Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File:                     uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier:          VEaky4VDp0tUjocI5pgUDRAzwMFtaoevIfmMrQMbhU4=
Subject key identifier:   91:D4:1F:AC:E8:E0:EA:FD:62:D4:14:08:3C:7B:A0:5D:30:E1:FD:52
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer:       /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial:       019EBFC87CC5DF72F1563765D38A40018FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number:          090C
Signing time:             Sat 13 Jun 2026 07:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:47 +0000
Files and hashes:         1: cYSlOixvw1IRH_A6U1PmGBfOnLc.roa (hash: ObOoQktNn2mk1CLRsAqDNu4BrgB8VABVPaTI7wXzkNQ=)
                          2: cfljug29MBdwZ2IRskxqcwdwGN0.roa (hash: RSO1UVd7bjnpUDUf4c2ob5lCf11GhEF8w59+h0O9Z8s=)
                          3: e-t5BEEANDkjz8TT0h8YEJKZz74.asa (hash: tAn9UqhREKeh/3lPzeJs+A/xlp0r6QrTew+hGnn6pAM=)
                          4: sPDYGaB0jdjNmv_RI00LaumXHZM.roa (hash: cR+r+JhOtPPtk4/8vr8rgMsCxMQVubUz6os2NddknO4=)
                          5: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: 4VFYdRi7Y4ykq2GAK1u6GD4Rw8qghF5ndK+o6PwwIzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:7c:c5:df:72:f1:56:37:65:d3:8a:40:01:8f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
        Validity
            Not Before: Jun 13 07:00:47 2026 GMT
            Not After : Jun 14 07:00:47 2026 GMT
        Subject: CN=91d41face8e0eafd62d414083c7ba05d30e1fd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:7c:06:0d:54:2c:f0:94:31:72:d6:cf:73:
                    0d:70:6b:c1:38:16:cd:23:18:f4:e7:6c:8c:23:b9:
                    54:ca:63:8a:b7:9c:4c:75:6a:73:62:c4:e7:42:9e:
                    73:37:26:f2:5d:5f:2a:93:8f:93:68:12:35:f4:6d:
                    9e:96:8e:60:49:95:eb:bb:11:c2:45:b4:45:b4:3c:
                    bf:04:82:a2:58:5e:69:12:a3:c2:cb:0e:fd:34:72:
                    c6:46:43:8f:f6:cc:8a:8a:d2:82:c3:95:17:ec:df:
                    ef:44:b4:9f:63:b9:1c:05:1c:1e:30:b9:b5:8d:cc:
                    b6:68:d9:43:93:2a:66:c0:bc:35:b9:46:eb:c0:14:
                    f6:44:fb:e7:95:2e:6f:89:e8:13:bc:b1:b9:2b:96:
                    ed:b8:69:77:6f:e9:09:49:9c:49:d4:65:fd:6a:d6:
                    79:03:69:7c:b4:e6:29:15:38:0a:7a:66:5e:bb:5d:
                    27:4e:7f:8b:66:09:82:ac:c4:e5:3e:37:96:da:ad:
                    07:c8:62:bb:4f:4d:4b:61:e7:9c:fd:18:68:80:9e:
                    ad:eb:fe:42:da:ea:8f:8e:bb:ad:46:86:a8:dc:d4:
                    f7:28:19:c4:c2:d4:86:2e:83:dc:d8:20:7b:08:6a:
                    bd:fe:76:7a:67:a6:4e:9b:88:09:36:dd:a6:06:97:
                    5e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D4:1F:AC:E8:E0:EA:FD:62:D4:14:08:3C:7B:A0:5D:30:E1:FD:52
            X509v3 Authority Key Identifier:
                keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:84:c7:99:b3:fd:1b:62:bc:09:c1:97:02:56:7e:d6:4f:a3:
         3b:aa:8f:d0:40:7a:a9:87:57:51:0e:2d:68:cc:a6:b4:fd:a5:
         f5:b2:3f:40:f4:ba:e4:ca:b0:be:8a:7d:68:72:63:5c:b5:3f:
         cb:ae:43:82:79:e2:26:81:9f:1c:ca:96:c0:59:55:11:ed:9b:
         53:96:ba:bc:fb:28:81:01:32:64:e3:cf:8f:59:2e:0a:19:67:
         69:ec:df:a9:4e:a6:0f:dc:d7:e2:90:27:eb:2a:3e:35:37:d6:
         e4:b6:07:00:e3:cf:fd:40:26:4f:f6:0a:3d:17:b3:4d:6c:4e:
         03:35:f5:a4:38:2d:6b:a3:8f:2f:2c:56:33:4f:21:2c:ba:59:
         0c:6c:25:25:95:d5:49:6b:a3:cf:ef:63:a0:83:42:ba:0b:44:
         0f:7e:ad:dc:1c:3e:ff:87:e7:ae:90:2a:19:e8:49:e9:23:5e:
         e2:c1:fb:93:0a:8a:56:f7:74:66:ef:df:e7:08:fe:7b:56:b9:
         c8:21:c2:d2:6d:2d:df:12:4c:25:43:48:57:96:33:fd:d1:dd:
         83:1e:05:93:49:8a:0d:b7:27:90:82:37:44:e9:be:f2:40:9e:
         7e:7d:28:e8:2e:44:f1:6c:67:c7:c2:1e:4f:f6:b3:c2:89:7f:
         04:f4:19:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:03:05 2026 by rpki-client