Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
File:                     UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json)
Hash identifier:          xOwXHh9HTDN+KXk2VDZAsT9BqElkaMBCQMPknSvRqdo=
Subject key identifier:   3F:2D:B3:64:AC:D4:F2:F7:26:43:89:2D:12:05:C8:9F:D1:83:DC:5F
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Certificate issuer:       /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial:       019E1F10A97CD83719F725EEF2E7FE0AA599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
Manifest number:          1293
Signing time:             Wed 13 May 2026 02:00:46 +0000
Manifest this update:     Wed 13 May 2026 02:00:46 +0000
Manifest next update:     Thu 14 May 2026 02:00:46 +0000
Files and hashes:         1: Ej04tqIea-55QGqR9P8U_IWSz5E.roa (hash: 56Ay1dz7+2/hrBe1gefM4Z9MpRY5OP2aiLGQZC5nqmk=)
                          2: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: ve38LdZoJtAmsbyc3iQCSgtWeDEiOr/hUrLL9yQxTQA=)
                          3: bKZux_GRyhQisliOyg0o3pomUGE.roa (hash: UT5otdZIy6+fjq+k6mHMr69f+BiRVOr2Dbn8liI5eMU=)
                          4: eed8-v0DQQsIlGh_LdKlEMEvsTw.roa (hash: ryiQISgXOOgfkizItwqCf8st8jseYCZTQbYCWpyKpsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:a9:7c:d8:37:19:f7:25:ee:f2:e7:fe:0a:a5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
        Validity
            Not Before: May 13 02:00:46 2026 GMT
            Not After : May 14 02:00:46 2026 GMT
        Subject: CN=3f2db364acd4f2f72643892d1205c89fd183dc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:bf:15:5b:64:7b:1f:02:a2:06:ff:4f:ce:
                    ef:46:c0:35:80:de:59:4f:46:81:8e:f8:e2:92:4c:
                    f6:56:0c:e1:55:91:e5:92:34:cf:52:b6:39:b0:be:
                    92:10:48:f4:b8:a8:9e:db:99:98:90:56:20:6f:b0:
                    4e:40:5d:f8:13:dd:73:84:a8:0a:c6:a2:04:9c:bb:
                    a6:e0:0c:2f:e8:31:5a:fe:c5:ab:05:17:43:4d:da:
                    f0:99:60:8e:1a:0e:3e:89:d4:b9:f7:4a:2a:0d:d9:
                    6f:e5:28:14:42:5f:d9:9b:3b:f5:a5:66:57:a7:74:
                    0d:af:34:5d:1d:c4:27:89:b4:3b:a3:6e:ea:cd:cb:
                    c9:ae:6b:44:a2:3f:6a:da:62:28:15:2e:69:05:99:
                    9d:f9:22:82:3c:ba:dd:cb:ff:62:21:19:cb:84:f3:
                    10:45:5c:0b:b1:5d:b6:53:b5:af:7a:92:4a:c4:19:
                    c7:78:28:8a:49:b4:8f:9d:e6:bf:a1:6b:5a:1d:f4:
                    85:11:f3:96:bb:95:2d:94:65:6f:70:5f:b9:d1:a6:
                    6f:3b:65:2b:c1:61:b2:1b:c5:51:fe:7e:bb:77:8d:
                    fc:cc:77:cb:ff:2b:d7:26:4c:56:0d:1a:ef:ac:22:
                    45:ad:73:40:f2:5e:c8:7b:4d:09:7d:5a:01:3b:41:
                    e9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2D:B3:64:AC:D4:F2:F7:26:43:89:2D:12:05:C8:9F:D1:83:DC:5F
            X509v3 Authority Key Identifier:
                keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:74:fa:26:56:d5:04:4e:ae:47:2d:45:36:23:69:20:32:28:
         e1:61:ea:4d:a6:4b:c9:56:48:b0:7e:74:d9:e1:b9:de:80:a1:
         bf:5c:12:8f:f4:b1:6d:6d:c4:7b:a0:fb:58:b5:62:ec:64:b9:
         ca:aa:4f:01:1f:db:24:06:89:34:9e:e1:ea:e7:f7:d0:57:6f:
         73:e6:65:d4:a8:c5:1d:9f:62:f6:c3:c0:29:0c:d2:8f:dc:93:
         02:53:a7:db:eb:c8:2c:34:7c:58:e4:63:16:d9:03:4d:2e:b5:
         d4:0f:08:65:27:f6:0e:31:6a:da:a5:02:4b:00:3e:9d:fb:42:
         a5:22:30:1f:c2:55:7c:0c:d1:d5:ac:db:2a:04:3b:9b:42:91:
         fb:4a:9e:b3:dc:7b:cc:3b:fb:f9:38:99:d0:42:82:e1:15:f8:
         3f:27:49:9a:c0:70:48:1a:27:96:bc:3b:f8:71:35:25:ab:6b:
         d7:63:96:32:d1:27:a3:f1:3d:3b:c4:1e:6f:97:4e:3f:81:1e:
         76:69:a2:13:be:11:3d:ae:6f:93:20:6e:56:47:99:8f:40:b0:
         e5:b0:9c:f9:d1:48:12:52:b0:eb:9d:2c:72:de:ee:30:7d:eb:
         81:21:a6:bc:71:02:8a:82:97:27:6e:bf:19:69:33:57:28:c4:
         85:1e:6c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:40 2026 by rpki-client