Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
File:                     _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json)
Hash identifier:          KwwwynRwagOsJ/lV6OfWoWhG5zuROHymRzwogfQ5V8E=
Subject key identifier:   DC:04:B1:7C:6A:6A:3C:0F:7C:CC:FB:74:63:D9:7D:B9:1D:2C:55:45
Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
Certificate issuer:       /CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Certificate serial:       019EBFC8A583C5EF5E1A231BB450D2F513E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
Manifest number:          02BC
Signing time:             Sat 13 Jun 2026 07:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:58 +0000
Files and hashes:         1: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: iP7g7Gu/LIS2bwinu3sWLJJ4mHczmx+0ZyGTxjl36bc=)
                          2: yncM80S6bhOyfcIc9bG9ql3nGdU.roa (hash: CZfd/HDwLXxhrOBjFBJhlZr9g1pP76QO2+w7mQygA1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:a5:83:c5:ef:5e:1a:23:1b:b4:50:d2:f5:13:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779
        Validity
            Not Before: Jun 13 07:00:58 2026 GMT
            Not After : Jun 14 07:00:58 2026 GMT
        Subject: CN=dc04b17c6a6a3c0f7cccfb7463d97db91d2c5545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:62:61:3e:7f:e1:7b:fd:48:25:7e:a0:04:
                    a5:0d:2e:4b:7e:41:6f:eb:ac:3f:3d:ba:d9:0d:11:
                    d7:ad:3b:b3:c7:35:ea:91:ed:7b:31:c8:90:76:b6:
                    1a:25:5d:04:20:80:31:e6:37:f2:25:2c:a8:01:e9:
                    05:ab:2a:03:39:b6:d9:0a:c3:22:2d:ed:91:2c:79:
                    4e:28:57:f5:74:a5:c6:43:7b:1c:17:63:c2:10:9a:
                    e5:0b:1e:b5:fd:22:90:0c:bc:98:1c:0f:b3:9f:8b:
                    99:13:40:97:1c:fc:5f:b6:1b:ba:b3:c8:a4:e0:0d:
                    66:a3:50:51:46:1d:44:64:aa:19:10:d7:28:a6:f9:
                    49:75:c0:2f:51:ab:47:2b:b7:57:31:20:50:c7:83:
                    bf:16:90:3a:27:65:ce:a6:a3:ed:03:3b:d8:b6:e9:
                    39:6c:b1:21:79:44:c4:50:bb:a3:06:32:91:ce:fb:
                    65:66:4b:d7:6d:83:48:52:41:42:48:69:1d:eb:70:
                    a3:cb:b9:e4:1b:0f:7b:44:84:f8:b5:df:3c:25:d7:
                    7f:45:36:83:a2:ec:9c:25:5a:38:c9:49:ab:93:ee:
                    4f:18:0f:65:c8:e8:58:40:71:5c:bf:9b:d9:cc:44:
                    8e:fa:e2:6a:d9:d3:e9:99:46:f2:ba:0c:27:13:ab:
                    77:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:04:B1:7C:6A:6A:3C:0F:7C:CC:FB:74:63:D9:7D:B9:1D:2C:55:45
            X509v3 Authority Key Identifier:
                keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:14:c1:72:a7:bd:c3:0f:8b:63:f6:f8:57:4d:56:b8:91:99:
         80:28:39:3f:e0:88:e3:b3:2e:3a:cb:8d:f2:e4:d9:85:62:0f:
         9c:e0:48:46:18:c5:08:31:84:c5:cc:17:d9:38:44:a1:05:b6:
         c2:85:e1:fa:fa:b4:43:64:6d:63:b1:5b:14:f1:d3:0f:f4:48:
         91:8b:61:88:68:17:1f:3f:62:e8:4f:b5:5c:ab:4d:3c:c1:3b:
         74:ee:40:f3:04:53:33:bf:c1:3d:6c:dd:e1:96:f7:c1:96:5f:
         17:59:88:f8:d5:5f:06:c7:65:88:ec:93:32:e1:54:9f:bf:b7:
         9e:7e:d0:f8:6e:57:b8:a2:14:23:68:7e:4a:e8:ca:4b:68:32:
         4c:b5:db:a3:12:84:7f:12:da:83:54:4c:7d:74:65:5c:ff:40:
         d1:99:ae:21:a4:ab:5b:85:39:37:02:69:f9:4d:bd:5d:60:b6:
         3f:d3:c4:a1:bd:3f:93:bc:52:28:e2:18:3d:cd:96:78:70:18:
         f6:57:f9:c9:f8:f7:14:12:08:19:7e:87:d1:b1:59:83:9c:b1:
         0c:d1:ca:d4:09:a9:e4:67:56:37:ff:f4:34:3f:54:f4:9b:0e:
         01:f4:c0:5a:08:dd:36:59:ee:ba:78:3e:70:18:91:e4:0b:2c:
         61:bf:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:21:11 2026 by rpki-client