Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File:                     UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier:          mfa7LN0hgSsk+UPQ7BOrUwxKhJAwQlq7hsBGeuoiPic=
Subject key identifier:   08:50:99:F6:E0:4C:14:1A:9D:0E:EE:A0:AE:A4:ED:75:D7:F2:31:A7
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer:       /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial:       019EBF5A5F6B0ADB73E0E1B04B0264D509D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number:          0DC6
Signing time:             Sat 13 Jun 2026 05:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:31 +0000
Files and hashes:         1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: qKnsGyjmOPq4PmrKBZmGwCp3VrAtZTdyf84zK5zRPzY=)
                          2: e-at-P8xiBcITaRp9MWoA0_N7Yc.roa (hash: 9wLByEu5Ei2XqfeNnvQ5SxG/GiSaQBkbBEsIrzP6Rl8=)
                          3: uB1EV_9of9OBUO5nh6wjIcM7XYM.roa (hash: JxjVwCsJHpCurdGu1ulwE9pvdYXZMK7HdluGzn2poh0=)
                          4: zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa (hash: Lv+rOmGoTKRisbrnO2jtdKQEexKh+o81CnIGv9g18ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:5f:6b:0a:db:73:e0:e1:b0:4b:02:64:d5:09:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
        Validity
            Not Before: Jun 13 05:00:31 2026 GMT
            Not After : Jun 14 05:00:31 2026 GMT
        Subject: CN=085099f6e04c141a9d0eeea0aea4ed75d7f231a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:85:f6:8b:eb:04:51:ec:fa:fa:b8:19:4e:
                    80:7b:46:c8:ae:5a:c2:72:b3:b4:91:b9:1a:8c:61:
                    2b:7e:af:04:b5:43:76:22:6e:90:98:b8:70:29:00:
                    30:5e:1a:77:88:d8:1b:d2:b5:20:c2:53:d1:4f:6d:
                    cb:2f:91:19:44:7a:3f:1a:35:78:46:72:46:e2:92:
                    81:5a:01:5b:39:94:e1:3d:db:0a:c1:9f:63:d2:e1:
                    b9:85:02:55:e6:f6:94:9a:5f:43:d4:a1:f0:cb:68:
                    11:08:6b:67:59:16:c3:d0:fb:3e:97:ec:dd:51:59:
                    18:fc:db:74:d4:ad:fc:54:3b:68:5f:23:6e:cf:ed:
                    38:84:31:0e:ef:c8:56:e3:82:95:ac:a7:01:76:7b:
                    a4:da:86:3c:cb:4d:e5:4e:26:02:be:fc:fc:8d:85:
                    a6:26:43:4a:8f:d3:44:24:f0:c5:ef:be:51:ea:5f:
                    9e:25:f8:65:fc:05:87:7b:7c:09:2f:b1:a8:1e:06:
                    0f:8a:c7:a5:fa:35:2a:6f:b3:b8:5c:0c:25:78:d2:
                    53:e9:5b:bb:5c:53:c4:ab:73:d6:b0:8f:b7:12:b3:
                    7c:1c:15:35:46:05:a9:ef:45:f7:9e:a3:4d:af:35:
                    09:ef:f1:ed:65:8f:18:63:4d:d0:10:82:4a:17:0a:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:50:99:F6:E0:4C:14:1A:9D:0E:EE:A0:AE:A4:ED:75:D7:F2:31:A7
            X509v3 Authority Key Identifier:
                keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:97:fc:e9:ea:94:cb:c2:2b:cc:01:28:3b:0a:f6:75:ce:
         a1:19:30:dc:b5:4f:6c:3d:fb:f7:ed:bc:b9:7a:99:81:ca:fe:
         db:fa:4b:bd:5b:ee:68:76:15:dc:fb:bf:44:5e:2c:9c:b0:c9:
         d7:9e:cc:da:cd:4a:73:d5:34:d5:56:2c:06:b4:c1:05:be:b2:
         c2:39:d5:a9:64:96:68:80:d7:41:68:0f:8c:2a:31:42:03:9e:
         1e:aa:89:53:d6:14:66:6f:5c:5f:13:93:cb:6d:bf:e8:96:e4:
         60:43:db:6b:0a:59:23:1c:4f:cb:34:ab:93:a3:bb:b6:1f:11:
         ae:f6:f2:d9:ec:2b:0f:0b:05:a6:66:a6:60:5c:11:e4:32:25:
         2c:27:b7:60:1d:90:b4:16:59:4b:d5:bf:b3:80:ef:ad:46:b2:
         a3:ef:e0:50:60:0b:7b:b3:4b:26:41:b0:a3:57:77:2f:93:e8:
         0d:9c:5b:25:63:b2:36:49:19:c3:73:43:d8:14:9e:f9:5e:e4:
         29:81:3d:1a:be:dc:ce:3c:ac:65:bf:27:4d:d4:93:72:30:b6:
         88:2c:41:53:c6:45:8f:c3:a7:64:09:a4:ae:5a:fb:ec:ad:bc:
         2b:32:d2:8c:d2:63:25:75:5a:41:b0:a5:c0:25:d6:0a:10:9d:
         8e:75:3b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:26 2026 by rpki-client