Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
File:                     ukQzhlmFp7teJpw3lK5vFkz8Lds.mft (raw, json)
Hash identifier:          XYC38h7hHet1kd8GeZWP+yBhN9drXZnSwAMk1T1z4yI=
Subject key identifier:   70:A1:B2:36:69:4D:04:C6:C3:FB:14:41:96:00:85:49:AF:83:DC:A5
Authority key identifier: BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
Certificate issuer:       /CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Certificate serial:       019EC2C913F2EBEE0D0B8F66A4EFFF2E24AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
Manifest number:          093B
Signing time:             Sat 13 Jun 2026 21:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:18 +0000
Files and hashes:         1: UfxnZEwkQdyHN4gibAtk_ce1zeI.roa (hash: Bl9GgITeZ3znWiaIE2fwC3TQwsJfWdhy5zENaMdMELI=)
                          2: ukQzhlmFp7teJpw3lK5vFkz8Lds.crl (hash: ODkVcmI1P8u5+HvcqBTPoD63uHxg9gm+NnpwMTv5pCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:13:f2:eb:ee:0d:0b:8f:66:a4:ef:ff:2e:24:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
        Validity
            Not Before: Jun 13 21:00:18 2026 GMT
            Not After : Jun 14 21:00:18 2026 GMT
        Subject: CN=70a1b236694d04c6c3fb144196008549af83dca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:e7:d8:e3:44:5c:e5:75:37:90:12:5b:fb:
                    de:0a:64:43:86:de:7a:77:e8:6f:e2:05:88:cb:30:
                    6e:85:f8:a1:b3:76:b3:d2:89:4a:00:c1:9e:61:ba:
                    05:d5:53:8c:be:7e:65:19:78:b0:00:60:cc:be:1c:
                    79:be:94:35:a0:82:82:b4:74:77:2a:50:f8:2c:38:
                    61:d5:9a:b8:55:ff:6e:ba:f2:c5:fd:85:7d:3b:db:
                    7c:f2:08:3f:c4:8c:bc:32:27:4f:fe:ad:d9:ba:d5:
                    2d:4a:57:2c:fe:dc:f5:b6:51:95:ce:19:2e:43:b9:
                    14:06:63:d8:0f:7c:9a:23:52:83:1d:a1:ea:66:ba:
                    92:9c:6d:b6:9d:3f:1d:60:fd:da:59:c2:c3:10:62:
                    0b:e5:67:41:bd:79:18:7b:59:72:44:41:3a:17:33:
                    f0:33:3b:5a:02:e6:e0:c6:b9:4e:5b:db:e2:8f:a6:
                    63:d1:a9:6e:48:a7:6f:db:11:98:e5:33:4b:3e:af:
                    ce:50:4b:6b:56:8f:7b:47:20:52:26:ef:b5:15:bc:
                    f6:c9:25:ae:4d:11:e3:f1:69:ef:23:8f:70:c2:3c:
                    e0:4e:d3:74:e9:c7:03:bc:e3:fe:00:a7:e1:bb:11:
                    df:a0:13:c9:dc:97:42:e8:f7:82:86:b5:dc:4b:7e:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A1:B2:36:69:4D:04:C6:C3:FB:14:41:96:00:85:49:AF:83:DC:A5
            X509v3 Authority Key Identifier:
                keyid:BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:ea:1d:5f:86:bb:42:28:b2:27:c4:39:35:7b:02:b7:44:
         18:cc:54:f8:a1:fb:7d:da:dd:cb:0c:60:29:7c:b9:67:e1:03:
         34:04:09:27:c7:21:d9:96:ee:1d:91:2e:4e:cd:d2:7f:4a:89:
         45:04:11:d6:12:d2:a8:94:c7:d0:a4:96:35:7e:8e:4e:af:7c:
         ff:79:93:13:58:e5:a6:99:9d:b0:a9:c4:31:64:6f:45:a1:42:
         35:c7:36:08:33:7e:9b:e9:08:8b:70:ae:3f:ba:a1:f4:e3:69:
         80:47:65:ce:23:d9:6d:f4:b3:71:e4:12:fb:67:5e:c5:6d:8e:
         fa:49:5b:bb:be:41:42:64:42:d3:e6:34:8d:5e:98:96:74:bb:
         a6:66:ae:34:8f:b1:9a:ab:62:a6:7a:31:e0:06:cb:e5:0a:13:
         fe:db:9c:07:17:fc:6e:d5:7c:ae:42:9e:1a:38:58:ba:b7:90:
         a0:b8:8b:97:e6:d9:49:71:0e:c2:8f:a1:69:57:86:0c:3b:54:
         c9:6b:e6:af:fb:e1:ca:e9:f7:a1:b8:6c:2c:a0:21:4e:68:f6:
         2a:f1:94:f6:cd:4f:a4:2e:f8:f6:0c:0d:cc:00:43:c0:bd:cf:
         cc:70:61:e4:1a:94:8a:76:1f:8f:ab:04:be:fc:2f:65:d3:c7:
         f9:79:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:04:07 2026 by rpki-client