Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File:                     UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier:          KSaSaLK5yz3x5kYC2Lg6QXlIB159lvv7h5KWsjaxIIw=
Subject key identifier:   ED:5F:46:5B:86:41:36:5A:62:A4:2B:0B:C0:26:00:EB:6D:C3:9B:49
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer:       /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial:       019E4EEACEC21FD2EF8ABAC3EB4E699F39F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number:          17D0
Signing time:             Fri 22 May 2026 09:01:11 +0000
Manifest this update:     Fri 22 May 2026 09:01:11 +0000
Manifest next update:     Sat 23 May 2026 09:01:11 +0000
Files and hashes:         1: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: qYxUZC19x6O7mMR6zb3aOUN8JeNWXsNfMSEon0x7icY=)
                          2: tPGHq-xonUhjbc0GPXfgpubi7fg.roa (hash: enO+XevnxDfW0eM48CipaEGSZTkfKHUjYqxFWFDkOZ4=)
                          3: wRc3Z7cAWkuH8qIX0DCtlZppJxw.roa (hash: LxXQG3jteUBxRZiT3TEKB78O1uWlhGbpoLQr0jkRBdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4e:ea:ce:c2:1f:d2:ef:8a:ba:c3:eb:4e:69:9f:39:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
        Validity
            Not Before: May 22 09:01:11 2026 GMT
            Not After : May 23 09:01:11 2026 GMT
        Subject: CN=ed5f465b8641365a62a42b0bc02600eb6dc39b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:22:b7:60:80:7b:82:5e:f4:6c:a6:ea:62:
                    a9:d1:48:a5:0d:1a:b9:20:0c:2a:03:7b:89:54:c2:
                    18:9a:31:4c:77:be:ac:45:24:80:6d:39:2f:cf:9e:
                    7c:7c:4c:da:55:89:d5:c5:af:d9:89:f8:df:57:1e:
                    f8:1b:19:b7:5e:8a:0a:37:53:ee:ed:fb:4e:fa:b9:
                    48:e0:f3:64:46:6e:77:f8:c1:95:c2:07:75:8d:20:
                    6f:85:8b:b0:8c:c9:e3:49:fb:fe:19:fb:f2:0a:22:
                    5c:5e:49:0e:d3:de:63:e4:a8:89:b4:de:91:20:41:
                    90:fe:fd:d6:2c:1d:d3:63:1c:83:a4:69:93:62:d2:
                    a4:ab:39:ba:89:23:da:90:5b:1f:7d:1d:08:79:5f:
                    fc:c1:e3:9f:cf:70:bb:85:7a:72:fe:81:ec:5b:fa:
                    44:0b:50:89:87:c3:3a:7e:52:51:f5:0c:cd:f7:f3:
                    9a:21:d8:02:11:b9:10:45:39:b9:fe:26:21:dd:c4:
                    7c:95:e0:2e:e1:d2:f2:ac:56:3e:a0:c2:aa:e0:df:
                    1f:74:cc:7e:b1:44:cb:c5:fd:41:35:36:f7:0b:5f:
                    28:99:af:a2:db:e7:1f:39:a1:5f:65:29:ca:4d:47:
                    26:7c:7f:17:09:0e:d1:1d:42:71:d6:ea:95:bd:54:
                    e0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5F:46:5B:86:41:36:5A:62:A4:2B:0B:C0:26:00:EB:6D:C3:9B:49
            X509v3 Authority Key Identifier:
                keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d2:53:9f:7f:c9:56:bc:86:31:69:40:f6:19:d7:57:69:d3:
         28:ee:d3:53:ad:63:e8:45:53:f8:cb:f5:89:58:94:7c:51:b5:
         25:5d:f2:24:19:a9:cd:59:d8:18:04:3b:8c:cf:ae:81:10:c9:
         24:73:67:86:b9:3c:de:f0:9a:15:57:dc:17:26:05:6d:59:4e:
         73:0d:69:68:be:60:a5:5a:45:cc:38:d5:0f:3d:12:ae:80:74:
         bc:c0:98:2e:0e:5a:24:3b:ff:f3:4a:c5:43:90:a1:37:10:89:
         72:f0:b9:92:4b:3d:c8:32:09:fd:da:50:82:97:f9:6e:50:1f:
         0e:87:e8:d0:88:f9:f0:c2:40:ef:36:7f:c2:b6:9c:bf:be:d3:
         e4:dc:1f:d5:16:57:f6:9a:c8:3d:dd:b8:a2:77:d4:ee:92:7c:
         7d:b3:1e:43:5e:f9:9a:c2:31:cc:e2:ee:42:ed:1a:0d:48:4b:
         24:d3:e5:0d:25:d0:10:f4:f7:9a:92:5e:b5:1e:ad:e0:e8:f8:
         c9:ab:36:db:5e:6a:b7:ef:48:3c:d4:a2:00:dd:ae:30:d2:55:
         78:29:bf:86:7e:09:97:4a:11:dc:da:f0:14:e5:b5:d9:84:df:
         ca:9c:df:72:99:f0:b5:96:56:4f:93:8d:2e:a1:8c:ba:94:c7:
         7c:92:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:25 2026 by rpki-client