Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
File:                     Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json)
Hash identifier:          g62UJkd4BC9CwZS6ld08JEP4vJ7uwjwfqSMAvNAhBEE=
Subject key identifier:   51:DE:D9:9A:0B:1A:39:0F:3F:AB:F7:DC:F1:A5:7B:CE:8C:BA:52:DF
Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Certificate issuer:       /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Certificate serial:       019E1F1164CB6B51AF90106DCFA8C7DAAB35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
Manifest number:          14C8
Signing time:             Wed 13 May 2026 02:01:34 +0000
Manifest this update:     Wed 13 May 2026 02:01:34 +0000
Manifest next update:     Thu 14 May 2026 02:01:34 +0000
Files and hashes:         1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: iNctveBD5/ehK2Gt6x13v9g7IGQfIOWrdToZyppxNCg=)
                          2: oOmlfKVzpMVENSLkIqqHr9oYYIg.roa (hash: /1cGoeAjRc1hP5Tzk5VY4ttcaNmL4WoxJgl5UoSxmIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:64:cb:6b:51:af:90:10:6d:cf:a8:c7:da:ab:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
        Validity
            Not Before: May 13 02:01:34 2026 GMT
            Not After : May 14 02:01:34 2026 GMT
        Subject: CN=51ded99a0b1a390f3fabf7dcf1a57bce8cba52df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:73:32:b3:64:b3:d0:08:0f:e6:98:33:4e:
                    5f:2a:2a:0c:5f:22:2f:7d:7a:a2:70:0f:a9:eb:a1:
                    78:53:4b:2a:3e:86:ed:cc:5e:a9:0a:27:0f:fb:47:
                    f3:19:22:bd:b4:6f:b5:e0:7d:32:31:b8:43:0f:ac:
                    c8:12:20:bd:c6:8b:f4:63:f0:4e:5d:3a:0a:c9:d3:
                    a1:b8:b5:4f:5f:7d:39:82:27:cc:81:01:13:41:00:
                    ec:8c:3c:b5:8b:54:50:5d:02:f1:e3:ad:6f:e3:5b:
                    7e:fb:11:ff:ca:b3:d4:f0:d5:38:5f:cb:d6:40:78:
                    fc:99:6a:26:f0:54:b9:70:3e:65:c5:86:95:4e:e9:
                    27:67:ea:44:a4:a7:e8:06:bc:f8:3a:e9:e6:d4:c5:
                    ba:67:b8:7a:34:94:c1:74:b4:72:56:9d:2d:71:cd:
                    77:f7:4a:1b:f5:21:59:e4:b2:e0:cb:b2:91:c2:b3:
                    69:a3:25:e8:94:58:ba:d7:41:3c:b9:16:e3:32:1b:
                    a6:02:af:bd:00:11:d1:1b:e5:31:a9:6a:66:3a:c8:
                    e8:13:5f:7b:9b:49:f2:74:08:4d:fc:f3:fa:58:fd:
                    b1:3a:48:67:24:73:60:c1:f6:13:27:a3:c0:51:3b:
                    6b:fa:de:37:f7:7a:7a:b3:fc:be:84:5e:f7:8f:ed:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DE:D9:9A:0B:1A:39:0F:3F:AB:F7:DC:F1:A5:7B:CE:8C:BA:52:DF
            X509v3 Authority Key Identifier:
                keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3d:fb:8d:9f:97:ad:2d:60:3c:00:88:77:c6:dc:2a:9b:99:
         5f:58:0e:d9:cd:f2:de:5d:91:e0:72:02:b8:c3:9e:d5:9b:72:
         bf:dc:30:5d:36:ee:98:ec:19:0a:fa:7d:cc:8e:36:70:61:a9:
         ea:6b:63:c5:51:d2:6f:b5:6b:f9:f3:9f:2b:63:c4:df:a7:b7:
         0e:df:86:af:3d:51:73:4d:6e:aa:78:df:3f:1c:1e:c5:99:58:
         8d:21:f1:0f:52:19:11:ee:49:dc:d0:77:9a:d1:06:ee:35:73:
         43:d3:c5:b3:fc:ea:df:25:a9:ad:ba:49:d5:23:a5:cd:47:87:
         a3:08:4d:47:6f:8d:2b:fc:45:c0:1a:4d:d6:7f:41:9d:30:eb:
         a0:c3:18:e0:92:bb:67:7d:d3:5e:c2:04:7c:b4:23:1e:c7:98:
         66:31:16:4e:2a:e4:10:21:80:75:e8:6e:53:cb:73:09:c4:c0:
         b2:1a:1d:e1:ff:da:ef:9f:37:45:72:a9:dd:0e:1f:bc:3b:00:
         09:5b:2d:7a:9d:09:54:58:12:d3:96:6f:27:1d:64:43:5e:04:
         7a:24:bb:ff:10:55:35:e4:51:e4:1e:cd:ce:0e:95:90:2b:4a:
         ff:db:80:e2:99:18:a8:6a:0b:82:13:8f:4f:53:d7:6a:a0:3c:
         26:18:6e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:11 2026 by rpki-client