Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          sSDzNPdmvb7V6YkfTv8N6LrS7THZinrhAa2nn2MzsM4=
Subject key identifier:   4A:0E:67:BC:11:CE:8B:DB:B0:43:2A:10:3C:8C:87:0B:F7:BC:99:9A
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       019E1F10B2057933C123190EB8D8C3CA1888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          1914
Signing time:             Wed 13 May 2026 02:00:48 +0000
Manifest this update:     Wed 13 May 2026 02:00:48 +0000
Manifest next update:     Thu 14 May 2026 02:00:48 +0000
Files and hashes:         1: 0d6SiGZ_3HskVJZrwW4LAUnPhVk.roa (hash: sH5j+6BmvxKro4kCtZa6p73msltGzoMgNQq57Mh0jXE=)
                          2: GBJMnjMbFvL5E-lL9i3lBFi6nWY.roa (hash: SL+iSObRv/yIgCUc1iePoCbQgwvJ0km8l952y/nYPkY=)
                          3: IY7fhcpZn8V1nFJzcjkAB2G_wy8.roa (hash: kypNUV6hOKnyhwHaYDOZf/jJOmWZK2acEUl1kQxKdoM=)
                          4: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: ABQt7hTJdxpTvYn3UBIjeBCBzT6hey0HBfgYenh3QvQ=)
                          5: ZDSwaO2zu2qpiNoQdfHO9f__qXE.roa (hash: /yuwN8mjkUUOdBbxmmKWCbuEc9CKVHYeB+reIdnpnsM=)
                          6: qfnbY9JngbTP144k13tCg-IRl3w.roa (hash: 9MKZ2wZQrvJYgyQxGjaYnWmRu2eM+70F1EApasiltnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:b2:05:79:33:c1:23:19:0e:b8:d8:c3:ca:18:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: May 13 02:00:48 2026 GMT
            Not After : May 14 02:00:48 2026 GMT
        Subject: CN=4a0e67bc11ce8bdbb0432a103c8c870bf7bc999a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:9b:59:ed:c1:7c:50:0a:02:15:2e:4e:3b:
                    63:3c:e0:5b:0c:2d:78:5f:0f:81:58:f5:ff:fb:37:
                    46:4a:95:ea:86:e3:79:9a:97:92:9c:5e:41:e5:22:
                    3d:9d:4e:06:50:e5:d4:3c:fd:53:36:f8:e2:f8:a0:
                    66:cb:c7:29:9a:f9:22:fe:8d:b0:19:70:8e:af:ce:
                    1e:66:6f:29:a5:ac:c4:1f:0f:60:06:a5:1b:65:34:
                    c7:2e:af:00:df:76:ba:50:02:c9:ca:02:d9:b0:83:
                    3e:ef:30:78:57:a3:28:1e:e3:23:af:dd:7c:3a:fb:
                    6f:99:eb:fe:86:a9:f2:40:27:fe:23:0b:5f:83:33:
                    c0:f7:8f:da:7f:eb:03:00:05:0e:34:44:f7:1b:a5:
                    5b:51:bd:6d:4f:a0:2e:7e:aa:76:dd:82:77:00:d9:
                    bb:14:01:10:81:cf:e4:3a:36:3c:52:87:2f:24:0e:
                    36:19:e2:2d:6e:f2:85:8d:37:14:9a:65:2c:d1:ce:
                    b4:61:e4:be:49:6c:a4:c7:cc:a4:c0:17:34:cc:87:
                    80:3e:48:e7:9c:e3:af:9d:0b:1f:e2:e2:f1:83:60:
