Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File:                     U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier:          2AM+o7QDntkK+kRsMXXbBVYaQsFDwCD5/3px17fiZw8=
Subject key identifier:   93:41:C4:8B:8C:EA:F2:C1:1A:F3:31:8D:BE:4A:C6:2F:2D:25:E3:36
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer:       /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial:       019EC2926EB572FD9242C118A16ECDD66CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number:          1964
Signing time:             Sat 13 Jun 2026 20:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:36 +0000
Files and hashes:         1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
                          2: CRXS8yJabkFe9zngcADmlt5Mjh8.roa (hash: V+gmBDqtYsm9sl2kIiueYpvE2PqUIfwWQ+IMlLrBBzI=)
                          3: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
                          4: QbAALDYZ_RGHs07gYUQih_CDJyk.roa (hash: +Uv/ugRA2zDra5XT10jpvOYMi9ZmxhbMWKYPoPRN5bM=)
                          5: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: JyYzrAwd8nwIeTAOI/rNFvrkA5eMhdB6kgYiAG8QNRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:6e:b5:72:fd:92:42:c1:18:a1:6e:cd:d6:6c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
        Validity
            Not Before: Jun 13 20:00:36 2026 GMT
            Not After : Jun 14 20:00:36 2026 GMT
        Subject: CN=9341c48b8ceaf2c11af3318dbe4ac62f2d25e336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:9d:e7:48:1d:64:9a:6c:34:8c:63:57:d3:
                    b4:7b:25:8c:13:dd:e9:a9:7f:53:5f:b0:3d:c7:45:
                    41:62:72:37:e2:5c:f5:c9:9d:a0:44:2c:f9:74:6e:
                    37:5a:a4:33:60:c4:c8:a0:b0:d8:04:63:1b:a7:0a:
                    4a:76:b0:6b:76:36:b3:ce:0b:c7:34:e1:30:39:11:
                    a2:fc:16:33:c3:8d:48:f5:75:f1:65:fd:cb:ed:44:
                    d5:43:11:05:48:cf:e0:47:b6:cd:e6:99:a8:bc:9a:
                    1b:e2:00:95:77:d0:d5:fa:18:46:ce:3b:69:0d:bc:
                    85:33:e4:c9:72:bb:6a:c7:53:36:94:b2:3c:cd:60:
                    bc:70:a7:79:17:d9:87:29:ca:b8:f8:ea:5c:e1:5e:
                    bf:83:e0:5b:1d:c0:1c:dd:f7:a3:dc:dc:cf:33:7f:
                    24:cc:c8:53:bd:79:f7:a4:cb:64:2e:95:e3:2b:2c:
                    48:bd:fd:12:3b:5e:14:8b:b0:cb:87:13:7c:b7:a2:
                    be:f8:42:29:2e:47:3c:ff:2d:b8:81:2b:06:62:65:
                    1c:48:e9:3a:5d:43:ee:aa:04:a3:c2:27:d1:12:11:
                    57:a2:67:d9:8a:cb:ac:34:a8:1a:f5:cc:5b:12:0d:
                    1b:07:bf:0c:8d:fc:49:5f:55:82:53:1a:6f:f9:7d:
                    f7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:41:C4:8B:8C:EA:F2:C1:1A:F3:31:8D:BE:4A:C6:2F:2D:25:E3:36
            X509v3 Authority Key Identifier:
                keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:63:6a:90:4c:f4:7a:98:99:d4:07:7b:c4:16:8c:11:a8:a9:
         25:25:86:68:5b:45:ea:a6:ae:04:45:10:7c:5a:b0:ae:20:13:
         90:e9:e9:ae:90:7d:d9:84:3f:5a:40:f7:d0:d0:78:90:19:60:
         90:ba:55:e6:a6:11:cd:f7:72:48:ba:fd:aa:ac:ae:eb:0b:b7:
         e1:62:bf:70:4c:c0:27:d3:89:e1:91:cb:bc:f9:d9:b8:a2:f2:
         4d:27:28:b5:ad:3c:bd:8b:6d:b1:73:22:fa:6c:61:70:85:06:
         45:35:da:e2:0d:46:32:4b:e3:d6:28:44:a9:e2:92:3f:ad:ff:
         b6:16:b0:ec:ff:86:6b:c8:3e:c0:df:a1:9f:c4:98:d7:ad:97:
         2f:c2:c2:f5:82:1a:a5:cb:91:7f:97:29:33:90:7d:4c:77:db:
         20:eb:c5:66:fc:86:72:80:42:71:ea:fe:bf:91:63:36:d5:c6:
         15:fd:ef:2f:21:17:14:49:92:99:37:5d:7d:f7:a2:c0:55:11:
         d5:61:65:2a:b6:a5:63:37:79:e7:d1:c6:0f:c4:4f:d4:a5:45:
         6c:e2:f2:8f:17:e1:d0:be:c5:f4:c3:be:51:55:2b:13:24:c6:
         47:82:9f:fb:ff:5a:0b:4b:fa:94:dd:f3:36:68:a7:72:d8:17:
         ba:38:62:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:38:00 2026 by rpki-client