Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File:                     uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier:          /4TWcSQQa0HylOR1XyKuhw/M/QePtUcZQHOwHoPtxaM=
Subject key identifier:   EB:B4:21:EF:8D:83:4E:D5:33:34:97:E2:8D:48:35:F5:17:A2:4A:DE
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer:       /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial:       019E2091BDD793F68F7C84352AB2FCFF8A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number:          074E
Signing time:             Wed 13 May 2026 09:01:22 +0000
Manifest this update:     Wed 13 May 2026 09:01:22 +0000
Manifest next update:     Thu 14 May 2026 09:01:22 +0000
Files and hashes:         1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
                          2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
                          3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: JYTFsiks886U3ceXDloQtnGbKmrxXSdrI8zeiusOzgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:bd:d7:93:f6:8f:7c:84:35:2a:b2:fc:ff:8a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
        Validity
            Not Before: May 13 09:01:22 2026 GMT
            Not After : May 14 09:01:22 2026 GMT
        Subject: CN=ebb421ef8d834ed5333497e28d4835f517a24ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:59:27:ff:61:e3:fe:f3:99:b9:3e:6c:0e:
                    f8:4e:e6:0f:21:e2:f0:cc:14:4e:32:f7:ca:5b:69:
                    ad:e6:6c:62:34:30:d8:c2:ff:c5:ae:8c:6b:d3:8b:
                    e6:2e:14:af:31:5a:84:79:a7:26:c9:36:62:88:14:
                    bb:88:6f:82:e5:22:ff:0a:cd:74:e5:9b:28:38:55:
                    02:41:a3:80:bf:00:b6:07:d1:75:f3:12:15:03:a1:
                    03:0e:2c:c0:4d:22:5c:df:a3:e5:ab:a1:fd:fc:ff:
                    8c:fa:67:49:11:92:a8:2e:4f:b3:de:bf:c4:2c:1a:
                    27:da:61:6d:d5:64:ab:39:b3:6c:00:8a:bc:cd:3b:
                    d3:0c:5c:7d:33:95:e8:7a:a7:17:06:ef:83:45:72:
                    7b:c6:50:4d:59:81:b6:75:97:04:d8:fe:40:c2:ca:
                    98:c4:c5:d7:17:5d:a0:f1:5d:c9:47:3a:76:3e:7d:
                    c6:ce:18:ea:be:6d:af:b9:50:a8:ab:60:20:2f:e5:
                    9e:d3:3e:5b:ff:38:e3:71:88:ec:2e:8e:fe:48:42:
                    08:aa:c7:df:62:6d:3a:64:73:cf:f6:55:10:4e:a8:
                    f1:a9:6b:cc:84:c3:de:53:0c:c8:a2:1b:fc:54:d1:
                    0b:71:eb:eb:40:8b:8f:95:ee:9d:24:6c:a8:50:a4:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B4:21:EF:8D:83:4E:D5:33:34:97:E2:8D:48:35:F5:17:A2:4A:DE
            X509v3 Authority Key Identifier:
                keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:76:d5:0f:12:a0:be:e9:f9:62:28:d9:49:27:d4:06:26:6d:
         bf:aa:99:82:b4:d1:54:cd:cc:d8:95:5a:2f:f4:ed:fe:1f:11:
         c0:63:a4:d4:b9:76:ab:ea:2e:e9:f0:3d:79:85:62:ef:7d:4a:
         aa:aa:bf:d8:2e:6e:18:74:2c:b1:7c:94:d5:cd:00:3c:24:1d:
         72:43:5d:b4:a3:23:cc:83:d8:cb:af:88:d3:3c:a5:1f:2a:25:
         32:9c:40:4b:78:32:ce:ce:88:3b:49:09:cf:ce:bd:f3:d3:da:
         83:9e:94:e6:04:e7:81:0d:99:11:77:b6:35:77:9f:3a:9a:77:
         ed:47:a4:c1:87:94:63:ff:e6:47:2d:f5:46:9d:e6:bc:31:e1:
         53:cc:b0:f8:4d:59:8e:94:d6:13:d3:ef:2f:7e:29:45:d6:86:
         6f:32:d4:33:9d:4d:8a:ca:97:f9:d8:7a:06:76:93:98:34:39:
         d0:0a:4c:c6:33:8f:e7:d5:24:55:64:09:de:fa:5e:90:f3:d3:
         a8:44:ae:88:48:09:89:2f:f0:dc:f8:05:e7:fb:74:78:67:d2:
         d2:f0:14:f0:06:20:fa:42:05:6d:1b:38:42:d8:64:91:c4:50:
         91:c9:99:69:a0:55:4e:55:bf:17:fb:73:40:8c:60:b1:2e:5e:
         57:f3:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:41 2026 by rpki-client