Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
File:                     UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft (raw, json)
Hash identifier:          /Lw9YGuhwy2kVo7Mwbg7bhkyLE0E1BNtc2oqtdk0wVA=
Subject key identifier:   5F:AF:54:56:52:35:D9:EE:70:27:E3:4D:14:54:80:FE:E1:6F:7A:87
Authority key identifier: 52:F4:89:7F:7A:87:3F:47:FA:53:52:A1:CD:FC:90:3D:23:26:38:94
Certificate issuer:       /CN=52f4897f7a873f47fa5352a1cdfc903d23263894
Certificate serial:       019EC148F88B34413EE730DDBEF7B697100B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
Manifest number:          EF
Signing time:             Sat 13 Jun 2026 14:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:45 +0000
Files and hashes:         1: UvSJf3qHP0f6U1KhzfyQPSMmOJQ.crl (hash: 9mT50Ve1xgtGHRaGSEHbQ8dOd07urYrapiK6mK+TAmA=)
                          2: XbkH5_i2k4jHzcNh6FE4UyKwysc.roa (hash: 4o2UxH6bGJou1LD39yY2Re5P0lbU2Modup85oP1m1j8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:f8:8b:34:41:3e:e7:30:dd:be:f7:b6:97:10:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f4897f7a873f47fa5352a1cdfc903d23263894
        Validity
            Not Before: Jun 13 14:00:45 2026 GMT
            Not After : Jun 14 14:00:45 2026 GMT
        Subject: CN=5faf54565235d9ee7027e34d145480fee16f7a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:2b:bc:22:b1:9c:da:73:ea:07:98:04:bd:
                    bc:a1:68:98:20:8e:34:5e:21:f8:a7:ad:45:72:62:
                    ef:39:60:6d:c5:a4:e2:6e:27:b7:6b:d3:f7:13:00:
                    e3:e5:37:e4:5d:29:7b:4b:d4:64:9f:85:23:b1:14:
                    3e:69:63:63:fd:31:27:53:f8:83:1a:40:13:90:08:
                    4b:c0:1c:63:40:fa:80:02:9e:8b:3d:a8:03:de:56:
                    5e:e9:1d:36:8c:61:2e:20:40:91:70:e1:3e:9a:cd:
                    6e:eb:9e:c5:61:29:86:95:74:97:78:4c:b8:9b:8d:
                    bc:af:c1:8d:cd:81:37:bb:06:67:ca:70:49:3d:57:
                    86:c8:f0:00:00:63:4f:82:f9:1a:f6:11:79:1c:5c:
                    ce:2b:64:d0:42:79:48:f8:8d:5a:7c:3a:8a:8d:bb:
                    65:91:4f:23:d3:2a:90:0e:19:8e:6d:a9:71:4a:73:
                    c3:f9:97:20:79:ef:2d:e6:41:a0:c6:d6:ad:bd:ae:
                    42:d1:93:e5:19:00:de:f6:3e:36:7f:40:e2:56:9a:
                    ae:5f:5b:f0:df:b6:6d:d8:cb:cf:49:88:9f:f7:b8:
                    8c:f7:51:bc:a7:ea:8c:2f:c6:90:e7:12:de:6f:e4:
                    da:d2:9c:1d:33:b7:3c:59:5e:40:09:45:c3:4b:61:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AF:54:56:52:35:D9:EE:70:27:E3:4D:14:54:80:FE:E1:6F:7A:87
            X509v3 Authority Key Identifier:
                keyid:52:F4:89:7F:7A:87:3F:47:FA:53:52:A1:CD:FC:90:3D:23:26:38:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:f4:ba:d0:4f:c2:fe:c1:6c:39:06:bd:07:fa:39:15:40:bd:
         61:bd:01:85:96:95:4c:18:53:f0:53:04:92:5a:2d:bf:92:93:
         8f:43:2c:20:70:1b:e2:16:55:d2:6e:4f:87:58:a4:1c:94:92:
         51:91:02:5b:84:58:67:77:2e:61:f7:12:4e:7a:eb:39:2c:e9:
         aa:a4:64:fc:5b:a0:d7:ee:6f:7a:dc:a4:37:4e:20:30:d4:44:
         fc:3d:61:b5:dd:cd:58:c8:c5:60:4c:b1:14:d5:3e:6a:f7:96:
         03:65:98:39:60:63:60:8d:6e:ec:69:b3:50:02:ff:31:02:4d:
         98:97:27:6d:12:01:86:4f:f0:f5:79:d0:0c:15:5f:da:42:b0:
         0b:55:a7:e0:ff:d5:e6:7f:e6:ee:32:7f:7e:92:55:cd:11:68:
         3b:65:4b:0c:5f:b1:01:be:b5:fa:c2:66:71:03:3c:f7:7e:23:
         3e:8b:51:7d:00:81:52:0e:1c:46:04:cb:51:c4:a1:e0:6d:7b:
         87:11:e3:7c:54:1f:cb:74:0d:a5:93:33:fe:b7:54:1f:bf:25:
         2d:c4:88:f1:9b:7e:53:f8:a1:7b:1c:a3:ce:cd:f9:4f:96:55:
         e7:d7:f0:5f:0b:27:94:8f:db:96:78:00:aa:24:fe:9b:bd:36:
         7b:22:52:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:01:42 2026 by rpki-client