Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
File:                     uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft (raw, json)
Hash identifier:          xpHDqKqhejWdn9T/libRxTm0eJtrhpOqy8KqAZehSSg=
Subject key identifier:   39:5C:55:3B:D0:79:B7:35:D7:07:B2:3A:6F:48:8C:07:4D:E7:8B:93
Authority key identifier: B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5
Certificate issuer:       /CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
Certificate serial:       019E33AA55E593F6AAC548B353E7B832F98F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
Manifest number:          191A
Signing time:             Sun 17 May 2026 02:01:01 +0000
Manifest this update:     Sun 17 May 2026 02:01:01 +0000
Manifest next update:     Mon 18 May 2026 02:01:01 +0000
Files and hashes:         1: lMQRX0mR9Axp4z6P95tdFQDV46k.roa (hash: Se/NXmVlNWl9ejlquvOyXO/Tg0Zm/eNsymPPK58mByY=)
                          2: uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl (hash: WgnF+TYhon6EovRjFE3L5BtoVowOOFnpZbjOuoQrytE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:33:aa:55:e5:93:f6:aa:c5:48:b3:53:e7:b8:32:f9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
        Validity
            Not Before: May 17 02:01:01 2026 GMT
            Not After : May 18 02:01:01 2026 GMT
        Subject: CN=395c553bd079b735d707b23a6f488c074de78b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:f6:e6:af:64:23:4a:b1:00:53:c7:7b:8a:
                    f1:6c:58:86:74:ec:e7:92:c9:b5:b4:fe:84:3e:3f:
                    d2:b1:fa:62:3b:9b:d8:1d:5c:36:4c:45:88:72:e2:
                    9c:f4:eb:cb:c1:b2:19:4f:e1:9f:4f:fe:eb:31:6a:
                    38:ed:b0:95:16:9c:b1:9f:bb:2f:e2:a4:0b:8a:f4:
                    72:ab:6c:70:3c:97:93:52:c7:e9:ad:d7:de:a9:3b:
                    89:4a:20:a9:35:aa:aa:5d:bb:f1:39:76:f5:5a:6d:
                    d3:52:6e:99:45:88:ba:5a:d8:3f:02:13:ea:fc:66:
                    a2:23:29:a6:5b:b1:c4:ff:8e:04:21:97:0a:81:d3:
                    88:a9:05:ac:b1:11:db:21:db:33:d9:a3:4d:cb:f4:
                    c2:4c:09:5d:23:dc:c7:be:dc:54:e0:60:dd:d7:94:
                    54:e3:fb:08:3d:df:cd:80:6c:2c:6b:7c:6d:e0:ec:
                    ef:d2:b2:29:4d:a9:8e:62:b0:8b:aa:3c:00:58:ec:
                    5e:47:aa:e9:d1:81:61:f4:8f:be:4f:72:4b:09:cd:
                    2a:70:78:61:36:62:cb:39:63:fb:b7:a7:29:3c:4d:
                    8a:50:b0:96:36:00:3a:85:59:85:63:0f:66:75:a5:
                    c0:2b:23:89:ab:35:ca:30:71:d1:bb:b6:54:d7:25:
                    c6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5C:55:3B:D0:79:B7:35:D7:07:B2:3A:6F:48:8C:07:4D:E7:8B:93
            X509v3 Authority Key Identifier:
                keyid:B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:6a:8f:49:ef:a2:c3:89:cf:85:da:b9:62:f7:43:5b:da:67:
         75:18:17:aa:7b:32:a9:5e:71:25:eb:23:d0:f2:59:d7:5f:5d:
         c2:ee:7c:db:60:d8:b6:05:3c:66:26:77:cd:d7:11:2a:46:60:
         98:05:df:ab:73:f8:10:23:1f:dc:b2:9b:1a:a4:d9:11:7b:28:
         48:bd:9d:a7:40:bd:e4:01:b0:52:fa:43:24:ca:aa:d6:3a:59:
         94:38:6b:49:55:f3:9a:b7:c6:a9:11:c5:5c:08:67:2c:0b:ab:
         2b:fc:c0:14:c2:49:56:3c:97:5b:90:f0:96:c1:6b:cd:9b:00:
         d2:ff:8e:14:2b:73:d9:f4:fd:c1:10:59:9a:94:ec:f5:bb:a2:
         99:dc:12:b2:0c:5b:a9:14:f1:77:b5:dd:9d:a4:13:54:24:44:
         6b:77:e4:82:48:13:1a:ee:68:40:34:4b:79:c6:17:7f:0e:17:
         6e:65:ab:08:af:9c:8e:ee:13:9e:15:d8:10:db:5e:9d:4f:bf:
         bb:cb:13:48:fe:46:54:18:1b:2a:3d:76:5d:e0:c1:96:35:4c:
         ed:cc:76:9e:83:49:a4:65:ce:9c:6e:16:a8:8a:c1:0b:fb:d0:
         c3:46:a0:fa:29:7b:65:17:ae:50:30:a2:2e:43:3b:f4:61:3c:
         cf:b9:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 04:16:30 2026 by rpki-client