Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
File:                     U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft (raw, json)
Hash identifier:          vAlIyuCaXPZXnIr7P9jEwZqD2wEL8sC69q4JAdRU9ZI=
Subject key identifier:   62:2D:83:A0:FB:7D:E8:48:C3:E6:1B:16:0B:17:A4:AB:88:60:C1:AC
Authority key identifier: 53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
Certificate issuer:       /CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Certificate serial:       019EC4137827D9DA86986E51EE7F51C671E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
Manifest number:          09E9
Signing time:             Sun 14 Jun 2026 03:01:10 +0000
Manifest this update:     Sun 14 Jun 2026 03:01:10 +0000
Manifest next update:     Mon 15 Jun 2026 03:01:10 +0000
Files and hashes:         1: U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl (hash: V7yVZkNeE2TdOiiAdaD6DIWwPZU85i8VbQvZFXhfbVQ=)
                          2: XcRX1RAJL4NGdzyun1ejeZqAF24.roa (hash: YNAZegeHiWzquonxoxjxpFIiVyp3kn/I+1eygwpZVIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:78:27:d9:da:86:98:6e:51:ee:7f:51:c6:71:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5349c2d00ba46be9244b76194baa10f33ce3462c
        Validity
            Not Before: Jun 14 03:01:10 2026 GMT
            Not After : Jun 15 03:01:10 2026 GMT
        Subject: CN=622d83a0fb7de848c3e61b160b17a4ab8860c1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8f:73:bd:59:35:c6:8b:66:0f:da:46:58:2e:
                    76:10:72:9b:e8:e1:df:b3:57:da:f5:fd:84:2f:15:
                    0d:c4:04:be:51:a2:f1:50:03:ac:0d:e3:55:a2:28:
                    2f:65:44:3b:be:68:79:9f:be:60:0c:83:3e:91:0a:
                    06:f1:c0:12:f0:c0:4d:3b:f9:a9:de:67:bd:e1:e7:
                    68:6d:e0:1a:dc:95:b3:d7:7e:2f:9f:e2:a1:10:bf:
                    3f:37:fe:f5:7e:da:b0:14:e1:0c:3f:67:15:6c:40:
                    81:3d:cf:24:d3:2d:db:23:d8:18:40:6b:23:85:7f:
                    76:63:9b:cb:bf:92:30:11:cd:2a:2d:3d:c6:00:1a:
                    49:f1:ce:47:68:69:f5:25:e0:1a:5d:0d:89:03:2c:
                    31:b0:f8:57:e8:eb:7a:84:b1:58:24:76:5e:a7:9b:
                    74:84:40:12:6c:96:47:a8:99:f3:99:78:2f:e9:ba:
                    f5:e6:a9:ec:86:26:76:94:3c:46:d2:a9:df:39:bd:
                    6b:64:d7:00:28:1e:03:8c:c4:de:9e:e1:b2:23:10:
                    af:d3:83:e7:1f:80:16:82:e7:7b:c0:f5:59:26:fa:
                    1d:df:3b:54:41:04:e2:e2:67:7d:f8:e8:5c:6c:2d:
                    62:95:a1:7d:c9:eb:5d:c4:20:c4:9d:7d:ac:de:fa:
                    4b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2D:83:A0:FB:7D:E8:48:C3:E6:1B:16:0B:17:A4:AB:88:60:C1:AC
            X509v3 Authority Key Identifier:
                keyid:53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:60:b8:f0:24:89:ba:86:78:f5:be:75:79:cb:39:e0:66:62:
         ef:d0:70:79:a2:cd:4f:5b:80:82:96:bf:f0:c4:51:8c:d4:67:
         e2:55:de:2b:6c:80:df:66:e0:e5:c6:ca:9f:37:b6:f1:fc:4e:
         8d:7a:69:b0:2f:14:15:89:6e:b4:56:dd:31:b2:50:5b:4d:e0:
         8d:2f:a7:35:1e:2e:c9:41:5d:ce:f8:e3:b2:92:91:a3:73:81:
         bf:e2:a2:6c:76:4d:e9:bc:f1:e4:d3:d9:8f:bb:94:92:fe:6f:
         24:fa:0c:e3:36:4b:24:be:d9:2c:f7:36:dc:c6:96:8d:d9:24:
         16:01:df:15:1d:a8:4e:f9:d3:47:da:d8:df:0c:c2:31:fa:18:
         97:71:3f:96:31:cb:d9:41:0d:a5:96:16:66:1a:b5:0f:e6:d9:
         ca:ee:84:fd:91:66:91:a5:de:3f:a0:13:14:7c:49:5d:c1:2b:
         17:06:d6:8d:59:f9:68:01:68:de:e2:bd:1f:d0:ee:6c:37:b8:
         8b:d6:ba:e5:14:ed:2c:7e:23:11:64:1c:48:82:8b:61:30:46:
         ff:e8:aa:fb:5b:3f:5d:dc:9d:d9:26:3e:3d:f0:f4:dc:d8:53:
         87:4e:ce:42:e5:aa:b1:92:4f:76:3e:ff:4f:52:7a:4a:5c:bd:
         c5:ee:02:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:52 2026 by rpki-client