Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          rujPj3iNueKnKGbhSsAJDZ4ZuoPInFPwOsmv6miD8Ms=
Subject key identifier:   CC:B7:17:9E:FD:8D:22:1A:5F:04:DE:DD:C6:7B:45:09:F6:9D:60:98
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       019E1CB4FCFA20D1BE2EEC1130197FD87763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          1902
Signing time:             Tue 12 May 2026 15:01:23 +0000
Manifest this update:     Tue 12 May 2026 15:01:23 +0000
Manifest next update:     Wed 13 May 2026 15:01:23 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: FNL5MxGDhmhqZG0SGXJo21EIYiu0PofuiI1JFArbiT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:fc:fa:20:d1:be:2e:ec:11:30:19:7f:d8:77:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: May 12 15:01:23 2026 GMT
            Not After : May 13 15:01:23 2026 GMT
        Subject: CN=ccb7179efd8d221a5f04deddc67b4509f69d6098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:cc:bd:fd:47:b8:5b:6f:95:c2:42:b4:21:
                    3b:34:11:7f:e2:3f:0c:e3:f6:b3:a5:93:f7:66:59:
                    09:7e:81:09:8e:17:23:76:0d:4c:bd:62:ee:bd:36:
                    f6:21:b5:55:27:6d:64:f1:ac:ac:2d:72:15:c5:b4:
                    50:f7:4a:21:79:6c:7b:e7:2e:34:c8:25:50:bf:44:
                    95:4a:48:d1:61:26:e9:4c:b0:fe:89:eb:2f:43:62:
                    df:25:0a:6e:0d:b7:ba:cd:d4:ab:35:f3:40:ab:db:
                    2f:19:59:59:9c:fe:ca:42:b2:20:b3:71:8a:a3:e2:
                    e5:57:80:1b:25:c0:7f:6a:62:92:f5:0d:d1:82:08:
                    74:d2:a4:c1:50:12:83:01:32:f3:6c:f6:7d:2b:41:
                    1e:14:88:36:99:b5:98:f4:8e:cc:4c:95:10:69:35:
                    80:3c:a3:92:13:87:e6:33:4b:af:52:36:fc:9c:34:
                    56:67:a0:dc:8d:61:17:f5:00:90:88:0e:ea:66:1e:
                    dc:35:27:67:dd:33:48:65:0a:36:ad:96:22:20:ed:
                    be:b5:2e:c0:27:50:c3:b6:f8:9e:f0:04:51:6c:b5:
                    c8:92:7c:4d:30:0e:5d:1c:16:06:06:25:60:96:aa:
                    60:32:35:17:3f:20:99:c2:17:a4:80:60:fa:d4:ff:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B7:17:9E:FD:8D:22:1A:5F:04:DE:DD:C6:7B:45:09:F6:9D:60:98
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:cc:27:bf:3e:d2:a7:c9:6c:c9:c2:c8:0f:f7:72:fc:1f:69:
         42:d2:82:ec:54:6e:1a:47:4c:5f:74:e1:c5:fa:2c:09:59:d7:
         cc:0a:2c:39:9b:3f:67:41:00:25:11:78:4e:0b:f5:db:10:09:
         b4:fb:c9:f3:99:09:b8:5b:fb:d2:77:9a:42:f4:94:75:c5:ca:
         e7:b4:0f:f7:44:85:6b:a8:58:ba:2b:1b:53:29:22:4d:44:38:
         ec:81:ef:89:8b:6d:10:1b:e7:21:d8:45:9d:38:d7:cb:2f:77:
         b8:15:e6:ad:70:7b:c5:f9:03:06:4b:74:d9:00:6b:5b:cb:b5:
         05:a4:5d:64:39:29:0b:1c:46:ca:9b:f5:a9:95:43:41:d1:06:
         70:4d:8a:f8:f4:fa:6f:f1:a6:82:49:49:f2:59:f8:44:e1:6e:
         f1:65:93:e0:cc:ae:fe:43:a9:4c:d8:a5:18:da:ca:83:93:59:
         69:81:3a:bc:2f:bf:37:71:8a:ab:8c:a3:74:b7:14:58:3a:0d:
         50:df:6b:09:b7:a2:aa:bb:71:6a:a6:6a:7e:1e:1e:fe:9d:b0:
         0d:ba:0f:1d:3d:3e:cb:b2:9e:60:65:d3:f0:9b:a0:e2:4b:c6:
         62:49:64:35:35:8e:bb:da:00:e5:27:72:3c:44:d7:f7:6a:1a:
         34:3b:75:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:45 2026 by rpki-client