Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
File:                     sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json)
Hash identifier:          4hKDE7QnoZag5h08LSShCNvAYikfSwK1amZtunlqvLY=
Subject key identifier:   0B:DB:F7:A7:21:DE:19:2C:75:A9:3E:53:9E:4C:FC:D1:20:92:16:F5
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Certificate issuer:       /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial:       019E28B905E6F0BFBAFB0597FD8C28B6494D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
Manifest number:          190F
Signing time:             Thu 14 May 2026 23:01:14 +0000
Manifest this update:     Thu 14 May 2026 23:01:14 +0000
Manifest next update:     Fri 15 May 2026 23:01:14 +0000
Files and hashes:         1: UPKKwW9VJYZFBiA_WvIaqWPdF7s.roa (hash: K2pc24cJyQQfvnYYt5miofrs9P0Hxb8DyAeGlZ+9xFY=)
                          2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: 5mtZ4d3GgcgzQv0FPicEZR59B8Z0infueD9BGr8fdE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 23:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:b9:05:e6:f0:bf:ba:fb:05:97:fd:8c:28:b6:49:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
        Validity
            Not Before: May 14 23:01:14 2026 GMT
            Not After : May 15 23:01:14 2026 GMT
        Subject: CN=0bdbf7a721de192c75a93e539e4cfcd1209216f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:60:82:e8:05:7a:0d:df:53:a4:61:5b:e1:f9:
                    12:d7:6b:13:41:55:c5:49:09:39:42:73:8f:c8:be:
                    57:3d:5c:d3:e3:ab:36:9c:34:8d:d9:82:ea:42:52:
                    7b:ae:37:2d:16:4a:63:6f:95:5e:36:64:cd:39:fc:
                    e3:bb:cc:5d:f5:c7:74:d1:e2:7d:70:e5:03:f0:86:
                    8f:f9:8e:48:36:39:60:4f:a2:7f:81:9f:ae:51:3a:
                    82:c3:cb:bf:01:d4:18:62:ca:64:01:2d:a2:0f:f8:
                    88:a7:c4:14:0d:56:20:21:d2:5a:df:43:40:f1:96:
                    af:3e:0e:32:7d:a4:22:3c:62:40:43:86:de:92:b5:
                    93:5a:d3:0f:14:75:2a:83:87:8b:9f:47:8a:66:d8:
                    35:d5:3b:e2:79:89:5b:8d:44:ef:a7:2b:10:5f:d7:
                    a6:8d:93:90:5f:66:8a:45:e3:16:53:a5:a5:e1:3f:
                    a0:a6:77:b2:8c:db:00:ee:57:c5:55:f8:c8:82:fe:
                    cf:26:6c:f4:ea:0c:a2:03:cb:d8:71:9a:a2:56:6c:
                    39:dd:ab:1f:17:71:67:80:d6:fc:e2:3d:37:f6:ea:
                    0a:67:ec:6c:d8:87:a5:54:62:f5:fb:f4:bf:3e:e7:
                    9f:ad:f1:9b:a0:ac:a3:df:6e:fc:14:70:18:bb:25:
                    ab:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DB:F7:A7:21:DE:19:2C:75:A9:3E:53:9E:4C:FC:D1:20:92:16:F5
            X509v3 Authority Key Identifier:
                keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a8:61:42:d3:e9:d0:1e:a1:33:c5:32:81:41:aa:8a:58:38:
         8c:3b:ee:2f:80:c0:d7:40:a7:4b:dd:c7:6b:8b:20:8b:9c:13:
         83:c9:fd:cc:18:ed:60:46:ab:c0:7f:2e:c0:ae:da:8a:bd:3f:
         49:c1:2c:9e:66:7c:13:c2:17:83:7d:04:7e:95:c1:f5:34:f0:
         d8:fa:e2:49:fb:ec:92:50:a2:21:32:02:58:62:b0:b1:dc:22:
         ce:bc:78:b7:25:3c:62:52:09:e0:76:11:77:7a:67:70:e0:10:
         ec:ea:2c:67:eb:37:4c:29:53:75:14:4c:0d:c0:a7:88:64:de:
         3f:69:63:7a:59:f1:d5:9c:3a:ce:b3:64:ab:05:9d:71:24:3d:
         46:31:11:52:e5:c9:44:4a:b6:69:7a:84:dc:36:4a:8e:57:04:
         d1:51:5b:e2:c0:4d:97:28:f9:43:cf:92:3f:37:94:a2:2b:db:
         6d:8f:e1:a6:a4:b6:55:32:bc:1c:6e:c9:e7:aa:06:1b:21:09:
         c5:a9:07:4b:d2:9d:d1:19:67:15:5c:33:1e:4d:34:25:66:ba:
         00:47:05:f7:20:5c:e1:37:54:8a:55:fc:1e:83:3e:05:77:15:
         19:94:85:ab:e5:34:7c:d3:0a:47:ad:f1:ea:c6:ae:0c:9b:fd:
         c9:56:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:39:25 2026 by rpki-client