Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File:                     uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier:          iybvUkyhgnIiWZHDiVE+BlHrUiaaSMcT2LIxtJF6Eyc=
Subject key identifier:   9C:2B:0B:CA:C7:BD:38:F0:CA:DF:D7:FF:FF:91:8F:18:C6:40:4A:CF
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer:       /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial:       019EC594087BF68EAB2CBB9753A0912656F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number:          062A
Signing time:             Sun 14 Jun 2026 10:01:13 +0000
Manifest this update:     Sun 14 Jun 2026 10:01:13 +0000
Manifest next update:     Mon 15 Jun 2026 10:01:13 +0000
Files and hashes:         1: q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa (hash: /RSQuO4wSBepnb5WctoxBJfzvDfZfmxsmBSRIpoN6ic=)
                          2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: ZmKykUXM53XS+862UuqHhybs+v6TWMw5V/1V1gXqWOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c5:94:08:7b:f6:8e:ab:2c:bb:97:53:a0:91:26:56:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
        Validity
            Not Before: Jun 14 10:01:13 2026 GMT
            Not After : Jun 15 10:01:13 2026 GMT
        Subject: CN=9c2b0bcac7bd38f0cadfd7ffff918f18c6404acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:cc:51:0e:a5:94:66:9b:e4:11:4e:9e:8a:
                    e6:9f:2e:07:25:02:cf:06:42:d4:ac:df:f8:3f:26:
                    1b:d1:57:3c:3a:49:29:d3:5b:17:72:90:0d:f5:c2:
                    90:b9:76:56:db:15:e3:2d:90:be:b6:72:c9:0d:2c:
                    f7:30:c0:16:b2:b1:3d:73:f2:ff:ed:6c:90:59:5d:
                    bc:04:99:fe:e5:eb:6c:b6:d5:8f:48:75:d4:fd:ea:
                    62:33:df:dc:52:29:2f:de:35:5e:11:61:98:a5:94:
                    da:33:ec:bf:5a:38:a7:c9:10:e8:62:fb:f4:56:38:
                    ef:fe:3d:b2:2f:86:6f:84:bc:56:47:38:67:3f:0f:
                    61:45:2d:8f:6f:e4:d7:61:73:a8:46:cf:7d:e2:5f:
                    4a:7a:49:d9:e3:9c:8e:98:15:9b:92:0a:ec:64:37:
                    f0:24:c6:b7:0f:c3:db:71:8e:10:c7:66:a0:d5:b5:
                    aa:ee:c8:15:d7:f9:5d:b4:e5:f6:6f:a5:5a:a0:50:
                    2d:ea:3e:7d:de:15:e5:23:7d:a9:cb:d5:c2:0d:53:
                    ac:66:94:78:ab:62:ee:92:c4:bf:c0:29:0e:93:21:
                    94:fb:a6:a7:83:a3:5e:2b:a5:00:7a:4e:e0:b8:45:
                    9b:d0:9b:2d:35:16:4d:6a:bc:9a:8f:df:29:8d:6c:
                    17:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2B:0B:CA:C7:BD:38:F0:CA:DF:D7:FF:FF:91:8F:18:C6:40:4A:CF
            X509v3 Authority Key Identifier:
                keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1b:19:21:5f:74:c0:75:98:6e:32:1c:2e:d2:7a:f8:c1:5a:
         af:ae:c8:15:f3:3d:da:33:96:69:39:95:4e:79:79:95:3a:49:
         44:1f:e5:3c:eb:50:02:d3:2a:00:67:62:71:5d:e5:20:f5:07:
         b6:25:07:1c:f7:02:14:66:84:16:76:31:50:c4:b6:75:e4:a0:
         79:93:a1:51:c2:6b:ad:c2:35:ac:ae:4a:ec:d5:43:0d:7f:34:
         b9:7e:b9:36:34:b4:ba:41:14:b8:a6:d7:ca:1a:2b:f9:dd:07:
         c5:f0:ef:c0:4c:fe:6a:b8:a8:f7:d1:c3:95:52:3b:4a:f8:52:
         79:e2:b4:11:b4:ea:9a:53:9a:f3:77:af:d4:49:cd:66:1f:18:
         99:7e:fb:13:1c:4b:5c:80:eb:2f:e5:11:06:ad:51:d6:44:d1:
         c8:40:ee:6c:b8:18:f2:4a:ee:4c:f0:88:4a:61:88:9a:d2:b6:
         76:80:a0:90:21:74:b9:3f:0c:2b:cc:ae:18:3d:39:09:af:ad:
         38:91:c5:6b:06:d8:11:8a:cc:23:c4:a8:30:b4:00:51:b8:6f:
         a7:3f:95:61:16:4c:0a:e3:d7:5f:23:b6:2a:08:7d:cf:6c:5f:
         38:f2:55:81:48:5d:c2:ab:64:c2:a7:b2:6c:84:e7:ec:27:0e:
         a3:c1:c1:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7FlAh79o6rLLuXU6CRJlb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTMwMzU5YjU0NjkxMTJlNmUyYmZhZTg1OTViMDU0ODU1
NTFkMzcwHhcNMjYwNjE0MTAwMTEzWhcNMjYwNjE1MTAwMTEzWjAzMTEwLwYDVQQD
Eyg5YzJiMGJjYWM3YmQzOGYwY2FkZmQ3ZmZmZjkxOGYxOGM2NDA0YWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq3MUQ6llGab5BFOnormny4HJQLP
BkLUrN/4PyYb0Vc8Okkp01sXcpAN9cKQuXZW2xXjLZC+tnLJDSz3MMAWsrE9c/L/
7WyQWV28BJn+5etsttWPSHXU/epiM9/cUikv3jVeEWGYpZTaM+y/WjinyRDoYvv0
Vjjv/j2yL4ZvhLxWRzhnPw9hRS2Pb+TXYXOoRs994l9KeknZ45yOmBWbkgrsZDfw
JMa3D8PbcY4Qx2ag1bWq7sgV1/ldtOX2b6VaoFAt6j593hXlI32py9XCDVOsZpR4
q2LuksS/wCkOkyGU+6ang6NeK6UAek7guEWb0JstNRZNaryaj98pjWwXgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwrC8rHvTjwyt/X//+RjxjGQErPMB8GA1UdIwQY
MBaAFLmTA1m1RpES5uK/roWVsFSFVR03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTIt
YmU1ZjEyOWVhODFhLzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTItYmU1ZjEyOWVhODFh
LzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBsZIV90
wHWYbjIcLtJ6+MFar67IFfM92jOWaTmVTnl5lTpJRB/lPOtQAtMqAGdicV3lIPUH
tiUHHPcCFGaEFnYxUMS2deSgeZOhUcJrrcI1rK5K7NVDDX80uX65NjS0ukEUuKbX
yhor+d0HxfDvwEz+ario99HDlVI7SvhSeeK0EbTqmlOa83ev1EnNZh8YmX77ExxL
XIDrL+URBq1R1kTRyEDubLgY8kruTPCISmGImtK2doCgkCF0uT8MK8yuGD05Ca+t
OJHFawbYEYrMI8SoMLQAUbhvpz+VYRZMCuPXXyO2Kgh9z2xfOPJVgUhdwqtkwqey
bITn7CcOo8HBjQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:08:21 2026 by rpki-client