Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File:                     Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier:          shub1E28DMvKske1NkAOubqMV9aQGugznSklznH52DQ=
Subject key identifier:   75:98:D5:86:83:67:9B:46:D3:4B:18:93:40:86:47:72:08:93:D2:9F
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer:       /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial:       019EC25BF5131BAC741C4D6A747E27FD52F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number:          187D
Signing time:             Sat 13 Jun 2026 19:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:06 +0000
Files and hashes:         1: DkKDajpTHwTuNMIpxKTAMDGQDDo.roa (hash: X10Ua4dlXVpqCEjX6L/K3mZaPDpI5fuPVZc9nBQdT8k=)
                          2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: +iB88T+uSBsvnAm3WOQnAgEHdUeFh+7C+X9xbWCDCQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:f5:13:1b:ac:74:1c:4d:6a:74:7e:27:fd:52:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
        Validity
            Not Before: Jun 13 19:01:06 2026 GMT
            Not After : Jun 14 19:01:06 2026 GMT
        Subject: CN=7598d58683679b46d34b1893408647720893d29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:76:4d:f4:1c:f3:ee:8b:b7:47:b9:11:db:
                    ab:6d:f2:67:64:61:cf:15:52:83:a8:11:6f:99:46:
                    b4:f7:5e:31:16:3c:8f:52:49:48:59:5c:1f:2a:9e:
                    17:40:c5:79:7d:0c:39:1f:10:5e:d7:b7:da:08:20:
                    42:c8:36:27:c9:5e:df:0f:04:d3:23:5e:36:6c:53:
                    c7:37:82:c8:c3:ce:0c:71:25:be:43:f1:3b:14:1e:
                    16:53:ed:44:52:34:e2:63:fb:0e:7e:49:40:2c:b6:
                    70:a2:54:bb:25:2b:50:de:48:04:fb:9d:70:da:ab:
                    19:bc:22:9c:88:19:25:f8:86:3a:07:7e:04:7c:d1:
                    fc:54:d6:03:30:73:1d:ec:fd:7f:91:d9:c8:03:21:
                    c4:65:0e:92:00:04:d0:d2:06:2e:23:da:b2:77:8d:
                    48:9f:ac:db:6b:22:f2:1e:d2:e6:44:23:6a:93:29:
                    4c:ea:9a:9d:12:ac:dd:f5:19:ef:87:bd:bc:84:a4:
                    ef:fe:f9:63:76:42:ec:82:bb:fd:de:d4:f6:74:f6:
                    a0:3d:ce:33:eb:40:dc:3b:d1:5b:f9:14:4d:82:f2:
                    ae:64:c3:90:26:67:5d:8c:d1:c8:c8:ce:e8:25:8d:
                    d3:d3:84:87:fc:54:59:34:26:f9:99:89:7b:59:ce:
                    cb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:98:D5:86:83:67:9B:46:D3:4B:18:93:40:86:47:72:08:93:D2:9F
            X509v3 Authority Key Identifier:
                keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c4:39:05:c5:6b:3d:88:85:f8:e5:61:97:5e:77:4c:da:59:
         6f:7f:94:85:29:6f:ee:e7:f3:f6:d1:c7:94:b9:e9:ad:60:0d:
         d1:a9:aa:05:cf:b3:02:9e:59:f0:f1:8b:ff:88:ea:6c:74:c1:
         df:d5:7e:0b:b2:10:23:3c:b2:50:8c:9e:2e:9f:0a:11:3b:56:
         fa:61:e2:4c:01:e9:05:42:f3:ae:1d:f2:39:d3:e7:08:a2:ea:
         9c:6b:de:73:65:04:41:1f:0c:85:d5:fc:96:0a:0f:e8:05:d9:
         50:8b:21:5f:cd:0c:df:48:2c:5b:bd:d0:a9:b5:66:da:a2:8e:
         df:5e:27:a2:6f:f2:88:28:ab:08:e0:a6:29:13:0a:88:a5:12:
         5c:f5:c3:dc:b1:36:10:38:16:6e:17:60:e1:01:9b:5b:d7:94:
         5e:4b:be:a1:5f:46:00:b6:2e:c6:d7:49:65:06:38:b8:e9:78:
         45:40:2b:76:e6:38:66:82:2b:94:2b:83:a9:88:43:51:9c:38:
         3c:36:ff:8b:d5:d0:b4:a5:dd:16:be:4b:8e:36:18:76:fb:a9:
         4e:ab:9d:3b:84:76:55:31:23:a9:05:c9:03:c9:0f:20:2e:42:
         3b:58:24:f9:ac:da:a2:1f:12:90:53:54:09:58:40:43:ea:67:
         18:70:95:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:42 2026 by rpki-client