Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
File:                     U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft (raw, json)
Hash identifier:          YbLraehmfGk6k1jEDrDT/xTGzN2Jjs0XivgP2Nz5yn4=
Subject key identifier:   62:D5:9A:6B:49:F7:01:F6:68:6A:0B:2B:B8:7C:00:D4:BB:E6:2E:68
Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
Certificate issuer:       /CN=53bf98d53522aa957081fdec28b172084394f112
Certificate serial:       019EC449FEA156728F0E573DC6CDD7F5982A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
Manifest number:          1172
Signing time:             Sun 14 Jun 2026 04:00:44 +0000
Manifest this update:     Sun 14 Jun 2026 04:00:44 +0000
Manifest next update:     Mon 15 Jun 2026 04:00:44 +0000
Files and hashes:         1: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl (hash: aXRb3im/ncWGt1+QJJRWziATABcYFADULG4oQEWFpdk=)
                          2: mK9jBg2iFuywF6JUAww3mxKLxCU.roa (hash: lk8hbAdLVuILHrw42c6HMnMUPa/ZOyLXrol4InQSdq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:49:fe:a1:56:72:8f:0e:57:3d:c6:cd:d7:f5:98:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53bf98d53522aa957081fdec28b172084394f112
        Validity
            Not Before: Jun 14 04:00:44 2026 GMT
            Not After : Jun 15 04:00:44 2026 GMT
        Subject: CN=62d59a6b49f701f6686a0b2bb87c00d4bbe62e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:93:68:15:0d:d8:76:7a:e8:53:5e:c9:a2:
                    07:8c:d0:8f:ac:62:f6:70:a2:32:bc:b7:17:83:58:
                    5a:1d:04:48:c7:a3:aa:de:9e:b7:1c:e8:25:3d:b2:
                    c4:10:0f:8e:c4:03:e5:4a:5d:7a:ec:a2:ed:fd:52:
                    b3:61:49:02:c0:78:12:91:08:4e:fe:43:e3:ad:79:
                    2d:ae:f6:bc:05:42:a0:dc:47:26:36:41:80:19:62:
                    e1:5d:90:6f:6f:63:86:90:59:d5:f3:1d:27:b4:6a:
                    78:ac:f7:07:d6:01:5f:42:f3:23:dc:b7:ed:21:54:
                    5d:7f:82:0a:47:b2:b4:1a:2b:07:0d:2e:18:9a:c9:
                    cc:dd:3b:51:71:69:10:fe:b6:6f:05:65:27:8f:98:
                    d8:c2:58:c2:68:67:b2:fe:4a:db:37:76:b2:fc:40:
                    6f:c2:50:b1:53:0d:f4:0c:20:b1:14:6b:bf:f5:45:
                    10:19:ae:59:d5:ca:77:08:53:91:f3:71:de:81:00:
                    64:d3:18:59:0a:77:03:e7:51:5f:f9:f3:45:89:95:
                    d7:43:56:bc:95:24:c2:a4:75:29:9b:00:5a:f6:4a:
                    b1:bc:63:6f:e6:7f:54:47:c6:ac:22:11:33:47:06:
                    86:bd:9c:43:bc:db:42:c3:1e:1f:5e:25:86:02:1a:
                    0f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D5:9A:6B:49:F7:01:F6:68:6A:0B:2B:B8:7C:00:D4:BB:E6:2E:68
            X509v3 Authority Key Identifier:
                keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0b:60:b2:64:aa:66:13:66:58:85:e5:26:e3:52:a3:94:12:
         17:01:df:c7:f8:8a:42:7e:63:5d:36:d2:b1:a3:4c:b6:34:9a:
         11:c1:54:03:ae:c8:55:7e:f1:fc:f6:d5:31:ef:a7:aa:28:2b:
         f8:ec:0a:46:76:9f:eb:d7:d0:ef:8b:1b:47:37:ee:64:b2:bb:
         6e:88:fb:32:c0:b9:1a:61:f7:c5:e2:12:ec:a3:8e:b3:06:0e:
         64:da:61:bb:67:2b:2d:ee:6f:18:b7:98:28:7c:a9:31:1e:35:
         72:b7:a5:8b:7b:e0:7e:48:34:42:a9:6a:64:0e:6a:79:1e:5a:
         54:95:dd:9f:15:a9:b1:bd:d7:b0:1e:9b:c2:2f:2f:66:f9:e7:
         fa:eb:e7:9f:eb:bc:9a:a4:5a:27:94:f2:db:32:66:ab:f4:60:
         3f:78:08:e1:fa:66:a2:61:94:b1:d3:57:63:1e:24:0b:61:cf:
         14:cb:3a:32:e7:d7:73:b4:da:00:7c:7a:09:67:eb:f7:09:96:
         20:97:6a:0e:99:ca:87:22:ca:f8:d0:9f:b1:3a:fb:b0:0d:35:
         a8:13:fc:94:93:37:63:c1:d9:2e:1a:35:f7:02:11:89:27:60:
         66:de:b6:f7:8a:34:d0:b5:20:e0:b4:f6:fb:99:29:ac:8c:1f:
         5b:76:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:31 2026 by rpki-client