Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
File:                     uhfrfV8E0nFV8gF4bzkPtAimquQ.mft (raw, json)
Hash identifier:          Z4hHWZu4T+7Ojw5TcO0pSU2sy5DlmqXEqMknvu+Z8Ws=
Subject key identifier:   57:AD:61:DC:D9:9E:D2:4E:EE:F1:C6:F5:DA:1B:86:3E:14:51:0B:8D
Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
Certificate issuer:       /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Certificate serial:       019E31173F4DA021928365C5019D60568F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
Manifest number:          0149
Signing time:             Sat 16 May 2026 14:01:07 +0000
Manifest this update:     Sat 16 May 2026 14:01:07 +0000
Manifest next update:     Sun 17 May 2026 14:01:07 +0000
Files and hashes:         1: 0yT0OXiNw9csRLbDIHPuRhRNJuA.roa (hash: V99TnpgsuLfThbZigceHdcceXYaalafIhYll4v0qF0s=)
                          2: uhfrfV8E0nFV8gF4bzkPtAimquQ.crl (hash: NfbmYaVbJ7z7ej7tCjrziYqgoCuLhqgclCD4i6TSv2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:3f:4d:a0:21:92:83:65:c5:01:9d:60:56:8f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
        Validity
            Not Before: May 16 14:01:07 2026 GMT
            Not After : May 17 14:01:07 2026 GMT
        Subject: CN=57ad61dcd99ed24eeef1c6f5da1b863e14510b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:0b:98:18:78:cb:c7:22:2d:e7:48:61:7b:
                    b5:0e:8a:e4:a6:8f:b4:43:9d:3d:53:64:9c:5c:a2:
                    70:f3:15:b0:7d:93:b1:fb:42:9e:46:6a:bc:e1:09:
                    d0:81:a0:e0:e8:48:98:aa:aa:fb:37:42:91:04:5e:
                    3e:ef:67:a1:18:21:0d:f1:00:cb:f2:ab:dd:b2:ed:
                    37:0b:71:fe:06:4d:02:8e:89:a5:58:c4:ca:57:45:
                    a0:4f:f3:45:22:c0:6f:73:82:9c:b9:1c:60:65:7e:
                    07:a7:4b:58:f1:0c:b2:8d:20:13:0b:24:25:4d:04:
                    63:ba:ef:43:d7:f2:c7:aa:bd:a8:ae:37:97:36:ee:
                    f9:19:c7:81:13:e4:35:1a:7d:e3:8a:54:91:99:2d:
                    e4:51:0e:60:fa:b3:e9:9a:0b:8a:63:ab:54:af:aa:
                    94:88:8e:ca:e8:de:0a:d0:eb:85:98:b2:42:6a:4a:
                    36:88:4e:0c:e6:1f:ab:72:08:d6:de:7f:74:39:70:
                    60:41:60:ed:74:e4:e1:4e:28:97:36:36:aa:0e:45:
                    d4:14:63:5b:e5:49:2c:01:73:5f:f4:f7:aa:35:f7:
                    e1:0b:09:e3:33:fd:83:96:a7:a2:83:6b:4c:3f:10:
                    26:7a:46:ef:5a:e8:10:3d:1e:52:47:71:7e:44:81:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AD:61:DC:D9:9E:D2:4E:EE:F1:C6:F5:DA:1B:86:3E:14:51:0B:8D
            X509v3 Authority Key Identifier:
                keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:46:e9:b2:72:f1:bc:f7:a3:42:91:08:5c:dd:b3:19:e3:58:
         5c:b8:38:e5:9f:b9:ac:95:06:03:c7:26:c5:55:59:fb:7a:ae:
         c5:91:93:d6:ea:2c:c7:df:b8:a9:3c:ce:46:a1:7d:2c:c6:0e:
         f3:24:81:63:06:d6:7f:0e:10:2c:ab:61:4d:7b:41:fc:3c:97:
         ba:d6:67:01:25:dc:2c:7e:8f:ec:41:b6:74:1a:76:34:50:b9:
         54:52:25:1b:2d:51:bb:b7:14:d6:9e:78:d4:e7:0c:23:62:1f:
         69:35:82:aa:7c:f0:fd:b5:7b:2d:00:d0:b9:0f:b4:04:79:c3:
         2c:27:e5:10:ba:b7:e5:ba:49:6a:19:a2:cb:97:1d:23:29:5d:
         3b:b1:44:0b:45:13:36:8c:ad:da:02:98:2e:54:a3:7e:00:22:
         83:24:c4:1c:7e:55:e7:23:be:41:bf:50:2e:f4:80:c1:66:29:
         a6:2b:8a:b4:6e:66:28:1d:26:6f:86:a3:ef:d8:e6:30:8f:51:
         b9:8b:cb:a6:8b:de:1c:3f:63:ed:74:0c:56:a5:01:ce:bd:ff:
         f9:2a:5f:68:1b:31:bd:67:ae:20:15:33:01:44:de:47:f8:53:
         4c:aa:8a:39:2f:7b:ed:76:09:7f:41:a5:c3:a5:ee:2f:72:ed:
         d2:f6:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:31:22 2026 by rpki-client