ab:b9:d1:07:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
        Validity
            Not Before: May 13 08:00:37 2026 GMT
            Not After : May 14 08:00:37 2026 GMT
        Subject: CN=a8659d9f6b96d6f7a56433688bc835ede9615111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:c7:2a:a1:fd:1b:1b:f6:b7:27:04:5d:18:
                    9e:41:d3:6d:aa:ba:f6:27:b9:64:9e:94:d6:5e:c3:
                    57:d2:61:1e:55:0f:bf:9a:51:b2:bb:a7:90:c8:23:
                    c9:2d:db:d1:97:83:89:ca:c2:1f:a8:6e:ca:92:aa:
                    9c:45:f6:65:41:a6:27:09:93:78:e0:ab:f4:7f:55:
                    c5:ea:f4:45:70:e7:0d:a0:c3:e6:ab:e3:05:96:7b:
                    91:e0:ad:08:4a:03:a3:12:4a:0a:e5:89:cf:7b:f1:
                    dd:1c:6e:16:53:a9:9d:1a:03:81:8a:1d:81:ed:b5:
                    53:81:1d:59:c9:28:83:95:80:76:4a:81:04:01:e1:
                    3e:b5:00:36:1d:0e:19:23:99:55:be:7d:b6:97:96:
                    25:56:72:78:8b:05:8a:2f:51:92:15:f4:b7:cb:01:
                    83:46:83:a7:eb:a7:ae:10:08:1d:81:7c:3e:0d:df:
                    ff:67:4b:b6:fd:25:7e:54:22:6e:05:9e:da:94:b4:
                    27:c8:e1:c6:93:cf:52:01:83:d6:58:08:03:85:36:
                    17:d6:03:66:a9:70:29:94:2f:b2:e9:80:27:b4:07:
                    71:a7:ba:2d:95:a3:f0:8f:52:10:22:a6:6a:9d:f0:
                    20:35:10:e6:a7:bb:24:fb:18:93:18:26:03:4a:d9:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:65:9D:9F:6B:96:D6:F7:A5:64:33:68:8B:C8:35:ED:E9:61:51:11
            X509v3 Authority Key Identifier:
                keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:18:9d:b5:03:53:70:3d:d3:e5:8b:1f:22:5f:12:cb:05:2e:
         31:25:cb:f0:5e:7a:77:a7:0b:90:b9:4c:88:9f:eb:31:c3:00:
         1f:02:29:22:51:bb:b0:6b:9c:3c:44:01:bf:87:da:95:a4:5f:
         97:af:9d:2f:49:11:7f:c2:03:e2:99:d2:98:b6:8a:bf:69:74:
         19:d0:26:ca:3c:30:7b:cf:ff:b5:2c:f9:13:4b:f7:cc:51:14:
         ba:22:68:5f:cb:6d:7a:4b:2e:38:98:f5:2c:7a:f0:a9:fe:e0:
         c0:24:68:45:d1:f5:fd:af:a8:b0:4a:70:aa:6c:54:23:64:7c:
         d3:19:9d:73:9f:34:fa:99:6b:82:37:06:29:21:3f:6b:6d:32:
         3f:5b:fc:d8:9c:72:a5:cb:73:c0:78:1e:47:ab:5e:11:7b:78:
         8c:f7:04:0d:e8:0f:db:c8:4e:7d:90:4a:7a:8b:da:26:fb:92:
         fe:34:4e:0e:ac:57:52:f3:76:a7:1c:18:37:af:e1:8b:fc:6b:
         56:fc:b8:1a:0a:48:5c:88:32:0c:05:ca:5c:07:f9:6a:ad:b1:
         86:d6:f6:c3:f4:55:7e:e0:81:05:90:a8:35:16:f3:b1:97:b6:
         6f:d0:0c:41:74:28:d0:8e:4a:37:d0:88:36:e1:12:a2:f0:c5:
         5b:57:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:54:14 2026 by rpki-client