Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File:                     0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier:          SLvucB0Sc6C333jX8k1xPCusnBQSnrYUYOGXSKnizzw=
Subject key identifier:   9A:03:45:61:D0:1E:E1:09:7A:46:A1:B6:E9:31:2C:00:24:D4:60:6C
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer:       /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial:       019EBE10B666F7604986B5DF1D90361F8208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number:          0ED1
Signing time:             Fri 12 Jun 2026 23:00:26 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:26 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:26 +0000
Files and hashes:         1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: h8BxIVBxErT5ZbzcWgyC1RMVUSiWEn0Izx/0TbTPWzA=)
                          2: kNgf3cgYhHD6RKubUEMvHEUFCrE.roa (hash: PN84y3FzjcGiYzNbl+qqLm6SXgIlky9llo5IO82GJto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:b6:66:f7:60:49:86:b5:df:1d:90:36:1f:82:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
        Validity
            Not Before: Jun 12 23:00:26 2026 GMT
            Not After : Jun 13 23:00:26 2026 GMT
        Subject: CN=9a034561d01ee1097a46a1b6e9312c0024d4606c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7d:95:0d:9e:4c:8b:4b:cf:b0:45:62:79:54:
                    6b:69:0a:a5:04:94:a0:ee:13:6d:32:8d:03:40:af:
                    37:bb:36:b4:40:77:06:db:4b:ce:9a:9b:db:b5:ea:
                    26:f2:4f:17:d3:0e:f7:ee:00:04:46:6d:33:97:62:
                    c9:47:9e:19:38:8e:01:25:99:f2:9b:7c:4a:79:ee:
                    89:52:7b:b4:b0:de:52:dc:be:7f:32:b5:84:86:20:
                    53:75:bf:ac:b3:59:64:c7:d6:3d:91:60:05:33:00:
                    6a:73:19:ad:b5:c3:ba:65:7e:0f:ba:42:37:0d:31:
                    be:34:4c:5c:d6:ed:7f:c0:f6:df:1b:7a:f2:ac:8e:
                    38:23:4f:16:3b:19:d1:97:85:a1:77:da:92:6b:99:
                    ef:1c:c9:c5:a7:a2:f3:ab:a9:bc:3e:cd:aa:ef:2e:
                    dc:db:e8:db:1c:46:61:75:1c:32:3f:b8:4d:78:38:
                    26:89:78:3e:72:42:22:00:16:b3:0e:42:e3:fd:9c:
                    50:b8:3d:93:4e:3c:80:ef:58:27:62:c2:0d:44:7c:
                    ce:7a:61:72:11:c1:41:32:e0:63:d9:16:ca:51:25:
                    69:c7:1a:48:b1:ee:ae:bb:59:de:fa:9c:67:1b:23:
                    d2:cf:33:57:b2:7e:0f:54:d2:e7:a8:81:c2:5d:46:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:03:45:61:D0:1E:E1:09:7A:46:A1:B6:E9:31:2C:00:24:D4:60:6C
            X509v3 Authority Key Identifier:
                keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:42:e1:2d:80:e6:29:ce:d2:df:13:f0:6b:fe:20:a6:68:da:
         23:0e:85:db:b6:97:ca:6a:d9:28:84:aa:b3:98:bc:59:10:17:
         a0:21:3a:21:42:01:ea:8f:e6:ea:7a:b4:a8:0a:c3:75:25:8c:
         e7:fd:ac:57:20:92:57:f9:9f:2d:82:2d:01:86:e5:f3:9c:88:
         d8:05:2e:41:4e:71:ac:1c:f1:bb:49:7e:4d:84:20:7c:f4:c5:
         85:55:47:24:74:61:7e:9b:00:67:24:78:fc:d3:1f:05:be:7a:
         be:53:87:c3:f3:d5:64:9f:bf:92:c4:cb:74:d7:74:07:2c:ea:
         44:95:06:cb:4c:6b:d3:2e:c4:e4:5b:7c:cb:56:43:f2:92:93:
         49:31:04:1a:0b:b4:c1:64:79:51:bb:83:09:6d:d7:59:99:fb:
         6e:87:03:d9:24:f3:cd:c4:56:53:34:ad:35:8b:26:45:e2:28:
         22:f1:cc:37:79:92:00:0d:83:46:e3:9b:c7:fa:60:85:07:28:
         1a:2c:dc:c9:11:44:53:1e:99:cc:96:39:03:22:19:8e:2f:82:
         d6:2d:25:cf:1c:68:39:7b:2d:1c:71:76:53:6a:d4:42:ee:27:
         9c:cc:10:fa:1a:60:a3:a6:10:fe:9b:77:27:a3:35:94:3a:f9:
         e8:b3:3c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:07 2026 by rpki-client