Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File:                     UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier:          PWC6feJt7jb3FzE5Ti5FVyrtPq5nS9rP4834jbFKE7U=
Subject key identifier:   0D:F4:10:82:A1:64:03:7B:D6:3C:03:50:32:49:CF:17:76:DA:3E:0B
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer:       /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial:       019E1F1166C6A7F4F82F70AE7DEC801A1BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number:          152E
Signing time:             Wed 13 May 2026 02:01:34 +0000
Manifest this update:     Wed 13 May 2026 02:01:34 +0000
Manifest next update:     Thu 14 May 2026 02:01:34 +0000
Files and hashes:         1: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: OsEHsqvjfwNg+q3LDqGYxHaoVALMCI4XhPmcZzvkYu8=)
                          2: brFnh3rq3SaqASoxymZGHF7hvHQ.roa (hash: lmozdC2cR8kjC76avAg5K/NKcOEBFp0Tuc3TVnelJ0g=)
                          3: r-wLcfbrV7gSA_iFZTlD40lbPxI.roa (hash: 9BuizisqfHZcVlGBCcKNw9NkVDpUfvizltmHgaebiwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:66:c6:a7:f4:f8:2f:70:ae:7d:ec:80:1a:1b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
        Validity
            Not Before: May 13 02:01:34 2026 GMT
            Not After : May 14 02:01:34 2026 GMT
        Subject: CN=0df41082a164037bd63c03503249cf1776da3e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:8d:7d:52:7f:97:44:0d:43:0c:f7:63:cf:
                    1a:86:72:95:f1:5a:d4:0e:aa:94:61:3b:14:a5:4f:
                    95:98:2b:e5:e3:52:d0:3c:25:31:66:f4:9c:59:d3:
                    51:ac:96:e1:ed:22:9e:82:89:37:e9:e3:83:24:2d:
                    db:b8:09:8b:b3:91:79:97:06:38:5f:27:db:83:6e:
                    f6:90:e9:39:9d:39:a0:96:ac:de:49:56:8c:dd:3d:
                    49:a4:6a:c0:52:69:6c:e1:1d:09:41:cf:f7:3c:ae:
                    c1:71:ae:64:96:59:52:41:f6:56:2d:6b:08:97:b8:
                    17:aa:df:8d:b8:c4:aa:9f:9b:31:7e:cd:a1:5e:6f:
                    16:81:dd:85:61:04:49:f8:7a:0d:c6:06:a2:18:f3:
                    a9:e2:1f:eb:1d:03:b0:1c:fb:25:4e:8b:31:d0:07:
                    3e:2f:fc:71:39:a3:1f:27:b0:49:07:5a:3b:02:f7:
                    9d:b8:81:e5:cd:6e:68:e9:f4:65:15:da:83:9b:9b:
                    3d:06:5f:43:9b:97:17:fd:0e:b3:08:6a:c7:68:8b:
                    94:1e:e9:61:ee:f0:2d:eb:89:82:50:b1:79:f9:81:
                    68:ef:94:c5:7e:3e:c1:c1:2d:43:64:34:92:a9:e3:
                    93:5a:c3:65:53:07:78:17:9b:54:79:43:9f:32:5f:
                    b9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F4:10:82:A1:64:03:7B:D6:3C:03:50:32:49:CF:17:76:DA:3E:0B
            X509v3 Authority Key Identifier:
                keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:fd:c3:63:91:03:c0:5b:6b:b8:7c:bf:99:21:94:8b:1d:
         5b:41:f3:ac:eb:df:e2:6d:7c:d8:16:bb:23:5e:95:e6:1c:cd:
         36:ff:9e:57:47:1c:ca:5e:a0:b8:8b:78:e3:cf:51:f2:69:c5:
         08:01:f8:9f:19:83:a2:91:17:7b:ab:cd:f3:14:dd:d3:5a:7e:
         1f:f9:65:22:32:d7:4a:41:9e:44:59:f3:8a:0a:ed:2a:95:67:
         8d:d5:64:34:be:b7:61:77:26:78:9c:e4:42:c7:26:4e:3c:60:
         bb:c7:ed:49:99:3f:26:e9:03:f1:79:fb:1c:54:1f:8c:6f:d2:
         e4:f9:7d:84:61:61:25:dc:c8:95:85:c8:0f:56:c4:62:1e:b1:
         e5:a7:94:e4:23:d0:2d:85:ee:08:ec:4c:f7:6f:61:48:d3:76:
         23:82:4e:2a:87:f4:b8:f6:2a:2c:63:1b:0e:45:09:0d:44:60:
         e8:72:fe:d6:85:50:5e:38:b7:40:89:57:6e:e4:cb:7a:6c:62:
         b2:4d:62:d8:78:c5:4b:ff:93:b1:62:cf:73:d0:a5:9c:db:aa:
         d9:f4:de:42:a4:fd:57:8c:07:57:cc:7f:5f:4e:c3:ce:f3:f1:
         2e:a0:71:fa:e0:74:c2:0e:4a:e3:b1:2d:30:cf:83:dd:48:1d:
         5d:de:e7:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEWbGp/T4L3CufeyAGhv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTQyZmJhMGMxN2I0MzkxZTMyOTZjNDM0YjVmZmYyM2E4
MjliNmUwHhcNMjYwNTEzMDIwMTM0WhcNMjYwNTE0MDIwMTM0WjAzMTEwLwYDVQQD
EygwZGY0MTA4MmExNjQwMzdiZDYzYzAzNTAzMjQ5Y2YxNzc2ZGEzZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjECNfVJ/l0QNQwz3Y88ahnKV8VrU
DqqUYTsUpU+VmCvl41LQPCUxZvScWdNRrJbh7SKegok36eODJC3buAmLs5F5lwY4
Xyfbg272kOk5nTmglqzeSVaM3T1JpGrAUmls4R0JQc/3PK7Bca5klllSQfZWLWsI
l7gXqt+NuMSqn5sxfs2hXm8Wgd2FYQRJ+HoNxgaiGPOp4h/rHQOwHPslTosx0Ac+
L/xxOaMfJ7BJB1o7AveduIHlzW5o6fRlFdqDm5s9Bl9Dm5cX/Q6zCGrHaIuUHulh
7vAt64mCULF5+YFo75TFfj7BwS1DZDSSqeOTWsNlUwd4F5tUeUOfMl+5kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA30EIKhZAN71jwDUDJJzxd22j4LMB8GA1UdIwQY
MBaAFFBUL7oMF7Q5HjKWxDS1//I6gptuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgt
NWU5Nzg3YjZhZWFhLzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgtNWU5Nzg3YjZhZWFh
LzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5n9w2OR
A8Bba7h8v5khlIsdW0HzrOvf4m182Ba7I16V5hzNNv+eV0ccyl6guIt4489R8mnF
CAH4nxmDopEXe6vN8xTd01p+H/llIjLXSkGeRFnzigrtKpVnjdVkNL63YXcmeJzk
QscmTjxgu8ftSZk/JukD8Xn7HFQfjG/S5Pl9hGFhJdzIlYXID1bEYh6x5aeU5CPQ
LYXuCOxM929hSNN2I4JOKof0uPYqLGMbDkUJDURg6HL+1oVQXji3QIlXbuTLemxi
sk1i2HjFS/+TsWLPc9ClnNuq2fTeQqT9V4wHV8x/X07DzvPxLqBx+uB0wg5K47Et
MM+D3UgdXd7nLw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:10:29 2026 by rpki-client