Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File:                     UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier:          O/BepdW+2ghyrSbtiB5hEX5i5zrZRfp8TYKnZSoP5hY=
Subject key identifier:   FF:E0:0C:B8:A5:EA:4D:A4:D0:AD:E8:E3:91:5B:4A:1F:32:E2:1A:CB
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer:       /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial:       019EC111A5333BFA4784216D3857B2111DD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 13:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:19 +0000
Files and hashes:         1: R5_iJAHMim0AgymJSQ6r4wQbiHw.roa (hash: EQeRHkG43biXk81xozYoB7VEoug0HoUQn327W+HkcVI=)
                          2: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: 2IuUOn08zw8wezWqyF9dR3rofcpa9xdv9AFsq4KDu5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:a5:33:3b:fa:47:84:21:6d:38:57:b2:11:1d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
        Validity
            Not Before: Jun 13 13:00:19 2026 GMT
            Not After : Jun 14 13:00:19 2026 GMT
        Subject: CN=ffe00cb8a5ea4da4d0ade8e3915b4a1f32e21acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:ec:af:57:5a:e6:01:7d:72:98:32:a3:60:
                    98:09:17:d4:e5:0a:eb:0b:a9:9f:bb:60:9e:cc:b0:
                    a0:ec:2b:ee:7f:3a:6f:25:4b:07:a2:56:c7:e2:55:
                    85:4f:79:67:58:36:1e:61:ab:00:ec:88:55:bf:e7:
                    c3:59:7b:7b:bd:27:72:d2:c5:67:6a:f1:c3:16:1f:
                    d8:35:50:a6:e0:c3:f1:3c:43:e6:bb:d6:72:ff:92:
                    7e:4a:c8:bf:d8:73:6a:c8:ce:18:54:e1:fe:e2:b7:
                    86:88:bf:1a:97:c8:45:a0:6c:e3:f2:0b:dc:1c:bc:
                    f3:d5:d5:9d:7c:f1:2a:e7:03:66:fa:cd:4e:33:c1:
                    b8:06:a4:4d:0e:49:b2:f4:09:58:54:d2:05:1d:62:
                    1c:2c:c2:60:98:00:ae:22:7f:c6:db:b6:ee:87:e4:
                    90:88:bd:99:8c:0a:80:d0:8c:52:d8:26:0f:89:8f:
                    2f:86:eb:6a:0b:3c:48:5a:fa:33:e3:53:91:51:57:
                    fb:b7:d8:ff:53:b2:d6:6b:f2:1f:ea:df:83:64:74:
                    9d:3b:1c:7c:eb:f7:dd:a1:3a:0e:c6:60:a7:cc:9e:
                    a9:42:dd:b7:f3:ac:7c:ae:bb:2c:fa:8e:76:94:cf:
                    a0:fc:86:28:8b:f2:17:19:77:a5:1f:34:e6:e9:93:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E0:0C:B8:A5:EA:4D:A4:D0:AD:E8:E3:91:5B:4A:1F:32:E2:1A:CB
            X509v3 Authority Key Identifier:
                keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1e:eb:86:42:d8:7d:ec:b5:30:09:11:62:ad:ba:6d:e7:e1:
         2e:04:4a:43:7f:9e:5b:9f:6e:5c:f1:46:0e:bf:38:a0:64:18:
         90:b3:51:e8:81:56:78:92:87:63:b3:2a:37:47:ea:7d:d6:5a:
         cb:96:9d:d9:06:7a:e5:87:af:2a:37:53:1f:78:32:17:b3:58:
         4f:22:7f:a6:86:9c:97:8f:55:ac:a5:77:73:13:3a:db:f8:e0:
         62:e4:ff:46:b6:8a:32:c6:86:a6:1b:5a:2b:d0:eb:28:a0:16:
         ae:6b:c6:b5:b6:dd:ad:bb:c4:e5:62:33:50:2a:c2:21:b2:1a:
         32:98:cb:e6:87:d9:54:9a:3d:10:d6:f7:0b:a2:d8:2a:a9:78:
         af:85:ae:15:7c:f6:50:70:b9:a9:d1:1d:62:79:a9:55:2d:7a:
         7c:ba:7f:fe:a9:ea:f2:04:f8:5b:6d:44:bd:af:7c:b9:ca:0a:
         fd:3d:7b:85:e7:7f:5d:17:01:1a:2f:a9:00:9c:c0:02:4d:0c:
         f9:47:42:fd:fc:9c:f6:34:ee:19:60:45:1c:40:38:19:4f:af:
         3e:02:12:17:14:48:d4:3f:6c:56:44:80:45:bb:f8:37:2c:02:
         2b:38:3b:8d:cd:8b:76:a0:66:f5:0d:c8:c2:6b:b2:20:19:4a:
         49:cd:57:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:41:24 2026 by rpki-client