Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
File:                     UrSmj2r_fgaAtvFUQwzudKUDtmg.mft (raw, json)
Hash identifier:          8btOfa1+qdcnPUQ5530Xgp0rCtWr0unGq9UCoyTh0io=
Subject key identifier:   11:66:E9:18:61:90:92:4C:A0:56:3D:50:3F:01:33:DF:64:33:29:C5
Authority key identifier: 52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
Certificate issuer:       /CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Certificate serial:       019E1DFE19DE8593A0BC6579344E51685488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
Manifest number:          0331
Signing time:             Tue 12 May 2026 21:00:52 +0000
Manifest this update:     Tue 12 May 2026 21:00:52 +0000
Manifest next update:     Wed 13 May 2026 21:00:52 +0000
Files and hashes:         1: UrSmj2r_fgaAtvFUQwzudKUDtmg.crl (hash: OOATUYsdSohi7ejVbEer8aeBQsksVBCGinBC2FemK20=)
                          2: ikhZPuNFB8TYzV9iARQ45_sL-xY.roa (hash: nilbi5jmsnD7f7iYCwJkWEwiH79gM1wBIWzSk6xYrZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:19:de:85:93:a0:bc:65:79:34:4e:51:68:54:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b4a68f6aff7e0680b6f154430cee74a503b668
        Validity
            Not Before: May 12 21:00:52 2026 GMT
            Not After : May 13 21:00:52 2026 GMT
        Subject: CN=1166e9186190924ca0563d503f0133df643329c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:5d:09:59:31:71:a2:e1:0f:76:2f:0f:06:
                    a8:7b:c6:95:d5:df:28:e9:dc:5c:c4:29:f1:6c:f1:
                    51:15:9b:79:fb:8d:43:fe:03:d8:78:48:1d:f6:21:
                    5d:0a:d4:08:10:e6:bc:ed:d6:73:76:dd:91:3c:ac:
                    7c:b7:07:74:b3:e3:3c:de:7a:ce:08:64:59:ef:66:
                    87:aa:84:e5:bc:76:65:de:57:03:02:1c:f1:eb:97:
                    96:eb:b0:e7:70:22:fd:a4:59:42:b1:19:f6:40:22:
                    15:11:84:a6:c4:56:86:0a:6e:b3:29:50:29:fb:03:
                    55:c6:46:bc:d2:18:7e:b3:a9:41:8a:18:c7:09:18:
                    da:29:5e:7c:0f:01:c7:35:ae:96:cb:3e:eb:b0:50:
                    56:91:8d:24:d9:13:03:28:bb:dc:3d:b0:05:a3:eb:
                    25:c1:51:72:c1:47:9e:ab:63:8f:58:ae:1d:b0:9f:
                    a1:0c:3a:50:05:1e:ad:56:46:ec:17:ea:5b:b0:cb:
                    d2:8c:e5:4b:ac:86:34:0c:b5:85:3b:13:ce:f5:3c:
                    fd:62:83:5c:ad:da:6c:32:ba:2d:a6:40:36:97:2f:
                    d0:7d:a0:4d:0c:a8:62:bf:7b:a8:be:67:97:0f:cb:
                    6f:48:62:5f:f3:9b:4d:63:b9:6e:f7:39:ab:42:19:
                    0d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:66:E9:18:61:90:92:4C:A0:56:3D:50:3F:01:33:DF:64:33:29:C5
            X509v3 Authority Key Identifier:
                keyid:52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:72:12:05:3f:1b:65:6d:94:d4:c9:cc:90:9c:01:48:ae:84:
         75:d9:97:ae:28:72:9e:0c:25:d0:9e:22:7b:db:01:d4:d3:ed:
         55:95:95:df:82:38:da:59:dc:6d:d2:cd:56:8d:2f:93:6f:35:
         e3:18:77:1c:35:ec:91:e4:87:2d:56:48:35:2b:0a:73:b4:59:
         cf:83:75:eb:92:25:70:89:b0:7f:01:46:5d:c8:7a:be:78:83:
         68:f6:29:7e:e9:0d:c3:c2:a4:2a:d0:ac:2e:13:ea:b6:84:12:
         19:52:20:35:af:d7:84:ce:16:ec:b9:d4:f6:53:e5:f2:e5:80:
         fe:c3:07:2f:3d:b7:07:1b:70:eb:ec:85:82:f9:55:74:d0:81:
         bf:ad:1e:84:c9:29:34:91:80:7b:0d:5d:91:12:7c:22:3d:3e:
         ff:49:b9:6e:d9:eb:08:12:69:49:2b:96:44:21:e2:40:cf:56:
         a2:d1:3b:f4:59:b3:31:32:7d:0e:53:db:c5:4f:33:b2:8a:4f:
         5a:55:1d:98:e6:3c:df:63:92:76:7f:24:1a:b8:87:cf:82:2c:
         07:01:d9:81:43:7f:aa:05:31:50:c0:21:de:0e:42:06:6a:6f:
         76:4b:47:7a:33:ec:e7:0e:80:aa:03:6f:28:65:00:cc:b9:cb:
         63:c8:79:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:38 2026 by rpki-client