Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
File:                     UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft (raw, json)
Hash identifier:          VcGtP9yfFS41E5O2McaCeomhHdVfORzTHBpxEQQxJiU=
Subject key identifier:   C4:74:D1:A7:BD:FC:54:CC:57:54:CE:D6:1A:B3:98:64:2F:E5:38:B3
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Certificate issuer:       /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial:       019EBF9107BB67F9A193772DE11C20289F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 06:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:13 +0000
Files and hashes:         1: 1-r5h5M4z_etRHKub_p7uYkuua2k.roa (hash: 7956C8JjzEQ12pRs9Y4qeyvvm8jRcbkAr628jmTx/bQ=)
                          2: Grqr3zYOgPbnYQO8DA4VgsDDUrM.roa (hash: aJOAZYE1fZOQaAtwLCBBewOwLiqrU497TanU9W5w1Jg=)
                          3: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl (hash: qpHFHjJa7AyEVofxjIKzbPTjDOCFH5bYOL1w8GNjYrU=)
                          4: iw5F2GqviAuCI8Yj5bZostsjf4s.roa (hash: nUPb8N6EAyjoLbqfkef2pSzNUsPnNcWng7BDtVUC41s=)
                          5: nF-YJnDe36GSTrMdE4OaqcL2ytE.roa (hash: Vy2/IceEB6KcpqIu9v4108H+Hr6sCPfLoeeW13cg1mQ=)
                          6: vH1QevNKFQddFeDMZ-jQc4mM4VQ.roa (hash: 4l/78DSO4hiILYf4bnV4O0t6abXmefY1wPnf8x4yQ70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:07:bb:67:f9:a1:93:77:2d:e1:1c:20:28:9f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
        Validity
            Not Before: Jun 13 06:00:13 2026 GMT
            Not After : Jun 14 06:00:13 2026 GMT
        Subject: CN=c474d1a7bdfc54cc5754ced61ab398642fe538b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:b3:0b:86:18:c6:ea:b2:0b:f1:56:0f:52:
                    5d:d6:24:e9:6b:49:a0:c7:a7:c7:c0:f7:de:72:f3:
                    91:df:03:83:06:f2:96:92:f3:54:19:de:26:a5:8d:
                    be:2d:2e:77:13:b1:63:08:fd:6c:6b:c2:7e:fc:4d:
                    e6:13:1d:04:94:76:1b:93:3d:03:ac:b3:23:72:37:
                    2c:81:89:7b:20:6c:c6:b6:30:5b:46:4c:81:76:ec:
                    48:e7:ce:d4:a5:a2:5a:9c:1d:e3:d7:55:f8:c3:b8:
                    be:cc:25:d5:40:87:31:77:c6:1d:a7:93:94:d0:f5:
                    86:3f:e3:5b:1d:64:24:1a:15:09:c6:7c:7b:3b:94:
                    c2:12:29:3d:c5:68:37:5f:71:b5:27:06:3e:c1:de:
                    3f:1e:75:81:a0:b4:0f:33:30:c6:57:70:4d:a6:9a:
                    69:11:8c:e4:73:fd:06:29:4a:18:9a:38:60:95:96:
                    af:27:6a:98:ab:fe:e4:b2:21:90:12:1b:a0:f2:52:
                    dd:77:7d:b0:44:f2:d2:e7:fa:f0:31:65:1e:a2:90:
                    c1:bc:4b:04:8d:98:e0:70:e3:de:9e:9d:f9:c0:5c:
                    bb:7a:69:9c:fc:30:f5:81:ec:f2:0f:dd:1d:77:56:
                    48:99:d7:7e:c5:c6:7b:39:da:16:26:3c:76:15:93:
                    c7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:74:D1:A7:BD:FC:54:CC:57:54:CE:D6:1A:B3:98:64:2F:E5:38:B3
            X509v3 Authority Key Identifier:
                keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:3b:9d:47:b7:6d:3f:e1:e0:c8:5f:e1:56:5d:fd:97:52:27:
         c4:50:13:55:cd:13:b5:d3:ec:fa:6d:d4:5c:79:09:03:81:a3:
         14:99:ee:cc:62:68:fe:d2:4c:df:02:9d:28:a6:4f:8b:38:7d:
         30:bf:31:93:4c:f8:6d:9a:82:e4:31:66:f4:78:36:15:c2:e2:
         76:db:9e:ee:ae:a5:eb:c4:8c:87:db:ef:75:36:2b:90:47:99:
         c5:48:91:fd:10:c5:ae:8d:bd:ff:5c:c9:42:0c:8b:4f:2c:94:
         06:e6:8a:d6:57:9d:95:7e:a3:86:e2:b0:58:43:8c:a1:00:f8:
         d0:48:77:f0:61:29:36:2c:a2:9a:bf:75:5d:c6:14:60:38:7a:
         e0:ce:ac:b8:a2:cc:80:3c:88:0a:2f:be:b0:ea:37:e0:38:0c:
         ab:eb:3a:e1:76:a8:c8:21:c1:c6:f1:fb:be:8e:67:fe:50:47:
         61:f7:88:07:a0:71:3a:22:91:55:1c:f3:06:51:b8:e1:60:03:
         34:bf:97:b5:57:4d:b5:f4:46:16:50:19:9b:27:c5:1b:76:e8:
         9a:e4:c4:54:23:97:25:76:bb:05:4d:1a:76:e8:1a:f3:29:f7:
         16:65:d9:b0:67:a3:47:e4:23:ca:c6:58:4f:e3:7e:47:2e:20:
         30:1c:3d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:00 2026 by rpki-client