Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File:                     uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier:          EFgm4fSol+nKvlI79Dk+zDA1aG0FAbDwWOMY4dF4bQs=
Subject key identifier:   E8:3E:28:58:0D:97:F2:4F:A8:FC:40:FD:94:11:63:94:A1:6C:45:0E
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer:       /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial:       019EC3A5A92316E590A4B7936E032D2B0C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number:          14C3
Signing time:             Sun 14 Jun 2026 01:01:14 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:14 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:14 +0000
Files and hashes:         1: 1-fsHYTIUTFY0216Qbk8IXnoEcp8.roa (hash: bfgMgiAWnH7b52b8mMjuMw9kDEycqTEWeJ8kbQp2a6c=)
                          2: WIAk63chBCdGYiGDL4jJVIzgpHA.roa (hash: e3taT/GSCbu7IKCePzef39V4CQeoRg7zNm3KotlMe7A=)
                          3: Z4cd67t_oTbTTOY62m-SDIBMEfk.roa (hash: /PTXJtjmPJ7VKf+Ddpyha9KTCciauyGlpPXGyj6aw+Y=)
                          4: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: SOLXdToPDRgnax+vSCqt+YgrhvPk1NfognrJgdB8xJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:a9:23:16:e5:90:a4:b7:93:6e:03:2d:2b:0c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
        Validity
            Not Before: Jun 14 01:01:14 2026 GMT
            Not After : Jun 15 01:01:14 2026 GMT
        Subject: CN=e83e28580d97f24fa8fc40fd94116394a16c450e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:a0:af:72:5a:98:b6:83:00:24:2a:b9:e9:
                    d8:ac:64:3a:1c:72:de:9a:66:be:5d:c3:5a:05:eb:
                    15:26:84:33:6c:0e:28:fb:6f:30:70:77:af:55:10:
                    fd:ff:93:f2:6a:74:a8:8a:b3:41:54:40:0e:13:3e:
                    62:2a:eb:44:41:c9:e1:ed:f9:3a:c7:79:15:63:3b:
                    d9:63:7f:c3:98:80:48:a6:bd:3b:a5:c2:95:f6:a4:
                    71:bc:38:49:42:64:dd:42:d2:7c:43:12:4e:36:0f:
                    20:0e:39:3a:9d:cb:b8:3b:00:b3:a3:7a:d2:c9:5b:
                    78:25:16:5d:9f:3e:b8:b3:07:da:13:88:bb:94:47:
                    2a:98:28:15:1a:6b:59:a0:a3:e1:d7:7b:26:e1:2b:
                    60:49:42:0a:5b:06:05:fb:07:1f:dd:1e:79:d5:c6:
                    e5:58:ce:87:ba:96:0b:fb:aa:34:dc:d6:ed:33:fc:
                    e5:b1:26:9c:ee:51:d5:09:7f:b9:ab:e9:d9:d2:03:
                    62:f9:26:88:0e:d4:af:f4:2c:ac:ea:09:53:c9:ab:
                    d1:56:00:9b:47:7e:7d:9a:16:45:bf:23:0f:c6:03:
                    38:54:61:af:94:de:f6:84:c1:df:6e:6f:f0:6a:c0:
                    a0:48:b1:7c:23:c7:4b:ee:48:e3:b2:02:29:08:a0:
                    38:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3E:28:58:0D:97:F2:4F:A8:FC:40:FD:94:11:63:94:A1:6C:45:0E
            X509v3 Authority Key Identifier:
                keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:56:7a:8a:3a:75:fe:62:11:2b:2e:2c:1e:a3:e8:2b:4b:6f:
         6c:55:3b:34:49:d1:b4:dd:8f:a2:f6:85:13:a4:a3:7c:27:ec:
         19:ed:1d:51:0a:01:d2:50:e8:93:fe:10:1c:52:7a:45:3f:b7:
         4b:f2:bb:02:40:61:b1:25:39:6b:30:e5:43:12:25:44:af:fc:
         eb:07:d0:e0:48:94:7e:07:f1:f2:37:0b:b4:ee:af:98:db:c1:
         0d:1f:a5:53:db:ef:d8:09:e7:28:34:0a:a4:56:15:b9:92:7c:
         7d:e3:7f:23:cb:ee:90:02:3b:56:e9:1a:ac:5e:a5:b2:18:cb:
         f1:60:27:56:74:54:79:72:fa:0f:9e:74:8d:8b:75:52:db:90:
         48:2b:37:36:23:8e:4f:1d:2f:1b:02:38:09:5d:95:c1:d8:7f:
         69:7b:bd:1c:20:f3:95:bb:5e:47:51:c4:a4:3c:fd:4c:4e:f2:
         1f:13:24:5f:46:fa:86:37:87:13:72:4e:ff:a2:9a:bf:cb:79:
         09:6a:a7:c6:c8:96:52:77:c8:22:8c:87:9d:37:d8:ee:f4:fd:
         09:28:10:1f:4c:c3:82:d2:93:44:1f:c8:09:e1:b8:dc:8c:72:
         bb:32:68:32:3c:71:4c:4d:f8:f7:c5:21:16:4a:b6:50:57:21:
         db:11:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:35:46 2026 by rpki-client