Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File:                     uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier:          LxM8NCunMWW3MFQt774IcuMv+WlPJzk9vsT4vFcUM1I=
Subject key identifier:   07:07:B2:B9:55:1B:3E:F0:FC:0F:3F:B3:19:0D:80:82:A2:E8:A3:1C
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer:       /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial:       019EC0DAADDC33DF69F977B892D7A22DA817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number:          1962
Signing time:             Sat 13 Jun 2026 12:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:17 +0000
Files and hashes:         1: 7_ksMt69-ko9Gs3LCNVMY5Yua58.roa (hash: psyoJRhZwf9m2YaavxF9lBoTofEe6e2bqkYbKXhQaKc=)
                          2: fVnni3HY7sky3f7i5b4WxqKCK1w.roa (hash: EnePOrLQan0VYDSXsgvz+/fx8DR+bHj24KExzs6KuKQ=)
                          3: m35mxfiiz904INQeQIrVDjuOzJw.roa (hash: i+J1jgfb7rEYgW3Y5tYB7Y9arIQtP02Ur8/LX7WJu3Y=)
                          4: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: rWKdoaDXZJWMZeGXzt+qhmZFIge9GEySJiFOBcgpxnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:ad:dc:33:df:69:f9:77:b8:92:d7:a2:2d:a8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb190d102ac9603b405b36374d429868604937af
        Validity
            Not Before: Jun 13 12:00:17 2026 GMT
            Not After : Jun 14 12:00:17 2026 GMT
        Subject: CN=0707b2b9551b3ef0fc0f3fb3190d8082a2e8a31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:bf:90:df:7a:5f:e6:b4:8b:94:7c:7b:26:
                    2f:e7:29:71:c7:45:84:89:c5:84:17:c6:2c:8e:4c:
                    82:43:59:4d:37:31:19:f1:68:69:ed:35:a4:09:d7:
                    1c:56:46:e6:7c:8b:d8:1f:26:3a:db:df:95:a5:28:
                    09:8d:f5:23:4b:46:c4:1d:6d:d3:91:8e:c4:2e:10:
                    8c:a9:b8:6a:a8:fb:6d:50:28:a2:c1:e2:3e:c9:44:
                    50:67:a4:79:92:fb:26:ea:63:31:bd:8b:db:b3:ad:
                    f7:4e:4f:f9:75:1f:94:ad:de:b2:10:ec:94:3b:73:
                    c0:7a:aa:a1:8d:cc:8d:37:cd:c8:53:9d:48:b0:a4:
                    e3:87:f5:ef:62:10:f4:2e:25:9f:a1:56:4a:65:52:
                    25:32:61:91:65:d9:02:67:85:b7:31:87:0c:d1:60:
                    0f:ee:bd:1a:5e:64:1d:0a:36:57:0d:36:d5:df:17:
                    bf:38:d0:bc:0b:3a:00:de:e5:f4:04:0b:06:12:e1:
                    f8:4c:a6:42:fb:78:1e:7a:a2:9b:86:6e:1f:87:c7:
                    80:2b:45:33:65:b3:4c:64:80:ce:20:6a:3e:8a:69:
                    b8:0e:68:51:3e:9d:2b:96:71:80:02:8f:d0:28:e6:
                    5a:0a:0e:10:2e:43:62:20:53:cb:5f:eb:81:08:9d:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:07:B2:B9:55:1B:3E:F0:FC:0F:3F:B3:19:0D:80:82:A2:E8:A3:1C
            X509v3 Authority Key Identifier:
                keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:6c:21:46:43:76:1f:0b:af:47:c2:24:e4:03:a6:41:88:
         5b:44:c8:0e:bd:23:4b:34:1d:e6:a4:3e:7a:d0:ff:d2:7a:15:
         dd:9d:48:52:f8:ae:48:c4:73:cd:b0:5e:66:d2:fb:e2:5c:ec:
         8c:2e:0a:b3:8c:f2:b1:b7:dd:fd:c5:57:25:4b:26:aa:cb:e8:
         b3:dd:93:e0:02:13:9f:58:b6:96:7a:27:4b:de:b6:4e:af:ea:
         76:d5:fc:c4:36:1b:54:e4:4b:3e:28:5a:83:fa:21:f5:a7:4a:
         6a:d0:42:b0:80:e5:8f:7f:3a:ed:94:50:98:3d:85:96:1e:34:
         db:cb:0b:06:dd:9a:50:8f:c3:3a:1f:87:db:07:65:db:d1:f9:
         f2:b6:a8:f1:b3:73:b5:ee:96:5c:f7:18:1a:0f:35:3d:dc:6e:
         4f:cf:82:89:3d:e4:a4:af:36:fb:f6:78:3e:cd:4b:83:62:4c:
         b2:d8:4a:ba:8e:1c:e6:d8:2f:f0:18:c9:33:b7:b1:2c:d2:46:
         11:bb:09:fa:e8:06:c3:47:9f:26:f4:76:71:03:24:4a:56:97:
         25:7d:83:02:24:a1:fe:65:a9:75:b3:89:aa:31:8d:65:ba:68:
         8c:d4:3e:10:2b:ba:de:6b:bf:4c:8a:e4:a7:fe:33:f2:9f:c1:
         b9:73:d3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:49 2026 by rpki-client