Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
File:                     UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json)
Hash identifier:          FxLVjfip7LhtOcF52nNAWulpuyXNKkcGnK336DqKMcw=
Subject key identifier:   09:AC:40:6C:63:AE:9B:34:94:CC:F0:53:32:02:77:8A:C1:13:6C:4A
Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
Certificate issuer:       /CN=533802e62965d4584e598d59b76a928be5afd971
Certificate serial:       019E1DFE794C69780FAEABDBFF8E16CBDD27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
Manifest number:          04A9
Signing time:             Tue 12 May 2026 21:01:16 +0000
Manifest this update:     Tue 12 May 2026 21:01:16 +0000
Manifest next update:     Wed 13 May 2026 21:01:16 +0000
Files and hashes:         1: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: WWK2XtYIXQvRTtDs7hStFdMflDz+yPJ8GRpKsPQKVDc=)
                          2: _ui81FBBiuw7bXFjjAu-AlY8ago.roa (hash: +W47PKSUEyOgp5p8G/Toro+Z87dMONYhdZgP4gDGUPI=)
                          3: ra_bl9yXslRJGJzxTDV_d-BlUpQ.roa (hash: wtAAXjDyWZtJfFcEXNFbtV3UJ/ZOa4GX5loIbK1mn74=)
                          4: wFmuZt6OG-oR7DBeq01Ww8HvPa4.roa (hash: a0H1kPyDShFzTVMDinn/3X1ONbp+NjLhweJzA1FQdjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:79:4c:69:78:0f:ae:ab:db:ff:8e:16:cb:dd:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533802e62965d4584e598d59b76a928be5afd971
        Validity
            Not Before: May 12 21:01:16 2026 GMT
            Not After : May 13 21:01:16 2026 GMT
        Subject: CN=09ac406c63ae9b3494ccf0533202778ac1136c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:14:e6:94:5e:66:35:89:ea:42:df:eb:16:de:
                    61:98:a4:21:4a:65:ee:69:c4:11:f1:2b:a0:46:99:
                    66:de:66:dd:64:a4:a9:42:69:52:22:08:98:9f:2f:
                    26:f7:60:40:45:f6:70:12:1e:15:af:cd:89:be:0f:
                    85:a6:1d:10:59:e2:b4:05:72:41:f4:87:7c:80:fc:
                    76:7a:f0:7d:52:99:ce:a7:46:d5:71:11:8f:b2:88:
                    74:50:0d:ca:6c:f8:53:09:c0:dd:90:5b:e4:8c:57:
                    ca:d9:42:60:4a:db:9f:99:ab:5d:54:51:93:cb:61:
                    8c:cc:c4:46:a0:6f:04:a6:fb:86:1d:81:a0:e5:32:
                    b7:7a:03:1f:32:02:42:5e:1d:57:26:c5:00:32:ae:
                    60:23:9e:2a:7e:eb:61:4e:02:4d:95:97:49:e8:9d:
                    c3:66:9c:37:d7:59:af:87:68:8f:72:34:4c:63:a5:
                    2d:00:69:e5:c8:9f:48:8d:d9:f7:62:7b:7a:81:66:
                    9a:80:0e:f1:59:53:30:dd:e1:eb:21:71:69:ad:89:
                    c4:3d:95:06:ea:fd:06:19:a3:e5:29:a7:38:11:16:
                    14:97:7f:29:80:a1:db:e6:a7:e9:df:15:2c:20:e1:
                    00:9b:94:05:e2:bf:fd:bb:90:e7:2e:64:d5:6d:ef:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AC:40:6C:63:AE:9B:34:94:CC:F0:53:32:02:77:8A:C1:13:6C:4A
            X509v3 Authority Key Identifier:
                keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:70:06:c4:a2:a9:c8:c7:84:50:c4:21:5d:29:76:59:91:71:
         ca:89:ca:44:01:13:89:63:da:da:5b:16:68:ec:b8:75:d3:70:
         ed:90:4a:ee:1b:d6:b3:6a:a3:31:7d:e1:51:98:fe:d7:db:38:
         7b:85:41:8b:5e:b0:cf:96:55:26:da:c4:62:1d:78:33:14:2c:
         9f:e2:22:39:36:85:d4:0b:35:89:0e:0a:60:72:f2:41:ab:73:
         8e:a6:e8:74:75:94:f9:8f:e3:72:4e:4e:41:47:a0:98:ee:f4:
         5e:15:a6:25:ec:5f:10:a1:5e:fa:e2:fc:21:d0:fb:b5:5d:70:
         2c:0f:f9:c1:01:4b:e9:05:f2:3d:e6:2e:46:96:fa:e0:13:bc:
         db:6f:40:04:d5:0a:72:d6:54:73:65:29:31:2d:6b:ba:d4:9f:
         bf:b3:66:4f:6e:ed:b5:1c:7c:7d:d7:3b:35:c5:0b:64:d0:da:
         22:c1:48:6c:55:d5:20:c2:71:90:cf:99:de:1f:a1:5e:e9:d9:
         d4:07:f5:ed:9a:af:8f:e0:38:0b:62:d4:2f:73:97:58:9a:68:
         08:3a:ff:fd:1f:37:38:29:94:90:27:83:f4:ca:ab:a2:7e:ff:
         4f:89:3b:77:cd:f4:67:b5:63:ad:1d:22:bc:53:6b:05:9d:10:
         8d:2f:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:14 2026 by rpki-client