Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File:                     uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier:          alrzFYXAs4ehdzd/TRmI0CHOb/Vmr9qymAEHHLV9368=
Subject key identifier:   C1:09:51:45:3A:E7:40:DA:B7:CF:9E:87:CA:84:83:4F:D2:AD:80:F6
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer:       /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial:       019E29CC58AD09A406A221776BCFD645034C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number:          18D2
Signing time:             Fri 15 May 2026 04:01:58 +0000
Manifest this update:     Fri 15 May 2026 04:01:58 +0000
Manifest next update:     Sat 16 May 2026 04:01:58 +0000
Files and hashes:         1: 4vljd6eS7xs98V4vbQdU27KIRbo.roa (hash: p9Wr9nNkj4z/XeaCt1WGEIqENx+18d7M1y0DLvifYF0=)
                          2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: jFfyl/d/vZQC8PemZE18fyfETcliMeHTrNui+hcLViU=)
                          3: uUX1xSwp1T9nuxxoEoS7mJ4ylKQ.asa (hash: ARnmi9JFKrZP1rcaarKtNChdLdy0XQtmO2iQxRYVYjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cc:58:ad:09:a4:06:a2:21:77:6b:cf:d6:45:03:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
        Validity
            Not Before: May 15 04:01:58 2026 GMT
            Not After : May 16 04:01:58 2026 GMT
        Subject: CN=c10951453ae740dab7cf9e87ca84834fd2ad80f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:71:96:d1:c2:f5:66:e1:b9:af:f0:b8:ed:19:
                    d5:d1:e2:c6:92:7e:1f:28:f1:62:b6:40:bb:7b:b2:
                    69:c0:8e:0a:51:33:0a:e0:80:17:42:46:04:c8:f6:
                    e1:7d:ab:49:89:ae:de:78:a9:f0:bb:d9:dc:b8:a6:
                    1f:cd:f2:e9:a0:dc:50:cd:6f:9f:32:0e:3e:7f:bf:
                    9f:1e:8e:01:61:ee:48:9b:10:3a:72:a6:3a:ce:a0:
                    c0:f0:f7:4d:a9:74:2a:61:4c:0d:d1:6d:be:91:f5:
                    7f:e8:bf:27:4f:7f:95:8a:85:22:02:4c:f3:71:17:
                    8f:83:cb:08:65:d1:dd:f2:db:ab:9f:b5:ec:17:68:
                    53:b7:a7:46:60:13:0e:b9:01:a6:1c:33:4b:65:9c:
                    56:ba:16:7e:13:0f:c9:da:a0:a3:b7:1b:ed:50:98:
                    b0:3d:3a:86:5d:af:28:e5:93:23:79:ca:64:0f:95:
                    f8:1a:72:13:6b:2e:4b:9c:84:38:e6:9a:fb:9e:b6:
                    b5:23:99:11:da:38:f1:b8:2d:46:3a:de:2a:e8:d4:
                    fa:a0:5d:17:6c:f8:59:99:6e:1b:31:5f:1c:c0:83:
                    55:a5:c0:30:f2:96:58:7c:51:ef:a0:f7:a5:64:e2:
                    c7:cd:2d:56:f6:f7:29:3e:83:75:1e:3e:a7:7d:53:
                    18:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:09:51:45:3A:E7:40:DA:B7:CF:9E:87:CA:84:83:4F:D2:AD:80:F6
            X509v3 Authority Key Identifier:
                keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:72:4e:2a:61:de:a7:05:aa:cd:ee:f6:20:5b:b5:bb:55:36:
         8a:bf:b3:69:b3:6c:72:d7:9a:8d:7a:4c:b4:87:30:80:70:01:
         2d:e3:e0:d0:fb:1b:c4:42:4e:89:83:74:03:36:bf:6d:86:dc:
         bd:7d:13:b5:7c:75:fe:a6:18:30:74:d3:05:62:10:ee:7e:2d:
         cc:3f:ef:7b:e1:91:75:87:3f:c3:8a:9c:c3:80:07:91:30:b8:
         4d:5e:e9:16:5f:13:7b:f1:40:57:c4:f2:ea:8e:be:a9:c8:4f:
         13:65:ce:c0:da:00:f2:9f:07:df:e5:63:57:c9:c6:3f:6f:14:
         68:f7:7f:96:4a:88:d0:ce:e7:02:72:71:46:cf:a6:29:1d:dc:
         fc:8d:ad:3c:38:48:15:39:d3:2a:0e:46:8f:ea:0f:6f:3e:9f:
         c6:f4:b9:24:4a:3a:10:2d:a4:b6:45:0f:41:6d:92:1a:f3:74:
         20:e1:a6:dd:a2:26:a8:e4:21:05:9e:dc:6e:a1:60:df:12:be:
         ba:53:0d:4a:83:d7:27:ee:a6:5c:38:6c:c9:64:2f:4a:5f:c1:
         30:e7:48:6f:27:ce:68:0b:e3:5a:71:00:3d:5f:db:b1:91:a7:
         b6:d9:20:19:4a:2d:49:39:18:fc:98:95:cc:3f:bf:6e:1f:f3:
         80:9f:99:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pzFitCaQGoiF3a8/WRQNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDIzYjFlNmMwN2U2MmFmMmQyZTdlYjZkZTA4OTNiMDkx
MTlhYmIwHhcNMjYwNTE1MDQwMTU4WhcNMjYwNTE2MDQwMTU4WjAzMTEwLwYDVQQD
EyhjMTA5NTE0NTNhZTc0MGRhYjdjZjllODdjYTg0ODM0ZmQyYWQ4MGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HGW0cL1ZuG5r/C47RnV0eLGkn4f
KPFitkC7e7JpwI4KUTMK4IAXQkYEyPbhfatJia7eeKnwu9ncuKYfzfLpoNxQzW+f
Mg4+f7+fHo4BYe5ImxA6cqY6zqDA8PdNqXQqYUwN0W2+kfV/6L8nT3+VioUiAkzz
cRePg8sIZdHd8turn7XsF2hTt6dGYBMOuQGmHDNLZZxWuhZ+Ew/J2qCjtxvtUJiw
PTqGXa8o5ZMjecpkD5X4GnITay5LnIQ45pr7nra1I5kR2jjxuC1GOt4q6NT6oF0X
bPhZmW4bMV8cwINVpcAw8pZYfFHvoPelZOLHzS1W9vcpPoN1Hj6nfVMY9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEJUUU650Dat8+eh8qEg0/SrYD2MB8GA1UdIwQY
MBaAFLjSOx5sB+Yq8tLn623giTsJEZq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMt
NjkwNjFlZjJjNDk5LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMtNjkwNjFlZjJjNDk5
LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3JOKmHe
pwWqze72IFu1u1U2ir+zabNscteajXpMtIcwgHABLePg0PsbxEJOiYN0Aza/bYbc
vX0TtXx1/qYYMHTTBWIQ7n4tzD/ve+GRdYc/w4qcw4AHkTC4TV7pFl8Te/FAV8Ty
6o6+qchPE2XOwNoA8p8H3+VjV8nGP28UaPd/lkqI0M7nAnJxRs+mKR3c/I2tPDhI
FTnTKg5Gj+oPbz6fxvS5JEo6EC2ktkUPQW2SGvN0IOGm3aImqOQhBZ7cbqFg3xK+
ulMNSoPXJ+6mXDhsyWQvSl/BMOdIbyfOaAvjWnEAPV/bsZGnttkgGUotSTkY/JiV
zD+/bh/zgJ+ZwQ==
-----END CERTIFICATE-----
Generated at Fri May 15 06:22:18 2026 by rpki-client