Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File:                     UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier:          sT8GL2xdu50Zwd7fINmEZ+uLgh0Xut7NtVsl1zuHVnM=
Subject key identifier:   A9:CB:FC:75:D5:97:BF:DC:EE:AC:E6:A9:00:E1:9C:1E:78:95:03:A1
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer:       /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial:       019EC1B6EE26477F4A16000521A51B50ED67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number:          09A8
Signing time:             Sat 13 Jun 2026 16:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:51 +0000
Files and hashes:         1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: iYdcsZHhyst64ZLLfv0Ko2EZWMW1OAhkE4TC0Fv526o=)
                          2: bBMlqfhZbgU4RFc29xzMS28J5Yc.roa (hash: wmFqb2uW30KLYhFd4JkMsA8poWqQ5oZsDAIy44oWkC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:ee:26:47:7f:4a:16:00:05:21:a5:1b:50:ed:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
        Validity
            Not Before: Jun 13 16:00:51 2026 GMT
            Not After : Jun 14 16:00:51 2026 GMT
        Subject: CN=a9cbfc75d597bfdceeace6a900e19c1e789503a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:37:aa:61:b3:fe:ce:33:43:d9:e2:4a:99:f4:
                    49:44:31:a9:60:71:81:d6:c0:b2:15:c6:4e:b1:e2:
                    97:e9:74:c2:6d:69:01:3c:b6:d7:38:36:bb:3e:3e:
                    e4:d3:92:06:f7:22:bb:d8:dc:ce:09:9d:a4:8b:35:
                    b6:55:09:43:79:5a:5c:a0:aa:4e:38:cc:ea:a4:2a:
                    e9:77:45:b0:8e:4d:77:41:40:7d:96:db:0f:31:de:
                    b3:71:cd:4a:c4:be:cb:56:7b:e2:cd:08:e2:39:f3:
                    0a:29:c5:2a:92:35:62:ad:67:9d:eb:ea:0e:5f:13:
                    09:08:17:2f:fe:fb:3d:70:12:57:cd:16:cc:f6:c3:
                    1d:14:96:02:9a:ef:7b:ad:f7:90:87:54:93:19:63:
                    3c:33:90:cd:c8:e9:3c:fd:ca:16:41:e1:b9:89:3e:
                    02:97:37:70:f2:fb:df:55:d5:97:f9:83:1c:7d:d6:
                    45:23:58:9c:22:ab:91:f3:99:2c:23:72:02:a3:1d:
                    c8:7e:2a:4f:8f:1e:d5:a0:d9:ee:78:1f:01:f2:2c:
                    25:5b:4f:ed:9d:43:01:4c:84:2a:64:65:75:ae:d6:
                    6a:a3:30:6e:7c:d7:69:6e:be:55:6e:40:ea:33:29:
                    ef:75:ab:86:8d:5b:12:0e:d2:61:dd:38:25:2a:17:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CB:FC:75:D5:97:BF:DC:EE:AC:E6:A9:00:E1:9C:1E:78:95:03:A1
            X509v3 Authority Key Identifier:
                keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:1d:5e:dd:20:1b:7e:6a:ca:9f:02:f6:ff:4f:3f:ce:bc:5c:
         54:7b:56:e7:ef:3b:77:17:8c:61:c7:bc:0b:4d:b8:e7:e4:4c:
         16:46:3a:68:66:68:83:a8:a7:57:b3:ab:ac:4e:5a:86:fe:04:
         be:d4:2b:d4:b6:7c:c6:9d:7a:27:e8:e4:7c:98:03:13:f8:d2:
         4a:46:88:7f:59:26:b9:61:15:67:8e:62:19:f1:52:57:ea:b3:
         e9:ef:3f:20:06:ac:c5:2a:ee:99:d4:f2:fb:f0:61:c3:06:fd:
         1d:aa:a9:83:99:09:e5:10:e1:ba:de:b8:67:0c:28:1d:ee:f8:
         48:a8:f8:57:f8:6a:08:86:f2:20:d8:9f:e1:a3:12:d7:04:e7:
         30:78:04:21:82:40:0e:79:28:28:96:36:d2:fe:5d:db:04:c4:
         17:d3:3f:fc:09:9d:20:80:4f:0c:d5:83:f5:fd:46:79:99:ea:
         00:21:91:c7:e5:bd:da:ac:6e:06:63:22:63:3d:56:20:4a:7b:
         18:ac:db:17:56:ed:5d:36:ce:0a:89:33:1c:18:63:f4:b6:9c:
         b8:c2:f5:40:c3:d0:ca:4f:b8:59:a3:1d:4c:8b:38:6f:c4:e0:
         41:f9:a6:d4:99:c5:66:01:e1:b5:1c:12:d8:3b:8f:7c:ad:35:
         ce:eb:6b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:33:53 2026 by rpki-client