Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File:                     UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier:          NrsaK+Ve2SVuAwUrwP9zU/lRDw7T9cEp2a2/bb3DFeU=
Subject key identifier:   5B:26:A0:C3:75:C0:ED:1A:4E:B0:A3:DA:AA:FF:9B:9A:A0:50:DD:5D
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer:       /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial:       019E2881CB0078CF207BF7A8C9E5E3C480F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number:          0F9B
Signing time:             Thu 14 May 2026 22:00:55 +0000
Manifest this update:     Thu 14 May 2026 22:00:55 +0000
Manifest next update:     Fri 15 May 2026 22:00:55 +0000
Files and hashes:         1: BBEExDLi9wN2ArwpnoUathyZ5G4.roa (hash: DNC51vwYFelu0Iw03W6o2j0OpPGTm67rvC5dlIgn/R0=)
                          2: B_hvqyRv6JLmJCV1iTWTImKLqvw.roa (hash: TWMSz8xRjNA5aPk12IuqB7yBAlzSjyaKWTWQ7yxehNE=)
                          3: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: s6aix98DFhow7p/ph/2sSeqE1SpaSPtehkLCC4TfP24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:81:cb:00:78:cf:20:7b:f7:a8:c9:e5:e3:c4:80:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
        Validity
            Not Before: May 14 22:00:55 2026 GMT
            Not After : May 15 22:00:55 2026 GMT
        Subject: CN=5b26a0c375c0ed1a4eb0a3daaaff9b9aa050dd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:ab:76:8b:b8:2d:ea:fe:3a:a1:db:78:2a:
                    b6:16:c6:a9:c3:a7:4e:2c:d3:64:fe:10:7a:6e:22:
                    52:f2:89:ad:96:fb:8a:78:c1:99:db:69:ae:14:46:
                    33:07:5d:87:c3:9d:3e:62:89:db:82:45:20:0f:44:
                    ea:d7:7e:b6:6f:69:ce:5f:d1:64:32:fb:46:2d:8a:
                    3d:58:43:24:36:be:10:6e:af:c9:1f:63:c7:67:b5:
                    df:2b:71:ee:d0:4e:9f:2d:ec:d4:12:05:dc:67:98:
                    8e:1b:fe:09:f3:a3:b0:c9:d3:ac:05:76:b1:b8:15:
                    62:22:ae:b8:ce:40:14:6a:4c:4a:f8:76:ec:a3:9c:
                    15:f5:38:7e:b2:f9:d8:60:88:d6:97:6f:ae:d9:88:
                    fa:c3:cc:88:96:27:3f:7a:e8:dd:d6:fa:e4:14:4c:
                    ec:da:f6:87:1a:a6:30:9c:fe:73:6e:1f:bd:e8:b2:
                    a9:f0:2f:87:17:df:ea:24:d4:e7:68:88:05:2a:58:
                    b9:90:2a:19:d3:b0:84:3a:5a:59:ba:e7:38:50:17:
                    f3:cf:d9:2b:6e:8a:6e:e4:15:d3:c8:74:09:cf:29:
                    79:75:9b:76:e0:45:4c:f1:92:f7:dd:d7:f8:3f:df:
                    83:ec:79:6e:00:5c:7b:3e:f0:2f:f9:55:51:6a:20:
                    fb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:26:A0:C3:75:C0:ED:1A:4E:B0:A3:DA:AA:FF:9B:9A:A0:50:DD:5D
            X509v3 Authority Key Identifier:
                keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c3:83:54:b4:d4:b7:96:4a:db:ab:35:c2:d3:c5:88:59:cd:
         36:56:47:8d:18:3d:c3:f6:f7:2e:50:d2:6f:83:99:62:a7:0c:
         ac:9f:8c:df:83:d5:cd:2f:db:17:bc:2d:19:04:d4:49:b1:ca:
         07:26:1c:38:bf:50:e7:01:28:9f:42:18:d8:2a:d2:b2:a3:6c:
         3c:27:d4:04:93:71:20:45:ae:60:b5:68:f2:9f:bc:a0:c3:65:
         30:51:98:62:4e:62:71:18:fc:87:5b:18:89:22:b2:d9:dd:b0:
         a3:71:1d:fd:1f:aa:d5:c4:14:89:4c:05:12:08:fb:cf:9d:6f:
         c0:19:2e:a3:8a:98:60:d3:17:f8:ab:4f:90:84:56:d6:bb:09:
         3d:6f:ef:7c:a2:32:2f:b0:ef:08:ef:41:de:b7:8b:4a:3b:c0:
         80:cf:00:ec:d4:90:c5:5f:ed:99:2e:38:51:8a:fd:69:72:a0:
         51:0e:a3:88:e7:cd:f3:c3:0b:6c:11:c0:39:94:34:48:82:36:
         15:1f:98:5c:27:ef:24:f8:ab:55:b8:5a:3b:ef:58:cc:59:5f:
         fb:a4:dd:a4:21:59:0a:26:60:90:56:b8:4b:3f:41:13:5c:60:
         fb:06:2a:d4:a5:b6:7f:7e:a0:05:53:94:66:47:a3:6b:c1:92:
         f1:5a:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:34 2026 by rpki-client