Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
File:                     UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json)
Hash identifier:          +xEsbMHDdakAElCVmUSuqlLF9YqfAXaGU/2d4/o48iU=
Subject key identifier:   05:85:91:6B:B7:4E:33:B9:EF:37:DE:82:EE:80:84:B1:95:EE:4E:4D
Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Certificate issuer:       /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Certificate serial:       019ED386E3B27207A70CF1314C831DB1830F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
Manifest number:          18F5
Signing time:             Wed 17 Jun 2026 03:01:33 +0000
Manifest this update:     Wed 17 Jun 2026 03:01:33 +0000
Manifest next update:     Thu 18 Jun 2026 03:01:33 +0000
Files and hashes:         1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: 6B7GFP5ySwVlRKxNMrewoK9bw0ulKDQNF/H9P5UsdeY=)
                          2: ecFOCtyMPZjujJaE-20dAfii9DM.roa (hash: 2c3Yb3DHYLd5Kr4mOCYbpGtoKCki3dzbhWvRjPGqV24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:86:e3:b2:72:07:a7:0c:f1:31:4c:83:1d:b1:83:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
        Validity
            Not Before: Jun 17 03:01:33 2026 GMT
            Not After : Jun 18 03:01:33 2026 GMT
        Subject: CN=0585916bb74e33b9ef37de82ee8084b195ee4e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:91:80:85:c7:19:7a:18:38:5a:c2:91:d4:
                    2c:65:3a:b4:33:e9:4d:9d:8b:30:95:97:64:c1:37:
                    2d:0a:60:a3:21:fe:eb:3b:fa:e2:20:4f:9e:68:4c:
                    3b:f9:69:b4:aa:a6:a9:76:31:10:f3:9d:30:e7:17:
                    93:43:63:f9:6d:de:ca:c1:79:de:62:cd:d2:55:47:
                    86:d3:7c:d3:4f:f2:a9:36:c8:1a:ad:3c:73:1a:f1:
                    d6:4d:53:25:47:bd:13:87:30:78:c3:cd:56:57:0d:
                    a5:d5:95:41:f2:54:4a:dd:a0:04:43:3b:d5:94:3e:
                    b0:7b:31:a6:84:46:04:3f:b6:92:aa:a0:d2:27:02:
                    53:3f:26:44:b1:63:65:94:51:18:af:05:de:ea:a9:
                    b8:dc:0d:8e:e9:52:db:c1:a0:37:4f:aa:27:7f:6f:
                    51:2d:e5:80:40:78:e7:40:92:34:75:66:62:00:42:
                    ac:10:1b:25:1b:89:ce:06:4a:6b:9b:36:be:a0:c6:
                    5a:2f:f0:17:f3:76:d6:5b:d5:dd:92:59:58:d3:71:
                    5d:2c:4c:43:56:d7:a4:75:d5:ce:5d:03:f6:c9:c7:
                    5d:ff:90:ba:9b:6f:9a:4d:2b:e1:2a:76:6f:8e:18:
                    7c:4f:42:f2:13:e2:fd:df:22:c0:5e:97:4f:2d:4a:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:85:91:6B:B7:4E:33:B9:EF:37:DE:82:EE:80:84:B1:95:EE:4E:4D
            X509v3 Authority Key Identifier:
                keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d5:ee:a4:64:62:fa:ba:2d:de:2d:aa:63:de:c0:e9:a0:04:
         36:72:72:dd:63:9c:cb:7b:e0:45:34:cd:5d:ff:5d:47:3d:d6:
         7c:1f:31:14:ce:d1:21:20:a1:a1:bf:c2:3a:d7:4e:ab:3d:0e:
         58:39:23:1b:63:15:41:7e:35:93:bb:ba:4d:45:53:46:ce:b5:
         69:86:ab:72:8b:66:cd:db:16:11:3a:f6:9f:05:fa:9d:ea:7f:
         00:91:4e:f3:02:59:9b:f7:7d:60:e2:5a:54:7c:06:04:b2:25:
         02:d7:85:98:4b:9b:57:65:1e:6a:09:c0:2b:ad:c8:df:4b:a1:
         5e:95:ea:14:bf:63:e7:b1:25:ba:94:21:1e:10:a9:02:d0:14:
         92:80:b6:23:20:cf:8a:76:45:eb:af:b3:60:73:b4:ec:08:e2:
         7d:95:e8:5f:9d:86:9a:90:e8:e9:38:96:59:51:d2:0a:b1:4d:
         7c:0a:28:8e:d4:ad:88:fa:96:37:2f:b3:76:ff:1c:5c:66:0a:
         15:39:11:5f:5c:3f:38:87:ed:9f:0c:02:8a:64:f7:31:f6:3a:
         86:3b:9b:b7:ef:8b:ff:b7:a7:45:af:ad:2f:52:1f:10:2b:ce:
         5b:c7:e4:ac:a6:5c:9f:72:41:a3:78:ee:41:87:50:0f:52:6d:
         95:53:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:01:18 2026 by rpki-client