Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File:                     uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier:          9bbKmOjU5dKqzG8Uzy0P8kaJayTrT/8ByUrvBD42I/M=
Subject key identifier:   83:8D:75:43:54:DF:DA:D7:E4:B6:1A:A8:36:E4:04:45:0B:5D:2B:18
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer:       /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial:       019E314E33F517BE508B4BD10F6F24967A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number:          0F41
Signing time:             Sat 16 May 2026 15:01:09 +0000
Manifest this update:     Sat 16 May 2026 15:01:09 +0000
Manifest next update:     Sun 17 May 2026 15:01:09 +0000
Files and hashes:         1: sQXNrRfabqEAqxGuf8P5f2NecXw.roa (hash: 2PpXo8MephsPJxKEGzhYMR57A346BOGMuHA13iu9pZo=)
                          2: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: q2V2N2Iitj5HoKkbdjdHbl7Hvtk2bY7mOy/zKtO6BWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:33:f5:17:be:50:8b:4b:d1:0f:6f:24:96:7a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
        Validity
            Not Before: May 16 15:01:09 2026 GMT
            Not After : May 17 15:01:09 2026 GMT
        Subject: CN=838d754354dfdad7e4b61aa836e404450b5d2b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:17:52:15:99:a4:1b:3d:94:a1:58:9f:36:
                    b8:a4:5a:1b:4b:be:43:4c:c1:c1:dd:b4:58:1e:24:
                    57:db:0f:3e:b8:98:d4:d7:59:cf:41:be:01:e2:79:
                    4a:47:05:b4:44:bc:5f:2b:9d:2c:a8:4e:3d:14:65:
                    cc:78:22:26:4e:e9:b4:ae:1c:3c:6c:c8:56:aa:6b:
                    7a:1e:a9:7e:5b:7a:90:e3:01:74:7b:77:8f:29:01:
                    76:a0:b7:33:61:f7:e8:9b:d8:30:fd:f6:cb:22:e0:
                    d4:2a:29:83:84:db:32:a3:fe:93:57:ab:13:bd:d6:
                    42:5f:25:a1:1c:31:9e:65:c7:2e:df:d4:ce:92:c0:
                    f2:2e:11:71:13:7f:b5:d2:6e:ca:1c:f4:0b:f3:df:
                    ff:29:45:98:21:7f:96:b6:99:f7:27:7a:b7:99:d8:
                    67:13:0b:11:70:93:5e:d5:0e:28:39:0f:2b:86:37:
                    5a:0f:01:b4:83:40:27:e2:5e:1b:f4:f6:9a:03:12:
                    06:b0:ce:38:c0:dd:35:b6:d2:01:bc:b4:6a:61:da:
                    07:b8:e8:0d:de:ca:25:3c:59:f1:64:a2:c3:02:18:
                    66:fa:5d:30:7e:21:f7:cb:f9:38:c6:db:ca:06:8d:
                    5e:de:5a:ea:be:a7:28:50:2f:ae:00:f9:fc:48:ca:
                    23:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8D:75:43:54:DF:DA:D7:E4:B6:1A:A8:36:E4:04:45:0B:5D:2B:18
            X509v3 Authority Key Identifier:
                keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:cc:24:58:ee:5a:7b:0d:8f:3f:60:f5:46:fc:3d:f8:4b:f3:
         29:c0:55:5f:92:f3:f4:72:ca:31:05:e1:27:73:3a:82:f9:98:
         24:c9:c3:22:28:08:33:26:b5:b8:35:55:de:44:b3:1d:8c:36:
         e2:8a:d8:2b:f9:c5:8c:a3:f1:d9:f6:a3:e2:79:bd:81:b0:f6:
         15:3f:e8:f7:44:d7:2e:28:0d:5a:aa:c7:31:29:1b:06:86:fe:
         fc:c0:e1:6e:8c:ce:95:3b:dc:ed:cf:a6:43:08:0a:5f:49:c5:
         81:e1:c4:f5:aa:85:a0:4a:0a:89:07:00:6b:42:83:9b:92:21:
         c9:a5:1d:77:75:a0:30:38:7d:eb:43:e8:7a:e3:33:58:f8:ee:
         7f:2e:b0:62:f2:7a:70:32:d6:4e:21:da:fa:3c:2c:d6:96:57:
         94:40:06:f1:e8:a4:24:02:28:37:49:11:23:58:eb:6a:80:a3:
         8e:a7:78:2d:fd:a0:80:52:63:77:96:1e:39:97:fb:a9:9b:e1:
         15:36:14:45:ec:ec:56:f2:e8:11:23:47:c1:55:cc:9f:6b:c4:
         a7:f0:99:20:d3:f0:38:ed:55:37:51:ad:d7:f7:25:ac:72:5b:
         e3:1e:8e:11:50:7b:ee:ba:e7:da:c2:cd:1c:4f:45:c8:c8:b7:
         51:78:19:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:13 2026 by rpki-client