Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
File:                     UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json)
Hash identifier:          H1JSQV9vz7IiosOfJGO6/QR6J8fSPy35V7HN6oZqJ5o=
Subject key identifier:   FD:65:86:C0:58:66:4A:25:F6:E2:5F:2D:79:A9:BB:5C:D3:17:F6:95
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Certificate issuer:       /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial:       019EC2C954BDFDCFD127CE33E3B83EADA116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
Manifest number:          16A6
Signing time:             Sat 13 Jun 2026 21:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:34 +0000
Files and hashes:         1: 4vRrFfHEC3GgT1183FGac5Crjjs.roa (hash: ZrwSZSbeJqZyB/UsX8E/gauKcYuf9yaAKmeIWSckNBg=)
                          2: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: dY7SPh6x7OLUBbFvRr34wuSs8tHWWiAe6i47SSEpq6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:54:bd:fd:cf:d1:27:ce:33:e3:b8:3e:ad:a1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50480549481968d43406127653f780abbf9a117b
        Validity
            Not Before: Jun 13 21:00:34 2026 GMT
            Not After : Jun 14 21:00:34 2026 GMT
        Subject: CN=fd6586c058664a25f6e25f2d79a9bb5cd317f695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c4:c0:52:0e:6e:c2:5e:61:79:c5:ea:96:60:
                    82:82:a2:13:6b:8d:6b:61:cb:d1:29:37:91:72:3e:
                    c6:f1:c9:7a:08:7d:29:45:90:55:ec:15:a4:1b:67:
                    83:e5:72:3d:9a:82:d7:40:24:73:e6:78:81:c3:2d:
                    2d:ff:26:09:a7:8a:e1:7e:d1:cb:34:12:0a:68:50:
                    eb:32:85:05:50:db:e4:c7:6a:1c:18:72:ad:1b:14:
                    2e:a3:c1:3c:e3:82:1b:22:ce:c0:36:8c:ab:22:11:
                    ec:0d:88:1f:06:fd:48:ba:86:bb:53:f8:57:f0:2c:
                    49:33:75:4b:3e:fb:72:a3:aa:f1:b7:22:48:bd:9c:
                    50:db:26:29:aa:ec:a9:47:89:30:4f:ae:9f:87:42:
                    2c:69:ae:9d:7b:01:c1:c8:b7:cc:de:60:d5:87:66:
                    64:c3:e5:90:d3:db:f7:fd:ef:2a:b9:48:db:8d:62:
                    c0:36:85:e7:05:8d:89:75:10:92:bd:96:da:be:c9:
                    d5:38:96:f3:2a:a0:59:6d:ea:e0:e6:c8:9e:42:99:
                    2f:7a:da:68:c2:61:e4:77:8f:3a:b7:b8:bf:a0:91:
                    d8:0d:69:7b:61:41:12:9e:24:ef:5a:e6:cc:b9:2e:
                    70:52:14:5d:40:4f:cc:df:21:45:8c:6d:63:d6:44:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:65:86:C0:58:66:4A:25:F6:E2:5F:2D:79:A9:BB:5C:D3:17:F6:95
            X509v3 Authority Key Identifier:
                keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e8:df:2a:92:2f:8b:b8:62:23:7e:93:1c:94:cf:a8:79:f4:
         37:dc:9a:0f:8e:1e:32:d6:c5:31:34:3d:bf:db:0f:fc:e6:cf:
         f3:7c:c4:11:2c:a9:f8:2e:58:2d:72:99:9b:85:0a:ee:ec:1d:
         88:3b:4c:94:17:27:d1:c2:c5:1e:35:58:e8:b9:9e:d5:1c:00:
         63:b1:e2:49:74:10:e3:eb:ea:1c:c8:76:2e:bd:2d:fa:ef:ef:
         90:1a:ed:46:77:16:46:c6:41:4a:a9:eb:50:49:b2:d5:89:55:
         5d:15:c8:6d:b9:1b:32:f6:67:30:55:f6:1b:be:9a:f8:19:21:
         a6:b3:b6:fb:17:a4:59:ad:43:a2:42:df:08:25:02:1d:aa:cb:
         b9:5a:ed:1d:6b:13:a8:21:f0:95:7a:10:40:27:9f:cf:a0:98:
         bb:97:fd:c1:b7:00:8e:1b:e3:e8:86:5e:3c:a9:9a:20:23:4d:
         1e:50:ef:bf:fd:fa:b1:a7:f9:ce:9f:5d:22:c5:c3:00:05:f3:
         26:5e:ce:71:5b:66:b1:84:cd:ce:50:c5:50:4a:44:02:a6:51:
         dd:54:ee:92:17:ec:c1:f0:6b:0c:11:dc:07:77:86:a0:f1:00:
         92:52:5d:52:24:12:c8:ec:06:1f:68:68:a9:10:ae:18:66:74:
         86:c4:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:36 2026 by rpki-client