Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File:                     UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier:          KvAOpdEd+lx36PIo03Z9PmJXNlOIDmOgeSgB9qzNe/M=
Subject key identifier:   BA:B1:FE:35:D3:C9:ED:24:D8:27:31:2E:EB:65:DC:E8:D8:61:43:2A
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer:       /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial:       019EC300CE3E58BC42994ABB3AA4DB02C70F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 22:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 22:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 22:01:10 +0000
Files and hashes:         1: 81cJ_EIt-PStE8ZvP9c7d9zPO5Y.roa (hash: VoEIe6W6A/UJnNjd89XKoAD4I+DEvz9ksYBB+LiWpIU=)
                          2: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: DQWmXHkrzoUOH6OpOf0MMp6Bj1FGH1sgyR3rc4czlTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:ce:3e:58:bc:42:99:4a:bb:3a:a4:db:02:c7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
        Validity
            Not Before: Jun 13 22:01:10 2026 GMT
            Not After : Jun 14 22:01:10 2026 GMT
        Subject: CN=bab1fe35d3c9ed24d827312eeb65dce8d861432a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:23:71:da:44:32:fc:9b:92:59:0f:75:90:
                    0d:f1:05:07:9e:d7:79:22:a9:a5:3a:b8:2d:0e:de:
                    a3:f3:b4:e2:f0:54:bb:32:ab:bd:57:29:4f:e8:05:
                    6e:b9:d9:2c:2a:f4:57:cf:4b:ae:74:5c:62:ee:cb:
                    75:c9:9a:7e:22:12:a3:f2:8e:e3:4f:ba:e5:c1:e1:
                    17:7f:7d:ce:7a:b2:3a:55:9d:e3:0c:a5:5c:5b:79:
                    b1:ce:1d:4f:cf:8c:5b:4c:a6:30:c5:b2:e8:8f:87:
                    73:46:d2:37:b3:a4:96:20:de:d2:6a:31:00:ff:a3:
                    cc:cf:0d:4d:6c:65:b0:bf:f3:c1:ab:0c:ee:92:68:
                    77:d7:fa:c5:ea:69:fc:93:7d:b9:06:74:0a:38:05:
                    28:76:04:46:ef:16:43:15:7c:b3:61:df:88:4f:18:
                    47:c2:8e:18:76:ec:23:d9:22:be:14:20:d5:ae:37:
                    0b:f5:d5:1a:f5:10:4f:73:07:5d:11:39:55:e9:d9:
                    22:73:b4:f5:d2:d6:a6:94:c3:f9:9b:4c:81:b2:96:
                    cb:4d:d3:6b:84:71:92:3a:39:5b:88:24:f8:e9:79:
                    9c:f5:78:30:5b:4a:8c:e1:95:53:69:49:5c:dc:ac:
                    9c:b2:e4:e3:e8:28:09:e7:9e:ae:3d:68:93:e1:92:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B1:FE:35:D3:C9:ED:24:D8:27:31:2E:EB:65:DC:E8:D8:61:43:2A
            X509v3 Authority Key Identifier:
                keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5d:d3:75:54:d4:54:ec:64:26:88:26:d4:62:91:62:ea:ad:
         d7:62:3c:e3:16:aa:77:42:31:30:d8:19:96:0c:90:37:b2:c2:
         64:80:cc:d4:9c:b1:63:7d:e9:44:12:c8:77:22:1e:f3:d1:6f:
         a7:a9:99:97:ce:92:2b:b8:68:58:67:bd:9f:e9:38:9d:41:b4:
         c5:1a:d5:a4:26:ad:81:77:37:70:53:3c:cf:e3:f8:18:78:14:
         a5:4f:d6:2b:91:8b:d0:db:3a:58:1e:64:08:6a:22:12:15:8a:
         ea:44:fe:5f:81:80:43:d4:e7:09:5e:87:d9:41:dd:cf:f2:b4:
         20:8b:a0:7e:ae:ac:9e:61:52:49:63:e4:9d:f5:b5:27:1e:41:
         10:ae:b8:41:47:13:8c:c1:bb:b1:cd:78:90:95:ac:15:28:11:
         68:44:d7:9e:f4:f3:58:d3:24:a3:12:46:0c:d1:2b:a0:d5:1b:
         f0:62:87:36:24:a9:38:de:af:fd:38:4b:6c:64:71:3a:dd:f1:
         dd:46:ed:fe:c8:df:79:91:9f:74:24:83:4e:18:ee:8b:e7:b9:
         e9:ba:4b:46:b6:0c:e8:04:fa:9c:6d:d9:39:4d:9d:15:1a:85:
         31:dd:ef:0c:5a:63:c1:fc:f8:f2:c0:7e:90:2e:f4:3d:8c:20:
         60:7d:ca:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:47:05 2026 by rpki-client