Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File:                     UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier:          eJ+CcSxoW1+VBKpKYFm3fdy9+MDnNN+JUqCdUwEAOns=
Subject key identifier:   B9:4E:57:BD:17:69:7A:01:67:7E:DA:BC:BE:34:AF:84:19:82:7A:FF
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer:       /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial:       019EBFC821AD7DAC3BC2E526324BC5E14230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number:          056A
Signing time:             Sat 13 Jun 2026 07:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:24 +0000
Files and hashes:         1: JG0kWB2lcANSZ4icVMdox6PnmQU.roa (hash: S3i14g9db5TMp6vh+BHfXGO+xfDTvXvHBvOwS1Pp8sE=)
                          2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: qEc7QF2srf9CSb8+eUVJp2bYyHWSRTInnnCG01UjdBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:21:ad:7d:ac:3b:c2:e5:26:32:4b:c5:e1:42:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
        Validity
            Not Before: Jun 13 07:00:24 2026 GMT
            Not After : Jun 14 07:00:24 2026 GMT
        Subject: CN=b94e57bd17697a01677edabcbe34af8419827aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ba:61:3c:ae:f7:7e:78:05:d5:a3:d4:a7:bc:
                    b5:af:5f:0d:af:ea:55:9e:2d:23:c4:52:05:c2:a6:
                    40:14:b1:b8:b5:65:c1:ff:41:b8:76:27:e8:19:f5:
                    c7:70:61:db:cb:1a:13:2f:ac:e4:11:a4:ce:d2:82:
                    cf:c5:f9:1e:88:f1:c1:81:61:fa:04:43:e3:8c:21:
                    a9:5c:9a:a5:44:36:3a:c1:ce:74:b4:b1:28:43:f6:
                    60:fa:f9:72:87:ba:dc:71:5b:fb:30:07:07:5b:0b:
                    0a:b4:f9:7d:42:57:02:b5:50:30:3d:e3:61:3c:07:
                    41:e6:fb:c0:31:61:ef:13:23:ff:ec:db:f2:e7:ba:
                    1f:e1:53:4f:0c:9a:a2:e9:89:a7:97:28:9b:10:43:
                    4b:8e:26:e4:c9:cf:c2:c1:a2:c0:68:01:96:9d:28:
                    0c:64:86:f9:4e:47:0e:5a:f3:be:ab:c1:4e:fe:e0:
                    b9:6a:73:5a:03:6b:72:74:3d:f6:4c:4f:b8:5c:2d:
                    cc:25:90:17:52:23:d7:d5:5f:d2:86:7b:63:d6:4a:
                    ea:cd:35:cf:dd:03:28:4c:f2:70:2c:00:fa:50:1a:
                    28:51:aa:33:6e:4a:95:12:99:9e:46:08:8a:02:57:
                    39:39:33:65:89:37:5c:2c:01:85:59:79:1a:07:5a:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4E:57:BD:17:69:7A:01:67:7E:DA:BC:BE:34:AF:84:19:82:7A:FF
            X509v3 Authority Key Identifier:
                keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:41:f3:c8:f5:e8:c7:8b:95:eb:1e:54:cc:e0:30:4f:a2:38:
         d7:59:8f:f8:7c:25:4b:3f:9e:16:28:d6:21:3b:e4:d2:68:35:
         fb:2b:8b:3a:d0:00:f4:51:93:58:f0:57:56:5a:ec:36:b2:1a:
         3b:71:bf:b2:5c:8e:8e:56:ca:ec:84:d5:d7:b9:dd:13:a6:6c:
         cb:4b:c5:20:8f:63:2c:be:b0:94:0b:79:f1:5a:d6:06:42:7c:
         89:2c:9a:0a:4a:4f:26:22:8c:5a:41:0f:22:49:b5:f5:0f:82:
         51:2c:aa:70:ec:a1:66:0c:62:5c:cb:9f:93:74:31:6c:5c:8d:
         9a:db:5f:77:d8:66:c4:71:ed:82:08:91:87:42:25:e3:29:6a:
         c0:a2:13:3b:1b:c1:41:ce:b7:8d:2e:e7:34:56:16:33:91:6b:
         79:1a:9f:bd:fe:a1:ca:4a:93:3b:12:9c:be:33:e9:16:70:f2:
         fb:56:7a:b1:5e:a5:fa:61:0d:0f:26:27:9b:66:70:1b:a9:92:
         39:80:cb:e8:25:4d:60:f0:7d:07:f4:17:ed:18:9d:28:b0:a2:
         40:b8:ce:e3:9c:79:18:29:1e:4c:f0:3d:ae:f6:54:5b:15:e9:
         a9:fa:fb:9d:e3:4f:b9:ed:d2:04:32:ee:ee:43:b2:01:9f:86:
         d3:e4:9e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:26:37 2026 by rpki-client