Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File:                     UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier:          VLS+9te5c0pl+veb5/7OJ9GUgvq5lnm5ootnQjuMJgQ=
Subject key identifier:   BE:0D:DC:65:69:86:0C:70:CF:6D:D9:3D:3F:E4:6E:54:76:27:C9:C9
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer:       /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial:       019E1EA3808527004E832CEED2DF6B2A3668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number:          1185
Signing time:             Wed 13 May 2026 00:01:32 +0000
Manifest this update:     Wed 13 May 2026 00:01:32 +0000
Manifest next update:     Thu 14 May 2026 00:01:32 +0000
Files and hashes:         1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: /of8lUvvHQvS3+vTguf1oCJo5iYIxZgNLt8BKdt+BnY=)
                          2: VrllH5lvxOXiEVVSba8nkT-lWmQ.roa (hash: MptkH7rNuQFXgV7cW16D7ZIxR771HBqFh8JOnOVzIAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:80:85:27:00:4e:83:2c:ee:d2:df:6b:2a:36:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
        Validity
            Not Before: May 13 00:01:32 2026 GMT
            Not After : May 14 00:01:32 2026 GMT
        Subject: CN=be0ddc6569860c70cf6dd93d3fe46e547627c9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:55:4d:5c:b1:ad:be:44:f7:ac:36:3c:5e:
                    f2:86:bf:4e:63:78:ed:16:a1:e9:69:22:c3:d8:6e:
                    60:2f:3b:da:68:d2:1d:56:10:16:5d:81:9f:7d:35:
                    08:0d:c7:61:83:77:95:51:83:11:02:6b:f9:d6:c0:
                    84:03:39:2d:d0:9c:fa:dc:62:49:48:3b:66:d2:07:
                    10:07:64:67:58:d4:f9:eb:37:a1:f2:16:dc:ba:7b:
                    98:25:f8:cc:c0:9d:68:ca:ca:92:a4:b5:2f:a6:32:
                    02:77:f1:67:fa:42:0e:20:ce:e9:3a:6d:b0:17:99:
                    18:40:e8:02:da:59:67:fd:ab:65:16:fd:79:ec:50:
                    94:10:d8:a6:46:d0:ae:82:f5:61:32:1c:4a:4e:96:
                    c9:a8:33:6f:eb:4e:76:84:10:83:8c:1e:69:d0:76:
                    15:2b:02:0e:02:04:96:7e:f0:d1:6b:8e:02:73:fa:
                    87:f3:70:1f:b5:24:8f:75:88:53:f7:6c:e6:15:18:
                    cd:6e:2a:f7:04:71:e0:a5:de:11:77:fa:d5:1e:e4:
                    fa:29:e9:93:1e:e2:2c:b5:8d:1d:d5:62:55:6e:49:
                    a5:dc:02:11:f5:b9:69:1c:09:0e:04:62:42:62:2d:
                    81:92:bb:41:19:49:26:9c:1b:50:70:46:c1:f1:45:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0D:DC:65:69:86:0C:70:CF:6D:D9:3D:3F:E4:6E:54:76:27:C9:C9
            X509v3 Authority Key Identifier:
                keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:99:bf:6e:e1:ea:98:c5:26:27:81:a5:1b:7b:6a:2d:35:61:
         39:6f:f2:8e:22:a5:1c:59:8d:5b:66:70:71:6b:49:62:d8:b3:
         f3:d1:02:7d:95:f9:f5:c7:66:41:e1:47:b2:e4:c2:a6:ed:6f:
         1c:77:7f:71:66:50:1a:2b:37:df:62:ef:fb:aa:b8:fc:00:d8:
         ba:12:8d:dc:e3:32:38:9d:14:16:20:b6:10:e3:57:fd:c3:c1:
         f9:97:2c:25:45:54:58:79:bb:c7:86:06:42:eb:19:89:bf:87:
         8a:e3:5e:70:e8:af:41:47:c3:5a:03:80:f7:db:ee:7a:40:57:
         24:47:4c:53:61:e5:1f:5c:0d:6e:e4:c5:aa:ad:3a:1d:98:d1:
         32:9a:a7:e8:4e:82:09:fe:0b:c8:5b:e9:15:6d:6d:4a:5e:88:
         6e:40:99:3d:af:35:0a:d1:d7:80:41:00:bd:30:0c:63:c9:ef:
         47:ac:1d:7a:ab:81:c9:0f:ae:b0:07:21:14:ce:1f:e1:3b:2f:
         b3:7c:1f:1e:6f:84:0f:4f:4d:b8:74:3b:ec:42:d8:23:92:42:
         d3:f2:0b:7f:0b:20:60:4f:5a:02:8d:5b:79:df:52:c2:45:2a:
         0d:1d:d9:39:a4:1f:22:2c:c1:64:39:3a:f5:4a:c1:f2:fe:a0:
         96:62:fe:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:03 2026 by rpki-client