Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
File:                     RE_UFLu7UMn_tejPBmVPeftYdsw.mft (raw, json)
Hash identifier:          Q+3rufWGTeiwkYsommlZWbSCmLOsCSff8RGfs4W54Mk=
Subject key identifier:   2F:40:8F:4F:81:3B:F8:AE:1D:BE:DF:A7:4B:BB:A3:6F:8B:D0:98:F5
Authority key identifier: 44:4F:D4:14:BB:BB:50:C9:FF:B5:E8:CF:06:65:4F:79:FB:58:76:CC
Certificate issuer:       /CN=444fd414bbbb50c9ffb5e8cf06654f79fb5876cc
Certificate serial:       019D9A074E9D5B9340A274C1AE05ECEFCDC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
Manifest number:          05A8
Signing time:             Fri 17 Apr 2026 06:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 06:01:03 +0000
Files and hashes:         1: 7hbBTK6LNune_G-F4yI0Dn1UUYI.roa (hash: /wg2/vsDE/yzXDJYZUtz3dRPsR6cz/5Xs0apxDZei9I=)
                          2: RE_UFLu7UMn_tejPBmVPeftYdsw.crl (hash: Nx8emQChgAbuP6BqIm7LGRML84UCJFnJorU9bNlKkxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:4e:9d:5b:93:40:a2:74:c1:ae:05:ec:ef:cd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444fd414bbbb50c9ffb5e8cf06654f79fb5876cc
        Validity
            Not Before: Apr 17 06:01:03 2026 GMT
            Not After : Apr 18 06:01:03 2026 GMT
        Subject: CN=2f408f4f813bf8ae1dbedfa74bbba36f8bd098f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:43:7a:09:3c:01:a1:12:73:b3:fa:78:67:
                    2f:a1:bd:b4:a5:de:72:d8:d1:9c:ee:b0:67:20:22:
                    7c:5e:b7:42:fd:6d:b4:a7:0e:c7:f1:cf:6e:97:82:
                    fa:7b:44:53:a8:6b:77:32:15:65:f1:ea:05:42:f8:
                    e6:a3:bd:85:d8:38:a3:01:92:b1:7f:2c:79:86:1c:
                    e3:24:ed:20:6e:6d:15:db:0a:a0:2d:5d:cb:4a:9d:
                    1d:76:9c:ab:bf:a7:3b:e6:58:49:1d:24:7e:ec:e7:
                    a1:83:ec:8b:b8:fd:7b:85:b6:57:eb:ef:05:fb:96:
                    0d:5e:bc:02:96:c0:dc:57:b7:b3:09:81:00:37:48:
                    71:3f:57:ce:1d:bf:37:5b:8b:81:e0:c7:a2:75:fe:
                    35:c8:39:e3:13:b3:63:ab:63:0d:c2:0a:80:53:43:
                    d3:6b:09:d1:17:1f:a4:3c:23:85:91:14:74:0b:ef:
                    f4:89:39:76:3c:39:ec:c3:6e:8e:ca:d6:46:e5:4d:
                    f5:d2:2f:46:31:d5:4b:d4:02:c4:2f:3b:6a:f6:2a:
                    ac:32:7a:14:92:a8:fe:48:40:34:df:70:1c:2a:b3:
                    63:6f:be:c0:95:80:42:8d:85:e9:86:b2:5f:48:e7:
                    ee:c9:c2:db:81:80:f5:e8:b8:3c:25:a3:9f:10:1d:
                    94:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:8F:4F:81:3B:F8:AE:1D:BE:DF:A7:4B:BB:A3:6F:8B:D0:98:F5
            X509v3 Authority Key Identifier:
