Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File:                     U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier:          d63u+tCEQVOcqjOsisq31rwfysNltOBn7C1Qv4YNvGg=
Subject key identifier:   9D:2C:6D:6D:A7:16:C1:A2:DD:6A:BA:4C:0B:5D:05:0B:7C:3C:EC:BF
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer:       /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial:       019EC1B70E40E2326D4B0BB0BA9E3C0DCB91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number:          118F
Signing time:             Sat 13 Jun 2026 16:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:59 +0000
Files and hashes:         1: 9f-8muSj0lPpqv2C-uJT8RSg4Wk.roa (hash: SrfNBs8fLNs8CyzsQB76S5MYdUrN0e+cR0WQ3SPKGe4=)
                          2: MB6VGwOGXL__4GDkn2ifKfMOL5o.roa (hash: tgzruOGhqB7Wz++Uyka8T5HxSlsKFcquj+FXoKwEcRM=)
                          3: ORixJag7nGsUVhn_7z-jWKPNs6c.roa (hash: 5T3+aTdZe3zV/H6LETA51CJXrWU4B9XcKgVJJWWibzo=)
                          4: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: gxKGgsTB3qRnpyEVIKFXcSLunt/VSKgkh3vSWkxLrBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:0e:40:e2:32:6d:4b:0b:b0:ba:9e:3c:0d:cb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
        Validity
            Not Before: Jun 13 16:00:59 2026 GMT
            Not After : Jun 14 16:00:59 2026 GMT
        Subject: CN=9d2c6d6da716c1a2dd6aba4c0b5d050b7c3cecbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:d3:57:3e:31:3d:71:2c:4d:28:17:8c:00:
                    ef:56:26:0e:20:59:0d:32:3b:d0:eb:52:96:1a:a9:
                    fd:35:df:f0:eb:ec:4f:01:7e:fa:ad:26:43:d3:81:
                    7a:4b:02:f8:07:6b:2d:5a:0d:4f:9f:e2:04:0f:45:
                    16:d2:ab:3d:a9:6b:30:3e:3a:4b:ec:1d:63:f4:84:
                    ee:6b:f3:dd:2a:39:23:a8:4d:d3:34:5f:46:07:71:
                    6d:9d:f9:de:21:14:c8:c2:69:94:09:b2:d2:8f:cd:
                    3a:f7:e0:37:c0:17:4e:4e:c7:14:cb:9b:66:7c:f2:
                    74:2c:dd:7b:e5:90:b5:36:6c:14:37:da:dd:e3:bc:
                    ac:84:4e:12:15:7e:ad:40:2d:ef:4f:9c:64:b3:b2:
                    31:1a:90:5a:1b:12:1c:f8:8a:49:dc:69:f2:a8:87:
                    fa:6c:cb:30:59:72:e5:b3:e2:63:26:f4:29:d5:b9:
                    bc:47:47:23:ba:6c:53:1b:78:e9:85:8e:53:a3:69:
                    2f:27:5c:d9:5c:3f:44:ce:ab:64:4d:7e:9a:36:00:
                    22:b2:27:5b:92:76:f1:15:93:a4:49:3c:26:eb:20:
                    ec:8b:03:fd:27:28:81:9f:38:93:04:e0:a3:05:c8:
                    6b:3f:eb:bb:7f:99:de:4b:33:a6:7b:39:c7:54:9a:
                    9c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2C:6D:6D:A7:16:C1:A2:DD:6A:BA:4C:0B:5D:05:0B:7C:3C:EC:BF
            X509v3 Authority Key Identifier:
                keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3e:9a:9c:fc:ff:be:80:14:e1:dc:35:ff:f7:51:13:42:d6:
         05:b2:3c:ca:bc:4f:97:e2:57:d6:c1:14:92:e3:b5:4a:99:30:
         79:ee:35:8f:8a:64:6e:cc:7b:86:ec:dc:bb:7e:66:cb:17:99:
         da:06:5e:6e:6b:66:23:7d:d2:4e:bf:e9:e6:98:8c:9a:04:1c:
         c3:71:81:b8:6d:34:99:23:29:94:f2:d8:24:e4:e0:46:45:28:
         a6:7a:11:86:fb:d2:a7:d3:6c:54:43:31:cc:27:ab:ad:07:ca:
         49:d5:37:bd:b2:c9:58:df:f5:ec:c2:ca:ac:37:b9:c6:6a:37:
         10:23:23:7f:d4:ab:27:03:aa:f9:7c:31:01:ff:b1:e4:23:11:
         98:f7:e7:4e:d3:68:4e:a7:60:d2:a8:95:98:a0:f8:d7:5a:91:
         94:36:1c:d8:16:fd:d1:90:84:a7:ec:d7:bc:94:a1:92:68:e3:
         b4:3e:9b:2b:3f:db:75:55:5c:29:ce:10:03:79:7d:b2:f4:4d:
         31:e9:c0:9c:59:ca:a2:6f:a4:4e:23:18:ab:a1:9c:3d:96:8f:
         68:4c:1c:52:a9:49:f8:f8:6d:2c:c2:d3:8b:80:d6:b2:ca:34:
         a8:42:20:37:85:ea:93:f9:f7:23:bf:9e:8d:27:51:c6:46:42:
         fb:7f:0e:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Btw5A4jJtSwuwup48DcuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzN2Y5YmY4NGI2OWEwOTA0MjQzMmRhZTgzNzdlZTBhYzhm
ZjFjNjEwHhcNMjYwNjEzMTYwMDU5WhcNMjYwNjE0MTYwMDU5WjAzMTEwLwYDVQQD
Eyg5ZDJjNmQ2ZGE3MTZjMWEyZGQ2YWJhNGMwYjVkMDUwYjdjM2NlY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0PTVz4xPXEsTSgXjADvViYOIFkN
MjvQ61KWGqn9Nd/w6+xPAX76rSZD04F6SwL4B2stWg1Pn+IED0UW0qs9qWswPjpL
7B1j9ITua/PdKjkjqE3TNF9GB3FtnfneIRTIwmmUCbLSj8069+A3wBdOTscUy5tm
fPJ0LN175ZC1NmwUN9rd47yshE4SFX6tQC3vT5xks7IxGpBaGxIc+IpJ3GnyqIf6
bMswWXLls+JjJvQp1bm8R0cjumxTG3jphY5To2kvJ1zZXD9EzqtkTX6aNgAisidb
knbxFZOkSTwm6yDsiwP9JyiBnziTBOCjBchrP+u7f5neSzOmeznHVJqcEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0sbW2nFsGi3Wq6TAtdBQt8POy/MB8GA1UdIwQY
MBaAFFN/m/hLaaCQQkMtroN37grI/xxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUt
ODkyZWM2ZmY0NzcxLzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUtODkyZWM2ZmY0Nzcx
LzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASz6anPz/
voAU4dw1//dRE0LWBbI8yrxPl+JX1sEUkuO1Spkwee41j4pkbsx7huzcu35myxeZ
2gZebmtmI33STr/p5piMmgQcw3GBuG00mSMplPLYJOTgRkUopnoRhvvSp9NsVEMx
zCerrQfKSdU3vbLJWN/17MLKrDe5xmo3ECMjf9SrJwOq+XwxAf+x5CMRmPfnTtNo
Tqdg0qiVmKD411qRlDYc2Bb90ZCEp+zXvJShkmjjtD6bKz/bdVVcKc4QA3l9svRN
MenAnFnKom+kTiMYq6GcPZaPaEwcUqlJ+PhtLMLTi4DWsso0qEIgN4Xqk/n3I7+e
jSdRxkZC+38OXQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:04 2026 by rpki-client