                    24:03:1a:80:14:5a:6c:24:a7:eb:a9:8c:3c:5e:9a:
                    66:a3:70:f4:e4:83:42:5e:0c:65:3d:f5:8d:a4:1b:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0E:67:BC:11:CE:8B:DB:B0:43:2A:10:3C:8C:87:0B:F7:BC:99:9A
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b8:2c:03:70:93:4f:44:e6:d5:b9:13:03:85:3b:89:6f:5e:
         ac:1b:14:cf:91:3a:a4:5c:a0:ea:8c:ec:7b:42:f9:a0:77:72:
         0d:e5:f9:79:fa:60:f3:82:59:7b:0d:0b:3a:5a:d4:cc:7d:db:
         2f:e5:74:45:40:b6:2b:a4:fc:0a:ab:91:e8:d4:f5:8b:d3:38:
         af:05:09:7e:63:89:af:58:51:fd:44:1a:74:a7:b2:70:f3:6c:
         bd:63:a7:95:f3:76:ed:fa:3a:67:0f:97:0c:3b:04:94:b5:3f:
         36:00:aa:66:17:d4:67:43:e7:4f:b8:e3:97:da:d2:6e:38:08:
         4c:48:cb:60:73:6b:da:ca:08:94:9e:5d:05:82:78:3c:55:fa:
         bf:58:14:c0:a9:e3:8f:17:59:c6:e5:09:58:0b:bf:97:d0:3a:
         11:ba:10:a0:68:72:ec:76:c0:63:e7:3c:72:23:70:1d:ee:2e:
         dd:5a:8d:e5:9f:f4:38:97:0b:96:f0:ce:d3:3a:b0:0b:6a:b1:
         d5:7c:69:9d:34:e8:39:f3:30:a5:14:3d:19:32:4c:ca:8a:d8:
         d6:96:cf:88:46:be:ee:33:ec:24:ac:bd:cf:66:ec:0a:dc:cf:
         bd:5d:5b:96:72:4e:4f:63:82:55:1e:fc:22:d2:97:5b:ac:f5:
         67:78:6f:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fELIFeTPBIxkOuNjDyhiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi
MjczYTEwHhcNMjYwNTEzMDIwMDQ4WhcNMjYwNTE0MDIwMDQ4WjAzMTEwLwYDVQQD
Eyg0YTBlNjdiYzExY2U4YmRiYjA0MzJhMTAzYzhjODcwYmY3YmM5OTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAibWe3BfFAKAhUuTjtjPOBbDC14
Xw+BWPX/+zdGSpXqhuN5mpeSnF5B5SI9nU4GUOXUPP1TNvji+KBmy8cpmvki/o2w
GXCOr84eZm8ppazEHw9gBqUbZTTHLq8A33a6UALJygLZsIM+7zB4V6MoHuMjr918
Ovtvmev+hqnyQCf+IwtfgzPA94/af+sDAAUONET3G6VbUb1tT6Aufqp23YJ3ANm7
FAEQgc/kOjY8UocvJA42GeItbvKFjTcUmmUs0c60YeS+SWykx8ykwBc0zIeAPkjn
nOOvnQsf4uLxg2AkAxqAFFpsJKfrqYw8Xppmo3D05INCXgxlPfWNpBvuOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoOZ7wRzovbsEMqEDyMhwv3vJmaMB8GA1UdIwQY
MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt
MTNlZDYzM2Y5MjJhLzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh
LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbgsA3CT
T0Tm1bkTA4U7iW9erBsUz5E6pFyg6ozse0L5oHdyDeX5efpg84JZew0LOlrUzH3b
L+V0RUC2K6T8CquR6NT1i9M4rwUJfmOJr1hR/UQadKeycPNsvWOnlfN27fo6Zw+X
DDsElLU/NgCqZhfUZ0PnT7jjl9rSbjgITEjLYHNr2soIlJ5dBYJ4PFX6v1gUwKnj
jxdZxuUJWAu/l9A6EboQoGhy7HbAY+c8ciNwHe4u3VqN5Z/0OJcLlvDO0zqwC2qx
1XxpnTToOfMwpRQ9GTJMyorY1pbPiEa+7jPsJKy9z2bsCtzPvV1blnJOT2OCVR78
ItKXW6z1Z3hv+A==
-----END CERTIFICATE-----
Generated at Wed May 13 06:53:09 2026 by rpki-client