Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File:                     UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier:          o+ArowM8uFlw23q8uYkzzfuxLGOSj9ZiykDtMT2ch8c=
Subject key identifier:   35:A0:77:63:EC:D7:31:4A:CD:C1:4A:17:0B:2D:99:D9:6C:C3:1F:59
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer:       /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial:       019EC36E0EC439A0C764C58458DBAC97EAB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number:          192E
Signing time:             Sun 14 Jun 2026 00:00:30 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:30 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:30 +0000
Files and hashes:         1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: cfVvUCbqj5VOiaAc7LbEb3CZYH2gLR67GaXG24kB2ks=)
                          2: ZsE_mt7ku7Fr5hPoQLALle6qg7o.roa (hash: HUKBNWBBwbvfcuNQzCGO+9wjMStLGidRG99eNbwf4fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:0e:c4:39:a0:c7:64:c5:84:58:db:ac:97:ea:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
        Validity
            Not Before: Jun 14 00:00:30 2026 GMT
            Not After : Jun 15 00:00:30 2026 GMT
        Subject: CN=35a07763ecd7314acdc14a170b2d99d96cc31f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fa:a2:81:ba:88:7a:d9:15:0e:92:4d:fc:e1:
                    31:ea:eb:c3:a4:f5:63:d6:7e:69:fe:7d:3a:85:35:
                    a5:b1:b6:37:04:35:73:75:18:b9:12:d4:28:cf:0a:
                    32:ce:32:06:e9:fe:d0:1a:45:0d:6a:6b:f0:9a:19:
                    f1:c0:6d:cc:75:d3:12:a5:92:c9:2c:9d:20:32:0b:
                    3c:93:e7:e8:6c:4d:7a:fe:d1:c2:05:8f:fd:4d:b2:
                    1d:cb:65:65:d5:f2:bb:21:00:c8:90:20:86:4b:a1:
                    5b:30:8e:0a:8f:59:c8:cb:4d:af:12:89:41:9c:36:
                    95:dd:3d:1e:70:d4:de:e6:77:43:28:7a:65:91:02:
                    96:8e:c2:50:2b:fe:64:e0:12:e4:06:b8:30:f3:04:
                    45:eb:20:46:e7:22:c4:3f:7a:3e:13:36:d0:bb:17:
                    01:ce:5e:f3:a8:59:75:eb:b2:15:ce:d5:83:87:63:
                    31:6c:35:43:7b:a2:dd:1a:2d:cb:9f:5e:12:52:cc:
                    13:37:41:97:8b:aa:cc:3a:0c:84:52:58:51:07:ea:
                    3d:e1:97:8f:b7:15:55:83:f8:30:42:17:24:cf:3e:
                    dc:6a:57:ad:c5:8b:99:8e:48:12:17:4d:5f:86:56:
                    b6:f8:1a:79:fd:18:c0:13:5d:16:f6:1f:e8:d7:2a:
                    1a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A0:77:63:EC:D7:31:4A:CD:C1:4A:17:0B:2D:99:D9:6C:C3:1F:59
            X509v3 Authority Key Identifier:
                keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:02:3b:2f:f4:f1:1d:d7:37:15:09:ab:17:49:3c:18:45:a6:
         cb:47:71:e6:dc:55:15:95:d9:99:58:0f:84:ce:1f:84:b5:8e:
         83:bf:56:6c:74:7b:0b:d1:bc:94:d5:a1:f8:df:7b:f6:b8:56:
         80:c1:77:ca:ff:af:2e:61:d9:3c:7d:89:32:81:36:d9:86:3f:
         6a:e6:a6:53:33:19:a2:44:ac:85:be:99:bc:34:ae:37:10:7f:
         51:3b:9a:a5:80:11:68:1f:bc:06:b8:e6:d6:cc:59:5d:a4:92:
         1e:c5:94:58:2e:d7:fa:9d:dc:f6:5a:3e:f9:12:1f:d5:ad:b3:
         8e:33:ac:8e:ff:99:21:17:b4:5e:28:a5:81:e7:51:e9:fc:2b:
         13:38:28:a8:f8:d2:4d:58:15:b4:51:5d:c9:65:e6:8f:33:6a:
         35:eb:29:6f:45:5e:6d:eb:4f:80:93:18:a9:2e:1e:36:ee:fc:
         34:73:94:f5:6f:06:bd:07:10:27:48:b8:0a:f2:c2:99:8a:e0:
         9c:ac:6c:18:73:ee:3a:8c:fe:55:21:53:6c:01:da:bb:3c:3e:
         86:35:57:29:12:94:7f:68:32:6a:aa:8b:b8:37:17:8e:c5:52:
         e6:35:96:21:8b:25:3e:1e:8c:2e:49:2d:da:cb:cc:bd:e7:86:
         44:50:d3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:03 2026 by rpki-client