                keyid:44:4F:D4:14:BB:BB:50:C9:FF:B5:E8:CF:06:65:4F:79:FB:58:76:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:60:a3:aa:7a:82:57:9f:23:c2:0c:d3:23:86:33:a4:a7:ce:
         5c:a7:4c:2d:01:a6:77:4b:5b:da:ad:50:f3:dd:6c:55:e2:53:
         24:31:06:bd:8b:37:04:8e:a0:88:16:5d:ce:9a:76:d0:c8:57:
         a2:cb:2e:82:fc:f2:fa:af:d0:99:82:36:1a:90:20:e7:2d:62:
         ca:58:c8:d5:e8:ba:0d:d7:3e:32:25:dc:fb:ee:39:5b:77:f0:
         90:8f:7f:31:80:85:f9:83:1a:e0:1a:4f:65:bc:c9:9f:d5:3e:
         81:74:1f:cf:d8:f1:29:f4:26:e0:3b:18:8c:2b:44:11:cb:45:
         85:0f:83:d1:46:f2:19:e1:88:a6:36:a6:4b:b5:f2:75:a8:48:
         08:0e:26:a9:38:7b:b4:1c:b1:39:c7:7c:37:67:0f:56:21:53:
         97:fd:62:3f:6f:85:24:53:8e:98:9b:3a:16:76:93:42:94:f6:
         b8:66:1a:02:d4:fd:ca:29:60:63:e3:9b:f4:d1:48:44:56:94:
         52:a8:2d:f6:57:9a:ff:ee:6d:56:a0:e0:e8:8e:3b:5f:2a:4a:
         fb:51:ae:a3:7a:a0:27:ee:0a:78:fa:fd:cc:50:43:5c:3c:40:
         02:14:af:99:0e:31:82:fd:82:04:f7:f5:07:79:31:21:e4:56:
         df:dd:40:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aB06dW5NAonTBrgXs783BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NGZkNDE0YmJiYjUwYzlmZmI1ZThjZjA2NjU0Zjc5ZmI1
ODc2Y2MwHhcNMjYwNDE3MDYwMTAzWhcNMjYwNDE4MDYwMTAzWjAzMTEwLwYDVQQD
EygyZjQwOGY0ZjgxM2JmOGFlMWRiZWRmYTc0YmJiYTM2ZjhiZDA5OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0pDegk8AaESc7P6eGcvob20pd5y
2NGc7rBnICJ8XrdC/W20pw7H8c9ul4L6e0RTqGt3MhVl8eoFQvjmo72F2DijAZKx
fyx5hhzjJO0gbm0V2wqgLV3LSp0ddpyrv6c75lhJHSR+7Oehg+yLuP17hbZX6+8F
+5YNXrwClsDcV7ezCYEAN0hxP1fOHb83W4uB4Meidf41yDnjE7Njq2MNwgqAU0PT
awnRFx+kPCOFkRR0C+/0iTl2PDnsw26OytZG5U310i9GMdVL1ALELztq9iqsMnoU
kqj+SEA033AcKrNjb77AlYBCjYXphrJfSOfuycLbgYD16Lg8JaOfEB2UsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9Aj0+BO/iuHb7fp0u7o2+L0Jj1MB8GA1UdIwQY
MBaAFERP1BS7u1DJ/7XozwZlT3n7WHbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVfVUZMdTdVTW5fdGVqUEJtVlBlZnRZZHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jOTYxOWQtMWIzYi00OWRiLTg5YzIt
YTcwYmMzMGEzM2MzLzEvUkVfVUZMdTdVTW5fdGVqUEJtVlBlZnRZZHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9jOTYxOWQtMWIzYi00OWRiLTg5YzItYTcwYmMzMGEzM2Mz
LzEvUkVfVUZMdTdVTW5fdGVqUEJtVlBlZnRZZHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmCjqnqC
V58jwgzTI4YzpKfOXKdMLQGmd0tb2q1Q891sVeJTJDEGvYs3BI6giBZdzpp20MhX
ossugvzy+q/QmYI2GpAg5y1iyljI1ei6Ddc+MiXc++45W3fwkI9/MYCF+YMa4BpP
ZbzJn9U+gXQfz9jxKfQm4DsYjCtEEctFhQ+D0UbyGeGIpjamS7XydahICA4mqTh7
tByxOcd8N2cPViFTl/1iP2+FJFOOmJs6FnaTQpT2uGYaAtT9yilgY+Ob9NFIRFaU
Uqgt9lea/+5tVqDg6I47XypK+1Guo3qgJ+4KePr9zFBDXDxAAhSvmQ4xgv2CBPf1
B3kxIeRW391Agw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:57 2026 by rpki-client