Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File:                     UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier:          PnxY44OhQ4uq3b3WNm7r7LmvxJpE+anZVX0wI/5ZOqA=
Subject key identifier:   95:15:A9:98:DE:CC:F7:5B:3A:87:2B:DF:97:2E:9B:73:A5:65:1B:A4
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       019DF8A81B2B0D95F902F3D49C4E089D9D29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number:          1207
Signing time:             Tue 05 May 2026 15:00:59 +0000
Manifest this update:     Tue 05 May 2026 15:00:59 +0000
Manifest next update:     Wed 06 May 2026 15:00:59 +0000
Files and hashes:         1: UjFdhEdt4WKlDSIUUurW21paKp4.roa (hash: fDRm4GJe+GCEFChs7oH68Gzn9XNFPr0wdWmaIX+37oo=)
                          2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: 32tYygB+eS12zIflmh9Unq2IDwAQJ3iIOpePo07hEsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f8:a8:1b:2b:0d:95:f9:02:f3:d4:9c:4e:08:9d:9d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: May  5 15:00:59 2026 GMT
            Not After : May  6 15:00:59 2026 GMT
        Subject: CN=9515a998deccf75b3a872bdf972e9b73a5651ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:cb:80:b9:3e:85:47:41:25:85:1d:21:5e:
                    3d:9b:b1:18:d0:b1:f8:4b:7c:63:37:6d:54:af:11:
                    5a:c1:05:90:25:a9:e0:08:e7:fe:70:f4:61:b2:eb:
                    f8:5b:a4:13:ed:31:c8:94:97:c0:67:16:64:03:90:
                    29:0d:88:b1:d1:ba:c5:46:84:b0:ca:2d:13:39:1d:
                    4b:e0:a6:cf:e1:a1:cf:1d:45:b1:1c:56:0d:5e:43:
                    08:02:66:47:5b:48:21:c6:84:91:cf:bf:66:17:10:
                    0f:7b:c2:e8:a5:1d:b7:fb:02:d9:5c:da:10:d3:54:
                    99:b5:f9:0f:b1:cd:e2:93:19:c1:93:3a:37:df:94:
                    01:e5:d0:a4:0b:06:48:5b:06:cd:98:70:77:6c:c3:
                    58:92:72:e2:cd:17:f5:bc:93:b1:3b:24:85:a6:c5:
                    e7:fd:33:79:55:4b:86:9c:9d:29:37:81:25:8f:b3:
                    5c:72:a3:2a:23:ea:de:2f:c2:fe:7a:9f:b8:cd:a6:
                    37:41:8d:ee:dc:da:1a:e2:94:12:1b:47:bd:1c:62:
                    33:f9:34:74:3d:0e:d1:87:b0:4e:d5:48:b1:8a:10:
                    92:a3:90:2b:33:d0:4f:b1:aa:53:f2:b5:91:7b:bf:
                    1d:79:85:0f:12:ec:bc:68:71:0c:d6:9d:81:6f:98:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:15:A9:98:DE:CC:F7:5B:3A:87:2B:DF:97:2E:9B:73:A5:65:1B:A4
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a6:f0:e6:b6:d4:a3:93:ce:88:22:5b:55:56:ea:2e:9c:b3:
         f6:ad:03:4c:9f:7e:e5:bf:1d:64:cf:b8:3c:4e:85:c4:c8:cd:
         62:f4:22:e9:b4:bf:07:59:c0:2f:e4:8a:30:39:f5:35:82:8e:
         d5:21:33:2b:de:4f:fa:a2:b1:d5:f6:2a:25:24:69:58:b7:b3:
         e3:39:e5:3b:15:db:6b:09:60:ce:73:9d:8d:cb:32:fa:06:a0:
         a1:9a:0d:85:0f:ec:22:cc:61:ca:1f:f4:7b:93:98:0f:c0:f3:
         a0:8b:e0:bf:0e:9a:38:f2:c8:24:ca:f6:38:09:8d:77:ac:99:
         95:8d:6d:42:50:6c:dd:ba:97:cb:e6:a1:e0:3e:c3:4d:38:e2:
         9e:cc:76:c8:91:4b:76:c7:4b:48:e3:5b:e3:78:7f:5a:01:06:
         8c:c2:37:b8:d3:ec:69:22:ef:83:c2:0e:2e:8b:4e:e6:d4:96:
         99:3a:35:da:f1:99:34:4a:bb:7b:69:c8:71:f3:83:5d:a9:8f:
         3b:d5:85:24:22:18:b3:37:2d:7e:d0:49:b5:d8:31:56:54:d1:
         fe:d9:72:4f:6c:db:70:52:5b:6d:9f:14:b5:d9:7d:2c:39:af:
         52:ef:20:a1:f6:3c:de:37:0e:74:df:49:98:ee:08:6e:75:f1:
         29:0d:77:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:43 2026 by rpki-client