Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File:                     UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier:          TLIlEUtZKfYVM3soT37oC5+dKRGJqQQLfM+r/ULDt6E=
Subject key identifier:   16:1F:43:75:E4:6F:52:5A:88:70:B9:50:1E:8E:B1:41:4E:C2:79:57
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       019D9819073005161A29EE50BCAAFBDF8810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number:          11D5
Signing time:             Thu 16 Apr 2026 21:01:10 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:10 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:10 +0000
Files and hashes:         1: UjFdhEdt4WKlDSIUUurW21paKp4.roa (hash: fDRm4GJe+GCEFChs7oH68Gzn9XNFPr0wdWmaIX+37oo=)
                          2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: 5wpOaSR9msKMfvr2wcepDir3z7YuQbNpUa6AT/B3V8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:19:07:30:05:16:1a:29:ee:50:bc:aa:fb:df:88:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: Apr 16 21:01:10 2026 GMT
            Not After : Apr 17 21:01:10 2026 GMT
        Subject: CN=161f4375e46f525a8870b9501e8eb1414ec27957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:0e:1d:ad:e7:24:56:7b:ee:c1:b3:dc:08:
                    0a:04:a6:6c:74:62:a1:52:8c:35:d6:85:8c:75:fc:
                    ff:66:8d:f2:33:2d:65:b3:e8:02:46:c1:a5:20:41:
                    43:73:41:09:dd:c4:be:b2:b7:88:b8:25:b6:0c:71:
                    44:fd:f9:ad:bf:2f:3b:1a:94:16:82:cf:bf:d3:3e:
                    eb:85:01:f3:20:ad:67:10:f1:10:7e:10:65:76:09:
                    9d:35:25:a1:ec:01:f3:db:d2:e3:d5:8e:e0:7d:c9:
                    8c:6c:88:09:33:3c:8a:b3:fd:e1:ea:39:f2:ed:5f:
                    6a:08:16:4f:f6:24:5a:73:5a:38:d0:52:fa:09:6b:
                    1e:e4:c4:d1:18:92:fc:cf:a5:af:a7:a9:84:ec:8f:
                    14:4d:20:8e:cf:89:91:76:7c:bf:7b:24:af:60:b8:
                    eb:d1:43:28:a8:93:24:04:11:bc:e9:c9:19:e7:96:
                    89:79:eb:54:ff:20:6b:cd:9f:2c:e5:84:a9:10:d9:
                    68:e5:9c:2c:f7:5e:eb:b9:81:60:7d:80:74:ad:c1:
                    54:2c:1d:f3:ca:13:b4:15:3c:e3:06:4c:b5:52:8f:
                    b2:fe:90:ec:44:2d:62:5d:8d:01:82:99:c4:c1:82:
                    d3:10:44:fd:55:c7:f2:2d:d7:17:59:5d:73:fd:0a:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1F:43:75:E4:6F:52:5A:88:70:B9:50:1E:8E:B1:41:4E:C2:79:57
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5c:60:9a:f3:44:73:02:10:a8:52:e0:2c:44:14:ac:3d:6a:
         e6:d1:08:03:68:d1:23:90:68:6b:f3:95:5e:ac:10:fb:b9:11:
         6a:22:e1:b2:0d:45:ab:46:94:44:6f:cb:5b:98:40:e2:dd:2b:
         00:56:1e:ac:e0:cf:e5:3a:7e:6b:81:42:96:3c:bd:d7:6e:21:
         38:3f:81:70:23:3e:c5:7d:e4:3e:34:e3:89:81:68:0f:fe:b5:
         33:6a:11:ea:95:25:1d:e6:85:09:7e:7d:2e:18:f2:e2:ad:33:
         f5:2d:72:d5:21:72:1b:d1:99:86:60:3f:ed:f1:fc:45:d7:b7:
         7c:94:3e:fc:d0:4a:61:88:91:5b:df:a6:d2:4f:b8:23:99:c6:
         4f:ec:1e:1c:e0:06:70:3e:04:8e:b7:4a:d0:4c:a4:69:67:18:
         2d:88:5f:b7:b0:fd:59:b5:6e:8b:19:00:7f:89:b0:50:95:e8:
         1b:ce:84:26:6c:d8:c9:6f:9c:d6:3b:52:05:d0:92:20:61:10:
         f9:d9:cf:bf:ce:b8:0b:4d:57:4f:f2:72:fb:15:f5:c4:e6:ab:
         94:50:8a:8a:7f:18:42:8b:6e:04:e8:7d:35:40:81:c5:39:be:
         cb:b9:e9:4e:74:ea:4c:6f:3e:19:ab:29:66:7c:07:00:00:89:
         05:8f:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:09 2026 by rpki-client