Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File:                     uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier:          7AFgMZlXsgb0NK9qv6bagulpqFmyvuVkiIbGQriuCkM=
Subject key identifier:   06:72:DD:4B:D0:91:44:DC:D0:D4:96:B2:7D:C4:89:A2:4C:6B:54:5C
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer:       /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial:       019EBFC809A7492CA1DC07B9CA683C879551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number:          06D7
Signing time:             Sat 13 Jun 2026 07:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:18 +0000
Files and hashes:         1: nNATgEIpqt4sVw53DFsSvloJHBU.roa (hash: bU7UYNMIPfmN82yB4seWTyaEu5jJVJphuTDllxoRY8g=)
                          2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: dwPJPwdSPTmmVfXFXthLXLp38+64tk7Cu95zbIwapeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:09:a7:49:2c:a1:dc:07:b9:ca:68:3c:87:95:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
        Validity
            Not Before: Jun 13 07:00:18 2026 GMT
            Not After : Jun 14 07:00:18 2026 GMT
        Subject: CN=0672dd4bd09144dcd0d496b27dc489a24c6b545c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:28:9e:2b:fc:32:45:6e:15:c6:c8:07:57:
                    b0:c9:97:18:26:2f:0f:8b:fb:66:6f:90:65:2b:3c:
                    ce:be:e8:6a:03:b1:b7:53:12:a0:cf:4e:8a:df:c5:
                    03:35:b4:94:7e:3b:5d:88:a8:81:a9:8c:0f:3c:87:
                    7a:9b:03:af:a4:74:cf:e3:71:05:bb:ba:56:4b:da:
                    a7:94:7e:11:3b:83:bc:ec:a1:ae:b3:7b:64:8d:7f:
                    40:0e:7d:05:ed:be:cf:a4:1f:1a:8a:ff:d8:de:a5:
                    c7:eb:f7:40:b4:b9:ef:54:d2:b5:6a:1e:6b:38:22:
                    74:3d:5c:4d:5f:8b:48:10:d3:1a:8a:01:df:ac:fd:
                    a7:ff:93:86:68:1e:f4:67:78:a2:a9:4b:5f:c9:91:
                    2b:b4:f7:61:22:ca:ff:a7:02:ba:cb:1b:45:17:c0:
                    50:4b:df:3b:dc:11:ae:d8:de:71:a3:e5:98:62:f0:
                    93:2b:5d:16:c9:bf:27:c7:72:fb:ca:1a:b1:0b:12:
                    4a:05:7a:1a:3a:e4:13:a4:c8:a7:92:a4:8e:14:9d:
                    51:f3:d7:40:5e:3d:bf:70:18:c7:70:12:f5:88:b9:
                    fa:a2:d1:9e:6d:04:50:1a:8d:8f:39:36:7b:c5:db:
                    74:75:2b:53:1d:91:57:13:5b:b3:2e:90:d2:97:c6:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:72:DD:4B:D0:91:44:DC:D0:D4:96:B2:7D:C4:89:A2:4C:6B:54:5C
            X509v3 Authority Key Identifier:
                keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7c:25:93:9f:ee:08:bc:91:21:64:b2:c4:64:14:26:12:57:
         bf:98:46:2f:66:c3:c9:bc:1c:84:2f:b0:16:9e:dc:2c:b4:77:
         0f:15:92:67:18:f0:85:11:72:12:00:79:02:ed:a5:88:4e:0d:
         8a:34:d4:d0:0c:73:7c:3a:08:1a:b1:e8:50:37:0f:0b:10:70:
         48:1a:43:62:32:d7:bc:ce:05:5b:b4:5b:ad:d3:23:3d:d4:b1:
         f0:81:0f:93:f8:f3:e4:5e:d5:ff:61:7c:ff:d2:7b:41:98:30:
         e3:5b:63:a5:ee:6d:d4:38:10:00:67:f9:fa:57:0f:4b:c6:60:
         3b:96:00:ac:0a:bf:03:8e:2e:e5:15:f8:d9:70:37:34:dd:35:
         02:31:27:0e:23:d7:b5:e0:56:31:ce:8d:78:15:c9:ac:c9:60:
         fb:ee:c0:fd:bf:df:20:89:2a:a0:89:e2:03:9b:69:cb:ff:6c:
         a4:cc:30:77:39:17:14:b1:72:0c:e7:7e:40:ef:78:00:b8:40:
         6f:81:58:65:82:96:a6:17:a9:bc:57:6b:aa:89:58:86:d9:43:
         5f:8c:f1:b8:d3:5e:4e:9e:f2:a5:27:13:50:92:10:c0:3f:cb:
         a0:0c:ab:66:48:92:45:62:36:18:b9:ae:77:11:ef:b9:f0:70:
         82:12:e9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:35:09 2026 by rpki-client