Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
File:                     uoGySm1gML8IjeowyaWTL-vcanw.mft (raw, json)
Hash identifier:          8bDOa0hvKixmxMVhsx/mSFr6PYmgON4SXQxGnPFVIRM=
Subject key identifier:   32:CA:32:C5:BD:E9:C2:FE:25:F2:EF:E5:D9:20:DC:33:53:E5:DE:02
Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
Certificate issuer:       /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Certificate serial:       019EC3008558032F4BB8B935E3B9585A7370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
Manifest number:          0423
Signing time:             Sat 13 Jun 2026 22:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:51 +0000
Files and hashes:         1: uoGySm1gML8IjeowyaWTL-vcanw.crl (hash: OElZAiThszsFz4WvGHw5CwxRzVeT4sDlqiGN8JTN2/w=)
                          2: zl-n2q1Zb7EgYohA26XnxYXqdxE.roa (hash: BY/YVHNSQVEAmKd+rhuDTBW07jn5TB4TSJNB9lFmcSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:85:58:03:2f:4b:b8:b9:35:e3:b9:58:5a:73:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
        Validity
            Not Before: Jun 13 22:00:51 2026 GMT
            Not After : Jun 14 22:00:51 2026 GMT
        Subject: CN=32ca32c5bde9c2fe25f2efe5d920dc3353e5de02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cf:0e:35:6a:96:a1:60:59:55:50:4b:20:e5:
                    20:bf:9a:b7:a9:61:60:6a:3e:5e:8c:89:62:f9:68:
                    77:4f:44:28:a6:bc:d9:99:2d:06:45:bc:9d:e2:6d:
                    51:cd:66:0f:d0:0f:15:ff:d3:7b:6c:8d:eb:03:67:
                    8a:70:ff:d3:01:d4:94:62:e5:8e:9a:89:bf:58:e8:
                    7e:83:86:a2:b2:1b:69:6e:97:80:c4:40:14:39:b8:
                    69:b1:d1:20:88:ff:d8:fa:b6:b4:c8:85:a5:45:4a:
                    94:69:18:11:dc:41:94:22:ef:86:5d:3f:37:6c:46:
                    84:c1:e5:b1:f0:9d:73:98:9d:60:00:a2:15:2b:b3:
                    a4:f7:35:6f:9f:ca:b3:0b:fe:32:20:bd:13:47:80:
                    40:ff:b4:26:e1:f2:76:b1:48:5e:88:b1:c7:e3:3a:
                    c3:a3:78:ce:aa:9f:a4:93:6f:a6:ef:c0:5f:94:7b:
                    75:f3:bd:63:75:f8:71:fa:57:86:e6:54:5a:fd:18:
                    4e:a1:c0:a7:69:65:79:f5:bf:56:88:1e:eb:18:69:
                    dc:12:f3:b7:b9:31:47:a3:61:d4:e0:68:87:50:56:
                    00:6d:7d:0a:5d:cd:49:87:be:a5:4e:62:c8:9e:36:
                    67:ee:9d:cb:66:1f:1b:e7:29:df:ba:8d:a4:36:b2:
                    1d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CA:32:C5:BD:E9:C2:FE:25:F2:EF:E5:D9:20:DC:33:53:E5:DE:02
            X509v3 Authority Key Identifier:
                keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f0:90:fe:da:c8:fc:40:58:b5:7f:8c:62:b8:ad:fb:44:1b:
         8e:fc:c3:2c:79:81:01:ec:b9:d0:05:3a:c5:20:1b:6f:0f:34:
         43:5f:e5:df:c5:20:5b:29:7d:dc:85:3e:d1:80:ed:aa:31:3f:
         ce:90:4c:76:e2:e6:4e:dc:38:26:c2:84:8c:c3:eb:ff:e9:fd:
         21:76:b2:15:24:74:6b:5c:15:89:f0:b1:74:7a:ac:8b:f4:c7:
         27:89:f2:0b:28:6c:dc:35:e8:7d:96:1d:1f:4d:12:de:41:13:
         30:ec:ee:9c:16:63:0a:d9:03:7c:a1:76:21:58:cb:6c:aa:7e:
         7c:5b:dd:02:16:dd:0e:db:0c:ca:b4:16:ba:a0:4d:7a:99:20:
         34:bf:4d:71:0f:99:80:94:3c:66:e4:a2:73:cc:da:e0:12:ba:
         43:39:2f:d7:b8:52:26:c9:4f:7d:9d:50:5f:1e:03:cf:d8:c6:
         ec:10:87:b5:0f:b0:87:08:01:f0:70:55:f7:84:4d:27:23:6c:
         9e:16:01:8d:6f:2e:24:06:94:59:e2:cb:dd:1e:b4:02:e9:66:
         2d:b6:d2:5c:3e:04:32:b8:68:34:ff:25:80:58:29:73:d3:9e:
         36:d3:9f:b6:ff:e2:2e:4c:52:3f:0b:5b:7e:94:a6:d6:07:13:
         0c:d7:ee:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:45:50 2026 by rpki-client