Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
File:                     uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json)
Hash identifier:          9wLGLTcnhQf1JmawucCAaYwocFl0oKk4Oz0YIixl3xg=
Subject key identifier:   DA:22:F4:7D:88:86:55:3D:4C:53:76:34:67:F4:7C:3B:9E:16:D2:E3
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Certificate issuer:       /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial:       019EC4EEFB3C0AD03D95F4B4018B4EF59982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
Manifest number:          1437
Signing time:             Sun 14 Jun 2026 07:00:56 +0000
Manifest this update:     Sun 14 Jun 2026 07:00:56 +0000
Manifest next update:     Mon 15 Jun 2026 07:00:56 +0000
Files and hashes:         1: dsdqBIAnrCJg5gWYaMbCM3qAMWs.roa (hash: /P+LPCXiDZwClBrS2PGojc/QqZ2hX7FiQfLqx4lq3iA=)
                          2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: Fjz2nvVeHr/8crOBRSNY0Ls0rClTssePuux1fa1TqyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:ee:fb:3c:0a:d0:3d:95:f4:b4:01:8b:4e:f5:99:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
        Validity
            Not Before: Jun 14 07:00:56 2026 GMT
            Not After : Jun 15 07:00:56 2026 GMT
        Subject: CN=da22f47d8886553d4c53763467f47c3b9e16d2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:68:40:0f:d0:4f:3e:09:41:68:2b:bd:77:
                    c2:1f:fc:a4:f4:3f:f1:4e:f0:d3:19:6b:83:48:02:
                    71:e5:8e:46:5f:c6:f2:c8:68:d1:75:2c:35:6a:89:
                    c0:56:9f:67:56:5d:17:40:d7:a1:71:82:59:c4:6e:
                    37:e6:10:6e:53:63:f5:84:a0:44:41:27:4f:5d:7d:
                    07:42:4e:ac:02:b4:04:ad:69:59:a1:d8:75:6c:cc:
                    58:4d:bd:38:ae:33:14:31:67:4b:e0:f3:9a:2d:0d:
                    68:b1:4d:eb:21:65:ff:2b:9a:89:f2:38:bd:60:ee:
                    d6:f8:08:00:9b:8b:68:e2:ac:92:3f:7a:c8:38:8a:
                    d2:8b:7f:e0:bd:c0:14:7a:a0:28:37:08:cd:1d:6d:
                    b2:fe:d5:f7:99:b7:bb:78:9c:91:04:b4:eb:13:42:
                    e0:18:99:32:10:de:54:99:15:22:36:92:57:3d:31:
                    a7:21:9b:5d:5f:91:46:a7:f5:2f:4d:d8:be:13:d6:
                    4d:95:89:a9:41:b8:74:56:25:1d:77:e7:72:8e:9e:
                    81:71:16:57:52:99:01:3a:01:2f:d0:81:2a:d9:77:
                    cd:68:c4:c2:7c:07:ce:1f:c5:e0:8f:d7:68:36:25:
                    bd:ed:bc:c9:57:b3:5f:1f:61:83:6f:86:36:3c:78:
                    52:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:22:F4:7D:88:86:55:3D:4C:53:76:34:67:F4:7C:3B:9E:16:D2:E3
            X509v3 Authority Key Identifier:
                keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:26:60:a4:9c:86:47:16:f6:15:f6:ee:41:bc:fe:3c:df:
         1e:57:03:67:cd:e8:4b:f0:6b:35:f6:2c:f1:61:64:00:80:27:
         6e:5b:ba:d6:4f:48:cb:f6:03:a2:ff:82:34:2a:80:fa:c7:51:
         0c:3f:18:15:35:93:ec:99:51:81:25:64:bd:09:80:fe:6f:75:
         3c:29:30:7a:81:33:47:13:ae:54:83:90:62:d3:6e:8c:03:2f:
         a1:91:da:9e:d1:d1:5a:f0:9d:d0:c5:81:51:ab:3d:52:34:c9:
         1a:ae:17:ec:9f:f8:aa:5e:bc:87:1b:87:9f:b3:fe:de:a5:c4:
         3d:99:f4:5e:49:31:10:d0:ea:40:68:5c:30:d9:a5:ad:2b:42:
         23:f5:0d:5b:03:f3:e4:c6:b8:ae:c7:c6:69:26:8a:8d:79:46:
         92:7b:61:c1:5c:91:f5:34:df:ba:9b:53:90:10:49:12:f8:56:
         1c:b0:61:79:a8:7f:4a:e5:53:2e:f3:ce:c5:ed:9f:35:b3:a8:
         9b:7c:ea:0b:00:91:27:d4:14:e7:22:4d:72:6b:bb:61:9d:b7:
         94:b3:5c:71:a8:65:b7:34:d3:a1:32:aa:a4:46:1e:17:22:41:
         bb:1a:5e:f2:6c:73:03:fa:a1:e2:8d:77:50:2b:ce:52:cf:d5:
         f0:9d:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:24:24 2026 by rpki-client