Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
File:                     UioivM096CZa_VX5gw_8Acg69yY.mft (raw, json)
Hash identifier:          oX8FR2VebwCA5SR9ulop8G4926TO9wdNONXfB46JLgQ=
Subject key identifier:   11:D6:29:DF:83:00:6F:52:1E:82:3B:89:B4:30:2D:44:8A:1C:30:27
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Certificate issuer:       /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial:       019E311764632EDB0FA86FC36BFCA05CFFD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
Manifest number:          17D3
Signing time:             Sat 16 May 2026 14:01:17 +0000
Manifest this update:     Sat 16 May 2026 14:01:17 +0000
Manifest next update:     Sun 17 May 2026 14:01:17 +0000
Files and hashes:         1: KUryY42m2fnkmP-WzOJ-QVftr9g.roa (hash: Gx9GfjB1RZqYcjhruz7ETAwNtunYLpuohd0SXD4QObk=)
                          2: UioivM096CZa_VX5gw_8Acg69yY.crl (hash: hL3Er1aZ83O2ufHiV+GRDGaRYGxXDRLzjI5FvP7WtIE=)
                          3: _-cN-sAbrViLwmycVeqjqlvUMm4.roa (hash: noKzUYWAtrL71gb87r5bxvuWL2VHpxYOGDrkOQNEG/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:64:63:2e:db:0f:a8:6f:c3:6b:fc:a0:5c:ff:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
        Validity
            Not Before: May 16 14:01:17 2026 GMT
            Not After : May 17 14:01:17 2026 GMT
        Subject: CN=11d629df83006f521e823b89b4302d448a1c3027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:9a:43:1e:56:fd:71:ae:50:88:46:17:37:
                    29:73:85:8b:d1:1f:d5:0b:52:36:cd:f5:20:95:2e:
                    a5:d8:87:55:47:be:90:13:52:26:f2:ac:66:f0:3b:
                    b7:ec:30:de:4b:59:24:fb:3c:6a:69:3a:8b:48:0f:
                    f2:b3:71:5d:fb:d5:1f:b5:08:42:87:a5:57:69:85:
                    2a:ca:d0:b4:cf:fa:9e:1b:f9:e7:79:68:88:5a:40:
                    32:1c:d4:d9:50:8c:b1:b9:dc:08:34:43:be:3c:37:
                    92:09:a5:3b:4d:1e:7d:18:41:8c:69:98:72:36:60:
                    b7:41:d8:69:2c:03:7c:0e:a6:68:96:af:c8:81:2d:
                    d6:20:7f:46:1d:a4:bb:6c:90:3c:20:6c:3c:d0:e6:
                    6f:9d:0a:b0:f7:a6:2d:77:12:4f:68:88:93:78:6d:
                    69:e0:4b:d9:ef:b9:0a:23:5e:eb:e4:a7:3e:80:bf:
                    df:23:1b:97:aa:d0:72:87:80:f3:31:ad:6d:3f:ab:
                    2f:a0:69:a0:1f:ae:8c:0c:48:37:f5:d5:62:e8:8c:
                    37:ac:79:13:fa:4a:54:9e:ed:50:06:1d:ab:a2:ca:
                    5a:5d:88:c9:0d:2d:e0:d8:79:ad:fc:33:9c:bf:00:
                    77:fc:fa:67:da:8e:27:a8:fe:fe:80:64:fc:50:2d:
                    f2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D6:29:DF:83:00:6F:52:1E:82:3B:89:B4:30:2D:44:8A:1C:30:27
            X509v3 Authority Key Identifier:
                keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e3:26:6f:ad:17:a6:db:8d:6c:10:e1:4e:f7:dc:9a:34:52:
         26:2e:63:41:86:d1:11:9b:65:e6:14:b5:0c:28:45:d8:2c:1a:
         ee:32:da:8c:81:35:3c:e9:86:08:c7:53:aa:87:ed:89:52:de:
         84:01:da:7b:63:12:c4:47:16:91:b1:83:05:1f:eb:45:68:71:
         0d:4f:1f:3b:3e:b1:fa:8d:75:12:39:41:a4:20:4b:21:5d:78:
         e1:a8:68:8b:b5:8c:17:bd:de:b3:d1:34:da:49:1d:3f:f2:6b:
         09:df:b2:2c:1b:89:47:41:0b:95:6c:82:fc:25:a6:4f:5f:26:
         07:60:ad:e5:7b:3e:7e:71:72:6d:0f:8d:34:29:6b:29:a2:6b:
         eb:7e:0d:91:55:5a:a9:0e:03:38:41:71:88:42:96:fe:78:ff:
         d1:1c:bd:3b:89:a4:e3:bc:8a:da:7c:ae:70:46:7a:9d:a7:0b:
         9b:74:6a:a0:08:cd:0e:6e:d8:54:5f:5d:17:4d:ab:63:1c:19:
         26:19:d9:c8:22:6c:49:32:df:cc:12:0b:8d:5d:a3:cc:2e:93:
         dc:8c:5f:45:86:d5:24:cd:78:29:55:4f:8a:05:af:03:66:0e:
         8f:10:04:f3:1e:43:73:c0:4e:98:90:99:a1:1b:ac:11:14:41:
         3c:f7:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:40 2026 by rpki-client