Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File:                     UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier:          dSl63uAOvrJI52HUIQZ0notAB2fVdy8gk/aB2u0qbM8=
Subject key identifier:   CD:AB:FA:84:37:C8:2B:89:E4:39:D5:AE:D8:B8:75:BC:72:0A:7C:F6
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer:       /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial:       019E30E03E05451457716089BFACBD407FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number:          1756
Signing time:             Sat 16 May 2026 13:01:02 +0000
Manifest this update:     Sat 16 May 2026 13:01:02 +0000
Manifest next update:     Sun 17 May 2026 13:01:02 +0000
Files and hashes:         1: 02UbpjggiD2hCuBROuOMzSrBNes.roa (hash: oD92ZLodntYyRevIXaKbN61NlRaYP5OLaBNueXJo8rI=)
                          2: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: OlNKgS9CU584SioCwMs9DgXqKKBbJiPAbqLClirMDXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:3e:05:45:14:57:71:60:89:bf:ac:bd:40:7f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
        Validity
            Not Before: May 16 13:01:02 2026 GMT
            Not After : May 17 13:01:02 2026 GMT
        Subject: CN=cdabfa8437c82b89e439d5aed8b875bc720a7cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a8:11:cf:9b:37:66:60:f9:0a:9d:0e:ca:05:
                    52:73:bd:4e:39:ce:80:25:1a:b5:0b:8b:4a:b2:2b:
                    b5:33:da:ed:96:6c:8c:3c:8a:a4:cb:cb:6e:c6:5e:
                    f4:95:2e:c8:70:0c:65:e5:72:7b:64:0c:49:8f:44:
                    c9:f3:d9:89:78:1d:e9:cb:26:20:a8:3f:39:67:64:
                    0d:86:29:75:a3:66:5a:ed:74:52:d8:79:60:4f:76:
                    0c:64:1b:1f:30:36:e0:5d:20:fa:87:71:21:19:f3:
                    12:34:44:ca:0b:ef:87:8e:91:4d:0d:a1:a4:46:12:
                    e6:5e:cc:0f:eb:46:42:b7:35:0e:68:d4:18:a8:71:
                    49:8b:4d:24:0d:97:aa:56:ef:c7:48:19:20:2b:f4:
                    32:1d:0e:a9:a2:33:86:3c:62:4a:7c:61:c4:ad:17:
                    e6:ad:80:6a:3a:75:0c:a0:10:bc:fe:80:21:02:65:
                    60:b0:3b:b6:60:e4:77:59:d4:71:32:83:b1:d4:56:
                    f3:fc:64:cf:8f:08:5b:34:68:8d:4d:84:34:3a:a8:
                    96:de:b4:6f:0e:43:4a:d1:b8:cf:6b:5b:07:48:86:
                    04:d6:67:76:dc:dd:b5:1d:ab:5e:28:34:2f:fe:cc:
                    74:60:e8:d2:dc:84:fc:2b:03:a6:88:f1:52:55:38:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AB:FA:84:37:C8:2B:89:E4:39:D5:AE:D8:B8:75:BC:72:0A:7C:F6
            X509v3 Authority Key Identifier:
                keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:79:51:5e:e0:e8:88:1e:64:9d:0d:3e:db:cc:c5:78:ed:de:
         ba:22:fc:95:ca:30:12:44:e8:7d:fe:c5:75:2b:19:d8:4c:9d:
         a3:df:19:c7:c6:91:89:7e:a4:32:44:5e:bf:ac:6f:e5:c7:17:
         19:cc:9c:43:33:f9:88:70:35:a3:8c:f0:1d:a1:a0:55:4a:31:
         01:f9:e1:10:73:07:48:c1:c2:c1:7b:d9:97:6a:c2:fa:f7:3d:
         8f:9d:6c:16:a2:31:43:de:7d:64:87:4e:c5:1a:34:4f:8c:5b:
         b1:4a:7b:77:62:b7:b6:4d:d9:53:d0:c5:30:b7:a9:e2:db:6e:
         b0:c0:26:8e:a1:b7:5d:98:87:78:59:c2:cc:93:f9:b0:de:7f:
         e9:18:f6:21:52:fa:8b:09:94:3b:6c:05:05:26:9c:72:52:99:
         31:17:84:84:e0:08:77:02:af:98:86:16:22:6a:5d:78:37:45:
         98:c5:55:ef:d4:13:26:c4:e7:f7:cd:13:54:ed:5a:7d:4f:02:
         9b:2e:8b:ba:bb:e2:6a:32:e6:6c:98:57:dd:87:b9:ce:56:7d:
         b7:2e:e3:33:e8:a3:03:eb:98:ec:c9:2f:c2:01:f6:e7:2e:d0:
         e4:8f:db:8b:d2:07:20:63:be:18:4f:04:02:1c:35:90:d0:7c:
         b1:c2:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:28 2026 by rpki-client