Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File:                     UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier:          0EtNUTJ26MPGTxB/cUBBKhDkbPedpkbFFuN1Y6fbGPw=
Subject key identifier:   7F:A4:98:AB:E6:BB:3A:D5:A6:7E:17:FC:08:3E:33:77:72:0B:69:62
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer:       /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial:       019EC0A3BB0B961DA0FA62E1DE38AC26BBFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 11:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:16 +0000
Files and hashes:         1: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: /hT9aLDdvXz4pwojx/edlASxFPgESeLYgiKBOBIu/v8=)
                          2: jb28EMGpZLQEx0nm-COFBx7LuxA.roa (hash: tlsP+4YE5wEIxVFDiqeCuZVOSE8h29Zo7K+FoY31djg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:bb:0b:96:1d:a0:fa:62:e1:de:38:ac:26:bb:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
        Validity
            Not Before: Jun 13 11:00:16 2026 GMT
            Not After : Jun 14 11:00:16 2026 GMT
        Subject: CN=7fa498abe6bb3ad5a67e17fc083e3377720b6962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:a5:30:78:58:fb:90:af:35:0d:2d:e4:ad:
                    6d:cf:82:e6:3d:c7:7d:ca:09:5a:55:12:0a:c3:16:
                    19:ad:e9:37:5c:83:29:ff:5c:af:ad:c6:1e:cd:7f:
                    e4:3e:f8:0b:c7:f5:79:f9:0c:99:3a:25:c0:fc:b6:
                    3e:1a:ea:cb:44:56:a9:22:95:fc:32:08:fb:d5:23:
                    54:5d:b2:08:af:44:1e:a3:47:30:29:d5:6d:b9:05:
                    da:ee:1f:d1:d7:b0:52:49:30:d6:60:7a:5b:72:4a:
                    c4:58:7f:ec:9f:58:38:2a:b4:df:31:a7:97:e5:ca:
                    96:4b:7c:4d:0f:5d:d9:07:4f:9c:b9:de:ea:0a:ec:
                    58:49:9d:ab:15:1a:89:9d:70:d1:8e:1d:95:3e:33:
                    33:b5:96:eb:07:3f:ba:42:2b:93:8c:c3:31:f6:58:
                    4c:e2:4a:a6:46:c7:6e:a4:d1:1e:7e:89:6f:c9:ab:
                    55:9d:6e:44:72:77:c3:33:6b:21:2a:db:8b:9c:51:
                    b1:d5:86:fc:81:d5:1d:3c:32:19:42:2f:03:df:49:
                    fc:8d:53:e2:92:64:41:6b:06:c9:a4:d9:d6:6d:d0:
                    d7:9f:b5:1c:3b:73:ff:90:93:4f:bc:a3:f9:55:c7:
                    73:04:16:f2:da:cf:80:47:e2:a1:23:46:7a:ff:38:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A4:98:AB:E6:BB:3A:D5:A6:7E:17:FC:08:3E:33:77:72:0B:69:62
            X509v3 Authority Key Identifier:
                keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:82:6c:83:ed:d7:a4:29:47:31:5b:36:20:66:6e:67:6b:7d:
         bd:b4:a9:a1:66:a4:86:77:2a:39:7c:48:ff:42:42:2c:13:c1:
         bc:06:80:18:b6:dc:77:ff:d8:21:25:87:87:5e:eb:69:6f:86:
         30:a0:94:37:1b:6b:c3:db:bc:ac:77:fa:5e:8c:a0:ef:3a:8c:
         1b:c3:1a:dc:ff:9f:4a:26:b1:d6:d9:19:ae:2a:27:15:2b:13:
         8b:e9:2e:68:9d:f4:bf:e7:5b:81:9a:13:53:0f:22:cb:f6:5c:
         25:a8:f6:14:49:34:06:e4:c6:89:c5:bd:7e:a7:5d:86:3d:68:
         25:6c:c6:94:94:e8:c6:e3:26:81:44:9c:32:f8:6c:ea:da:d6:
         b6:6f:81:1a:a2:aa:ce:6f:a2:3d:02:3d:38:fe:11:04:bb:fb:
         94:d6:9b:dc:ba:4a:63:a0:af:03:6b:cf:d9:4f:6f:4d:bf:aa:
         30:44:ce:5c:5e:e8:b0:d0:cb:60:09:5c:66:0c:42:da:73:67:
         8a:6c:99:91:d2:cc:44:d4:93:56:d5:c8:fc:06:28:a2:7f:bf:
         ba:7c:29:fe:6b:5f:d8:42:8d:15:36:d5:a5:ca:b8:9c:00:b7:
         03:7a:ab:72:a2:5a:4f:61:94:a5:57:1c:af:e3:14:08:94:46:
         32:dc:55:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:57:29 2026 by rpki-client