Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
File:                     UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json)
Hash identifier:          YhhESOkXFap0vu6rFiQjSTf0z3m4niqSmAEDh+jCV7s=
Subject key identifier:   9E:F3:72:52:3D:BC:AD:26:32:C7:51:D4:73:5B:A9:B3:04:CB:8B:40
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Certificate issuer:       /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial:       019E1F11467B6C7428F514B1FAED13B0C3B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
Manifest number:          0A82
Signing time:             Wed 13 May 2026 02:01:26 +0000
Manifest this update:     Wed 13 May 2026 02:01:26 +0000
Manifest next update:     Thu 14 May 2026 02:01:26 +0000
Files and hashes:         1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=)
                          2: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=)
                          3: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=)
                          4: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=)
                          5: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=)
                          6: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=)
                          7: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: 8So0AuSWDKd74SzAxmFGNyyAXgtBP9QS6lRVF6OZqSE=)
                          8: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=)
                          9: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=)
                          10: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=)
                          11: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:46:7b:6c:74:28:f5:14:b1:fa:ed:13:b0:c3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
        Validity
            Not Before: May 13 02:01:26 2026 GMT
            Not After : May 14 02:01:26 2026 GMT
        Subject: CN=9ef372523dbcad2632c751d4735ba9b304cb8b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:5b:e5:30:07:ec:74:8e:43:39:f7:b7:96:
                    58:4b:27:7c:50:9f:95:a5:9d:01:c0:ba:96:87:ab:
                    d7:74:95:96:aa:aa:9f:f7:9b:0b:fc:22:2b:67:64:
                    9a:2d:13:48:18:46:de:22:5f:a1:de:2a:94:b5:52:
                    a1:29:40:02:b1:af:eb:d6:73:2b:24:7f:44:7a:fd:
                    ea:0a:32:e3:70:0f:08:4c:d6:11:9c:59:0c:c8:85:
                    53:ac:72:c3:d7:26:18:ec:10:11:d5:99:a6:96:70:
                    8e:99:fd:41:11:13:f5:55:57:0c:a4:5c:21:79:38:
                    75:0c:57:ea:0e:fb:3a:ae:e2:bd:a5:0f:2d:53:c0:
                    bd:a6:8f:5c:35:e7:fb:c9:fa:74:6c:aa:a9:53:63:
                    a7:1b:8f:b5:a8:b6:ca:19:a3:31:51:8b:a8:ef:39:
                    5e:af:ce:ce:c2:94:20:99:12:6d:74:cf:ff:cf:91:
                    a1:f8:e3:32:29:1c:43:ac:21:d8:6d:7a:f8:f9:df:
                    46:6e:76:30:0a:2f:85:ba:2a:2c:46:5a:25:80:ec:
                    3b:af:b3:20:d6:39:2f:ab:8e:f2:3c:91:36:50:28:
                    3d:a6:78:23:65:12:4f:aa:dd:29:e7:bd:93:93:1a:
                    64:e8:77:61:9d:52:06:f8:a3:52:86:f6:e2:be:d4:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F3:72:52:3D:BC:AD:26:32:C7:51:D4:73:5B:A9:B3:04:CB:8B:40
            X509v3 Authority Key Identifier:
                keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:85:19:19:6d:a9:91:c8:71:60:b4:15:ad:6c:75:90:0b:dd:
         77:f4:b4:66:08:42:27:c6:b7:61:fb:03:06:7b:81:7d:27:c0:
         72:32:65:1c:a1:03:90:e9:ae:26:b1:c5:02:c5:91:67:11:dd:
         c8:e4:27:b4:b8:ef:98:ab:98:da:6a:96:21:84:8f:89:8f:b7:
         4a:91:3c:71:77:15:04:d3:c0:d8:07:67:c6:41:80:56:c5:5e:
         b4:78:24:71:07:13:58:9f:dd:0d:bc:ba:e2:0a:11:c2:f0:66:
         0a:47:9a:0d:ae:46:ce:ad:0c:bf:3d:9f:1a:db:28:9e:0a:4e:
         2e:c2:e8:dd:bf:48:19:55:e1:ed:9e:40:c5:68:3c:7d:ac:ec:
         97:06:be:5a:b4:a6:9e:42:8b:aa:71:85:04:e6:9b:ac:51:ab:
         46:4c:18:78:4c:52:82:e3:f5:86:76:e0:92:d7:0c:37:62:ca:
         db:c7:3a:36:86:f3:cf:16:4b:88:5a:4b:65:8d:14:35:f5:f0:
         2d:1b:ef:cb:68:47:25:bc:91:ac:1e:bb:b5:11:0c:40:bd:24:
         82:bc:aa:48:59:f6:aa:00:dd:cb:b6:ce:10:38:cd:b8:2d:21:
         c9:0e:65:e1:bc:1f:db:4a:e7:ff:04:ed:3c:c6:3c:48:7a:ae:
         81:7e:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:36 2026 by rpki-client