Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File:                     UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier:          SKCMxv4hPGRfxKugd3avfiZgTbW5tZzT7LyknWgu3YI=
Subject key identifier:   83:BE:9F:D5:FE:46:C7:61:68:41:31:B4:C8:34:18:EA:E3:35:00:6C
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer:       /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial:       019EBF23632B6B4BA89AD74623F5B188BA5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number:          10B4
Signing time:             Sat 13 Jun 2026 04:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:27 +0000
Files and hashes:         1: UcC2Y8zHvL_FDSURiolVRBuB8_g.roa (hash: p3IzoT2nzG2oBklzpQ6gR/NCnzvpo3xyP/73GYhUd3g=)
                          2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: BRKJePGq0y14f3HoooIcbPclT8odWnF7U0eY0HrtFcc=)
                          3: vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa (hash: YyzHvgYYzEsZBa9TKZu8r++ne7pY4Yz24jL7ObVc/TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:63:2b:6b:4b:a8:9a:d7:46:23:f5:b1:88:ba:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
        Validity
            Not Before: Jun 13 04:00:27 2026 GMT
            Not After : Jun 14 04:00:27 2026 GMT
        Subject: CN=83be9fd5fe46c761684131b4c83418eae335006c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:2c:e7:dc:a3:41:99:71:ed:b7:57:15:35:
                    c8:70:bc:26:69:a5:0a:e5:20:3c:cd:8b:dc:78:51:
                    b3:a0:d0:c3:86:a6:b9:45:16:2f:18:25:23:e2:57:
                    d3:a9:91:b8:23:be:cc:e2:47:89:a7:90:54:1e:26:
                    7f:40:ef:2a:3d:58:c2:6b:d3:79:71:ba:d9:8b:6c:
                    20:3c:ab:94:15:7d:40:3e:a4:56:89:ef:cf:5d:87:
                    a3:2d:2f:85:94:f0:92:d5:a0:49:80:e2:84:ef:76:
                    be:83:be:6b:9d:38:73:5f:7f:79:6f:01:6f:f6:a8:
                    07:8f:8b:11:ac:5b:74:8b:05:b4:eb:e2:f9:64:64:
                    93:2d:ab:04:6d:47:8e:ae:56:89:85:1b:35:39:d4:
                    f5:ef:39:06:99:bf:67:88:77:ea:c9:c1:10:8d:79:
                    75:87:34:a5:58:05:ab:0b:b2:11:29:96:b6:50:d9:
                    2c:c2:fa:fb:a9:c7:a5:5f:13:56:a2:5f:9e:a8:f2:
                    9b:f7:b5:c6:1f:af:8e:dc:e0:61:5f:a3:3f:3f:d9:
                    1f:5c:d8:b0:a3:ef:2d:1e:19:a1:08:9f:5f:a0:51:
                    ec:95:2d:3d:95:1f:fc:ea:ee:61:a8:fc:f8:fc:3f:
                    c4:0c:35:47:db:f5:ab:d3:26:b6:87:ab:b0:26:2d:
                    4c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BE:9F:D5:FE:46:C7:61:68:41:31:B4:C8:34:18:EA:E3:35:00:6C
            X509v3 Authority Key Identifier:
                keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:96:9b:35:04:12:df:31:2c:fc:9f:f1:d7:fa:55:ee:8d:8c:
         68:b3:43:bc:1e:0b:28:69:2d:92:a5:c1:94:c0:d4:5b:ff:29:
         be:0b:38:c4:92:64:d6:b6:23:ba:b9:3f:1f:9e:b7:e6:0e:68:
         9c:29:ca:98:9c:c3:fc:39:09:56:48:be:42:c1:b6:81:8e:eb:
         f1:68:03:df:a9:e8:28:ad:21:39:14:44:b0:7a:bb:06:86:3f:
         3a:c1:56:79:df:37:fe:f1:db:36:29:a1:39:6a:14:db:3d:0e:
         86:26:37:a8:00:86:7a:3c:04:32:fa:9c:ff:3b:18:d0:10:63:
         ca:07:bc:ce:0a:4d:52:4c:dc:a2:21:1a:63:6a:7e:5e:cd:ad:
         7d:74:07:05:64:85:40:2a:d1:07:ea:a4:a2:94:e9:15:e9:74:
         d0:08:2e:71:ab:58:70:b9:29:3f:9d:e3:b9:24:fa:c2:9e:70:
         4c:cf:18:9d:33:bb:87:a5:76:a8:bc:fa:a0:73:86:fa:85:28:
         24:e5:10:44:f9:a2:19:93:fc:4a:be:a1:c5:d5:4f:65:4f:50:
         f6:ca:6c:6e:ee:a2:02:d5:7a:47:00:1f:a1:36:6d:68:55:d3:
         e4:01:cd:09:36:4f:fa:3e:29:aa:d4:eb:c8:69:0b:b3:8f:61:
         3f:63:b5:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I2Mra0uomtdGI/WxiLpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTE0MDQ5NWJkMDZjMmU4ZWZhY2I3ZWQwYTMxNTE2ZGIx
ZjQwNWYwHhcNMjYwNjEzMDQwMDI3WhcNMjYwNjE0MDQwMDI3WjAzMTEwLwYDVQQD
Eyg4M2JlOWZkNWZlNDZjNzYxNjg0MTMxYjRjODM0MThlYWUzMzUwMDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndws59yjQZlx7bdXFTXIcLwmaaUK
5SA8zYvceFGzoNDDhqa5RRYvGCUj4lfTqZG4I77M4keJp5BUHiZ/QO8qPVjCa9N5
cbrZi2wgPKuUFX1APqRWie/PXYejLS+FlPCS1aBJgOKE73a+g75rnThzX395bwFv
9qgHj4sRrFt0iwW06+L5ZGSTLasEbUeOrlaJhRs1OdT17zkGmb9niHfqycEQjXl1
hzSlWAWrC7IRKZa2UNkswvr7qcelXxNWol+eqPKb97XGH6+O3OBhX6M/P9kfXNiw
o+8tHhmhCJ9foFHslS09lR/86u5hqPz4/D/EDDVH2/Wr0ya2h6uwJi1MswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIO+n9X+RsdhaEExtMg0GOrjNQBsMB8GA1UdIwQY
MBaAFFHhQElb0GwujvrLftCjFRbbH0BfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUt
OTg2NzY0MmMyZjEwLzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUtOTg2NzY0MmMyZjEw
LzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpabNQQS
3zEs/J/x1/pV7o2MaLNDvB4LKGktkqXBlMDUW/8pvgs4xJJk1rYjurk/H5635g5o
nCnKmJzD/DkJVki+QsG2gY7r8WgD36noKK0hORREsHq7BoY/OsFWed83/vHbNimh
OWoU2z0OhiY3qACGejwEMvqc/zsY0BBjyge8zgpNUkzcoiEaY2p+Xs2tfXQHBWSF
QCrRB+qkopTpFel00AgucatYcLkpP53juST6wp5wTM8YnTO7h6V2qLz6oHOG+oUo
JOUQRPmiGZP8Sr6hxdVPZU9Q9spsbu6iAtV6RwAfoTZtaFXT5AHNCTZP+j4pqtTr
yGkLs49hP2O1lQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:22:41 2026 by rpki-client