Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File:                     UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier:          zJUjqYPuuHmU0mbPSzz91ADMWJwGN2jkR9rWFvWl5Qo=
Subject key identifier:   02:E6:6F:F5:72:90:6C:03:37:24:74:0C:DA:C0:3D:FC:AE:EB:2E:B8
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer:       /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial:       019E235C38FC845153EC6F6A87ECFAD3E5EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number:          1927
Signing time:             Wed 13 May 2026 22:01:46 +0000
Manifest this update:     Wed 13 May 2026 22:01:46 +0000
Manifest next update:     Thu 14 May 2026 22:01:46 +0000
Files and hashes:         1: 8C2rNpK0bo-5H3n_8Vdac41pV-s.roa (hash: RN3A9BXDyd9+c1D+7ZirRXgWPXfUFRbvjrZAwDHi/G0=)
                          2: CDdW7nCuQzH6NAMjfPJaFceRmv8.roa (hash: 3y28X5gdOE3EjaGMFkwpZSr7meiX5mPuhbh7+VXJVdg=)
                          3: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=)
                          4: PkLF5Qe23NpZ0qUxVzRcrTiMnQg.roa (hash: WhFKLI35lPl0xgI1Abtq0FpDyLm3DVBgk69s+Al9tJ0=)
                          5: UAhAd15sm6zy6_JCC2foG_CxY9Q.roa (hash: QNJtOZDMc5d6KWlXodyqH9IN72fjqjARygPkojFQzwM=)
                          6: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: V996BgIwtR+LrmcCaCt9OZqdx/90IoK7NjN9TZ0Q4Sc=)
                          7: sf2AUkxMphordGbZ3YZieGPTsCc.roa (hash: Mug8Np9415LBH+oOr+F8Q3MZzW+UFUq4lggni46fyqQ=)
                          8: zraNw8LeAWlnY3DPt_ChcLdFWU4.roa (hash: GAhTC1QluGdOik4s8WqaXoSj07QRcnsMlml1l1SiPo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:23:5c:38:fc:84:51:53:ec:6f:6a:87:ec:fa:d3:e5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
        Validity
            Not Before: May 13 22:01:46 2026 GMT
            Not After : May 14 22:01:46 2026 GMT
        Subject: CN=02e66ff572906c033724740cdac03dfcaeeb2eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:a8:12:da:f4:3b:c9:d4:28:5e:d5:de:64:
                    a4:6f:ac:16:00:85:29:48:bf:2e:d9:ac:f4:62:90:
                    74:77:fb:50:7b:07:c7:b2:dc:f6:9a:72:84:25:05:
                    b5:61:d4:6c:b9:aa:d7:e1:a8:0a:33:7c:44:64:c1:
                    06:6b:e9:b1:3b:41:66:02:40:f7:bd:b9:0c:e8:e6:
                    0a:74:b9:df:4f:0c:ed:bf:f9:e4:fa:8e:43:e3:25:
                    f3:2f:4e:09:0c:37:d9:82:0b:0b:35:58:44:45:3a:
                    a8:ca:2f:cb:7c:be:7e:c2:e5:bb:2e:8a:fa:dd:cf:
                    e8:9b:ce:2c:52:ce:8a:35:cc:b0:d5:29:de:34:16:
                    7d:03:fb:90:bd:2b:0b:58:50:ce:d8:36:d3:30:d6:
                    37:f9:fd:a5:c3:63:f9:3b:fd:ca:87:05:10:70:3e:
                    31:fe:50:4b:dc:17:d1:ce:76:82:42:28:87:d0:4c:
                    30:08:e4:6e:07:4f:ed:e8:87:97:0e:5e:4b:6d:32:
                    ac:30:8a:1c:90:b6:8f:ac:b6:84:ed:fa:4a:13:1f:
                    03:3e:84:29:f8:7d:91:04:07:85:1c:0a:ab:73:a4:
                    8d:3d:e0:dc:44:55:cc:d2:54:a7:5a:bf:2b:55:23:
                    4d:e1:9d:ab:1a:e1:42:ba:09:26:f5:42:60:6c:c6:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E6:6F:F5:72:90:6C:03:37:24:74:0C:DA:C0:3D:FC:AE:EB:2E:B8
            X509v3 Authority Key Identifier:
                keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:31:c2:3b:b1:08:99:e1:e9:e6:71:ea:3b:07:78:69:c8:ee:
         29:5a:04:90:ee:f3:66:c7:e6:98:75:c7:34:34:7c:8a:8d:88:
         04:97:45:c2:71:44:e5:86:29:e1:4f:86:fe:1c:1a:60:f6:a9:
         6e:5d:5e:70:8f:a9:f7:b6:08:2d:90:8d:35:8c:6f:9a:65:72:
         5b:04:01:dd:71:55:7f:f3:01:1a:26:54:dd:8f:f6:fa:68:7f:
         d3:3e:88:7b:63:f1:25:6b:07:67:c9:15:1d:28:2c:09:12:6c:
         9d:a0:d8:e0:77:7d:41:6b:e1:fb:8a:26:3b:09:20:4d:3b:53:
         fc:88:7d:39:a3:5d:98:dc:04:6b:8e:10:16:11:09:51:df:90:
         08:3f:22:c4:56:e3:e5:60:f7:e3:15:2e:87:4a:c0:27:3b:82:
         34:df:12:d9:e9:9c:c0:50:4a:f4:ac:2f:5c:b7:04:2b:a7:9f:
         cc:ff:3e:2a:9c:e2:c6:c1:d5:03:2c:80:67:85:a2:0b:73:61:
         ca:73:4b:35:ad:6f:fe:a3:cd:da:f2:66:6c:66:98:88:a3:c2:
         41:5c:a1:9a:a2:2a:f3:b8:b1:63:fa:16:96:78:82:e5:25:d4:
         88:fc:ff:aa:63:57:be:88:9b:56:cd:ed:64:fb:ee:73:d9:94:
         4b:5a:3d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 05:04:31 2026 by rpki-client