Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File:                     uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier:          b9DdFKVATbgT3tJquC3RozTNgqjZn+85oLdU25tuJ4I=
Subject key identifier:   AB:B4:A4:23:C1:86:A3:6B:DE:59:1F:81:A3:F1:1A:FE:79:6B:65:63
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer:       /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial:       019E1E6C5B9D523B82C6FF8211AF41BDC8A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 23:01:18 +0000
Manifest this update:     Tue 12 May 2026 23:01:18 +0000
Manifest next update:     Wed 13 May 2026 23:01:18 +0000
Files and hashes:         1: tTH9z8mwGJDfT_IMVoZEr9XeyPo.roa (hash: dBYpyH5AjRb6Djna2Zc1jF8y+nZctTiJ8dcSq4LnTek=)
                          2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: 1l4TfEx3B7NYohPAxmGqstpEtjBndc586dn0oUwHYw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:5b:9d:52:3b:82:c6:ff:82:11:af:41:bd:c8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
        Validity
            Not Before: May 12 23:01:18 2026 GMT
            Not After : May 13 23:01:18 2026 GMT
        Subject: CN=abb4a423c186a36bde591f81a3f11afe796b6563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:8e:0b:f7:9b:30:0c:f1:cc:fe:cf:1c:d2:
                    0b:8e:af:53:64:a3:54:9c:b5:ab:db:3d:19:81:9d:
                    a0:61:b7:68:c8:ac:38:cb:f5:2a:1c:3f:5e:5a:83:
                    3f:60:db:21:43:bb:89:33:d5:a3:66:86:42:1e:27:
                    e2:ac:76:33:e9:ee:17:e5:f8:b4:37:fc:d8:f5:3f:
                    ec:64:a6:3a:d4:6b:58:e9:fd:0b:b8:fd:4b:a1:ff:
                    ac:3b:ed:5e:40:b4:f7:8d:03:a6:e1:51:bc:fd:e8:
                    7c:a3:f3:6b:a2:91:69:18:c7:63:43:e6:66:91:5a:
                    e3:3d:dd:bc:6f:eb:3d:09:74:75:e8:c6:e2:1f:b9:
                    b0:f7:c2:dc:de:df:a4:48:36:98:0a:85:dc:c4:85:
                    c9:d6:ca:8e:37:29:f1:a6:19:5c:f1:75:53:7f:5f:
                    68:d6:d9:b5:f8:20:e6:dd:e8:78:f9:31:bb:51:30:
                    1d:1f:43:95:de:de:d8:44:cf:37:7a:00:29:24:c3:
                    54:2e:7c:dc:98:e0:59:2e:4c:97:7a:51:3d:9b:2c:
                    f1:ee:06:e5:11:42:0e:92:7b:b1:55:28:9b:f8:cf:
                    a1:0d:ee:7c:fd:ee:d3:0c:a4:88:ef:f3:b5:e3:6d:
                    10:66:ad:c2:d3:41:a1:b3:00:35:2a:16:f8:ce:5a:
                    33:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B4:A4:23:C1:86:A3:6B:DE:59:1F:81:A3:F1:1A:FE:79:6B:65:63
            X509v3 Authority Key Identifier:
                keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:41:40:ff:8f:64:b4:3f:d1:49:ab:61:02:88:61:ab:3f:8c:
         2e:bf:41:34:be:49:98:b2:5e:bd:3b:81:74:28:4c:33:dc:09:
         4c:fa:a1:7f:90:c9:a6:ae:ff:24:48:34:c0:47:65:60:47:9c:
         bd:20:5b:38:53:a6:b3:75:b6:83:f0:a4:99:dd:26:90:75:d1:
         6d:87:59:7f:c9:c6:88:2f:11:0b:96:9b:2b:95:f0:85:6f:8b:
         0a:62:c3:3b:7c:ed:3b:ad:55:9d:1a:30:5b:10:bc:cf:e9:1f:
         f2:0d:0c:5a:06:3f:05:ea:6c:63:91:c2:26:de:66:39:47:c6:
         e4:72:8b:95:31:0c:e5:a5:ba:51:89:f9:60:f9:ab:c8:b0:91:
         64:1a:18:cc:a5:4e:2a:b0:ec:24:e0:be:7a:b1:45:fd:5d:4b:
         86:88:fc:fd:7b:28:9d:d4:4c:b4:4f:7b:5d:d5:f4:46:65:bd:
         88:ef:e3:d5:f6:02:09:63:c4:5b:a4:cf:54:2c:78:3a:f2:2d:
         5d:84:49:08:70:7a:9c:19:e0:de:8f:ce:2a:04:a4:45:f1:66:
         0f:1a:0e:44:99:aa:0a:60:b7:d4:7f:bf:e9:01:64:81:12:78:
         c0:00:8e:24:dd:02:44:ac:a6:96:86:31:bd:5e:e3:7a:55:40:
         f4:95:ac:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:40:40 2026 by rpki-client