Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File:                     0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier:          YR+I1YZQTSpNVPWDIw8l9HPJEeU16WoaBE0dgDEFwg8=
Subject key identifier:   67:AD:E9:13:A9:C8:21:17:E6:3F:90:78:DC:C8:48:30:B4:1D:2E:3B
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer:       /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial:       019E303BB46A289108A8C0E2DD8A3B346B44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number:          04EA
Signing time:             Sat 16 May 2026 10:01:19 +0000
Manifest this update:     Sat 16 May 2026 10:01:19 +0000
Manifest next update:     Sun 17 May 2026 10:01:19 +0000
Files and hashes:         1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: NrzeuR5BAVq9IX3M9d1UwEiP/UfMv5P//wxuFUM6yG4=)
                          2: j330ZQOtQiCZJuxomPWTMdBKcHQ.roa (hash: MzEVW/Ea4Il5bIfwlWQJ+ibRovLnW9XexRlsZqbNutk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:b4:6a:28:91:08:a8:c0:e2:dd:8a:3b:34:6b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
        Validity
            Not Before: May 16 10:01:19 2026 GMT
            Not After : May 17 10:01:19 2026 GMT
        Subject: CN=67ade913a9c82117e63f9078dcc84830b41d2e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bf:3c:3e:69:c3:82:22:a6:58:07:25:b3:bf:
                    20:c0:5d:9c:e4:3c:95:06:1e:1c:f6:71:aa:53:de:
                    43:d9:dd:e7:4b:43:bd:77:bd:f1:6a:59:f7:22:b2:
                    a8:b6:90:d5:8a:b7:10:46:ed:c2:3b:ba:89:ce:ca:
                    de:f8:1b:f6:02:ad:bd:f4:27:18:73:86:ae:12:b5:
                    96:cc:16:1b:aa:e8:b5:99:eb:ea:1d:12:d2:d4:4b:
                    db:9c:b9:ae:d1:0a:84:e0:ff:78:b2:42:cf:56:a2:
                    37:e3:23:cc:c0:97:61:18:49:67:0b:77:28:37:48:
                    4b:30:52:b5:c4:d5:9b:19:95:0b:3e:35:f6:45:80:
                    24:51:29:2a:22:03:85:02:06:b4:9e:37:93:50:ef:
                    d4:9d:c0:48:40:91:8e:1f:ec:80:97:27:0b:4e:01:
                    7b:52:d8:a3:fa:51:b9:5d:49:91:cb:e6:b8:83:53:
                    52:4b:b4:41:a0:be:bb:42:3e:7a:22:a7:c7:0f:a6:
                    39:ba:47:47:28:40:7c:95:b3:03:83:37:e0:18:65:
                    97:ba:27:8d:26:7f:f2:99:6d:85:e1:c2:68:8c:17:
                    f2:43:46:f9:cc:16:c3:fc:17:f6:a5:6a:60:33:3b:
                    20:19:a3:55:d4:cc:c5:f5:e5:c5:c5:39:fb:ab:27:
                    ac:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AD:E9:13:A9:C8:21:17:E6:3F:90:78:DC:C8:48:30:B4:1D:2E:3B
            X509v3 Authority Key Identifier:
                keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:49:d7:e6:56:a7:71:7d:65:31:ac:f4:b6:56:5d:cc:07:2f:
         f7:b6:29:7b:04:5d:be:58:03:88:6d:26:f9:0d:ba:88:61:50:
         08:7e:14:67:f6:c1:8e:e1:22:1c:1c:0c:e9:24:49:37:85:5f:
         52:a4:35:ad:d3:16:df:6c:48:19:b8:79:56:6b:4b:8c:69:23:
         62:49:af:1b:48:61:02:f7:51:42:00:5a:f1:8c:01:60:a9:a2:
         f9:08:5c:f5:10:87:02:24:11:c7:a1:f4:ea:20:ad:70:10:6e:
         71:08:c8:96:d8:db:90:5e:57:84:77:7c:bb:28:c1:09:bd:95:
         5f:f1:85:1e:ea:a7:8f:c4:86:c4:1b:36:46:4b:e9:4f:a6:4a:
         9e:35:db:90:92:41:2c:bd:be:6a:d2:00:7d:8a:36:47:61:04:
         2d:39:4d:c0:d5:fc:91:4d:52:b5:df:0d:00:65:24:b5:c8:d0:
         1e:2e:f6:53:5e:cc:e2:34:d1:53:b7:63:0c:99:20:d6:60:8d:
         97:af:9b:46:87:af:92:9d:11:d7:b1:eb:8a:39:11:d0:f0:df:
         67:1b:17:3c:0c:5b:44:f7:d4:a0:37:01:26:7a:e8:43:da:a0:
         a6:ac:c1:2d:48:9f:d6:d4:55:6e:cb:f5:6a:38:cc:c2:a7:6c:
         9d:6d:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:43 2026 by rpki-client