Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
File:                     uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json)
Hash identifier:          jRoxJnwPM1FBqn47AOycGzE//icg0Tp79d9H4Q2nU9I=
Subject key identifier:   95:72:73:97:81:DB:47:6D:12:C0:58:FE:F0:59:A4:57:3E:B6:F4:1E
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Certificate issuer:       /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial:       019EC2250DC9953C63E8D5712EF97B349987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 18:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:08 +0000
Files and hashes:         1: Be8LblN_WsFoFsGu_QkIYbsLZMI.roa (hash: 4P/iotN6FmCSgpC5Liy5/5RLiOPYgv+FOHKRLXysJwc=)
                          2: OulomjatgU8B25dvFpqGURlBgcU.roa (hash: cQm9KuIWCCDGGQfAHCVTwYW3k+71Z7DZyQnTjaIdRSA=)
                          3: oRx6EJhqzaqgG0amciWL3M5KR-E.roa (hash: OiolxTV+7ThPd+hCMKxyTyX6crUMp94Obmmo4AolkqE=)
                          4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: kLjTfycymcS/7/ojC4aozlsyRF1Z1RUk9DgIWjOczh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:25:0d:c9:95:3c:63:e8:d5:71:2e:f9:7b:34:99:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
        Validity
            Not Before: Jun 13 18:01:08 2026 GMT
            Not After : Jun 14 18:01:08 2026 GMT
        Subject: CN=9572739781db476d12c058fef059a4573eb6f41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:f6:e5:75:6d:57:d2:72:68:c1:b2:7c:ef:
                    b6:da:6c:f5:50:ca:1c:1c:74:03:66:21:15:c0:0a:
                    f6:c8:d8:5a:30:2b:c9:9a:ce:4c:86:c4:8a:11:7e:
                    c1:78:f8:d5:57:3d:a3:20:ad:fa:a1:cd:33:f8:b2:
                    14:1d:08:32:e0:3c:fb:78:6b:77:88:99:bd:87:cc:
                    76:65:44:d1:e6:0a:57:ca:39:00:e2:f0:d5:22:5f:
                    c4:79:4e:cb:16:b4:e6:9b:f9:2e:91:de:fb:33:26:
                    fe:fa:0d:6d:a8:f0:d5:d8:23:f9:3e:cf:db:c2:71:
                    50:56:67:68:0e:f8:b8:d6:9c:3a:0d:26:4a:e9:8d:
                    a6:26:90:3a:5a:78:98:ef:74:9c:25:63:2c:ff:70:
                    8a:38:a0:e6:05:84:2b:ed:44:86:19:01:aa:d5:74:
                    2f:83:98:18:3d:7f:d3:5b:7f:a1:2a:b1:30:a6:d2:
                    c7:8c:fd:68:c7:75:a5:47:a9:59:5f:22:cf:cc:3d:
                    dc:c3:9f:e5:08:ea:82:f2:20:9a:d4:ff:d0:fc:37:
                    d6:a4:e0:a3:e4:d4:6e:a5:ea:93:06:31:c2:74:4c:
                    9c:37:f5:77:fa:2f:59:4f:63:3b:2c:ef:7b:41:b0:
                    67:7e:45:be:d2:92:ad:00:15:fb:d8:17:f9:ba:80:
                    eb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:72:73:97:81:DB:47:6D:12:C0:58:FE:F0:59:A4:57:3E:B6:F4:1E
            X509v3 Authority Key Identifier:
                keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f3:ef:7f:47:69:c6:75:d2:6d:90:9f:d2:42:a0:3f:5f:fa:
         b1:4f:0c:23:00:26:ff:46:fc:da:7f:11:50:a7:f9:1a:99:60:
         38:64:7b:30:e8:48:39:a2:2e:52:8e:0e:b4:ab:cd:dc:2c:49:
         c7:9d:6c:8a:19:40:1a:ba:35:e7:6e:56:4a:dc:23:b1:23:d1:
         29:dd:62:9b:9a:3b:ec:d4:aa:5d:d2:f3:51:1b:00:0d:29:79:
         7b:37:f5:cc:b7:1b:8d:51:09:e2:2e:01:cc:8c:f5:23:a5:98:
         d2:9a:97:7d:bb:9f:3f:ad:ce:1a:d2:46:39:92:af:3a:54:02:
         10:59:6b:29:6d:b5:e4:84:56:ea:1c:f4:b1:98:8a:1e:5e:23:
         a9:b7:3e:aa:d6:ae:c7:6e:0a:cd:bd:7b:ae:6f:34:4b:ac:68:
         bd:79:81:07:70:c9:bb:19:04:34:1d:c6:36:79:b7:d0:2c:25:
         e5:f5:f3:db:c0:45:52:e5:18:09:ea:16:a1:95:5f:ff:17:7c:
         09:44:31:59:32:7f:4e:15:72:88:a8:15:ab:a6:21:57:05:82:
         2b:25:b9:f1:80:74:9a:c1:89:d6:ae:0c:79:b7:56:be:2a:8e:
         c1:c1:5e:99:8b:00:8b:5f:27:22:7e:eb:8e:74:18:9b:7f:62:
         ac:24:e4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:38 2026 by rpki-client