Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File:                     1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier:          xKoGXiGnd547nGncxyTU1RjHsGxe8DYQUzaK19NSyQY=
Subject key identifier:   FE:15:27:4F:AE:11:08:ED:75:65:33:34:A9:D5:61:E7:90:7F:6F:EC
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer:       /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial:       019EBF5A3A29339A69AC7B1CA1F344257395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number:          0D42
Signing time:             Sat 13 Jun 2026 05:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:21 +0000
Files and hashes:         1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: wRsVOxnahZL4iby3PJerZrhqY368m6jl0WyZBfQRBR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:3a:29:33:9a:69:ac:7b:1c:a1:f3:44:25:73:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
        Validity
            Not Before: Jun 13 05:00:21 2026 GMT
            Not After : Jun 14 05:00:21 2026 GMT
        Subject: CN=fe15274fae1108ed75653334a9d561e7907f6fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:da:2f:dd:63:92:9f:b3:4b:35:d8:a3:d4:6e:
                    04:23:82:ce:43:4b:50:f0:fd:4c:66:b5:09:65:c1:
                    de:12:e1:73:cd:7e:31:55:cf:4a:e8:f3:35:0b:54:
                    7f:7c:9c:85:9e:bb:32:98:b9:01:23:92:58:08:63:
                    1a:24:09:50:65:18:ac:aa:92:33:5b:48:8c:2a:ef:
                    f5:45:82:1e:1e:3d:be:d4:85:14:ad:68:85:a6:7c:
                    eb:f7:e0:74:3d:62:f4:8c:52:70:41:73:69:12:fe:
                    34:a6:d3:78:12:a6:e4:80:4f:06:97:89:3f:d8:41:
                    83:44:b2:38:8c:46:0b:6d:70:88:35:d5:73:cd:73:
                    af:12:05:5d:3a:f3:2c:92:9f:c8:ea:ef:35:a7:13:
                    b4:af:69:f0:ca:46:a7:3b:11:c8:53:ac:47:3a:6f:
                    78:18:4e:cc:09:68:d4:f8:0c:4e:cc:9f:6a:31:18:
                    11:e3:9b:9f:bf:a9:53:c9:56:41:79:72:17:29:7a:
                    37:a8:f1:49:b2:c9:d1:71:36:29:a9:4f:13:6e:8f:
                    35:f6:d2:2d:a1:a6:14:11:d4:fc:73:10:13:ae:13:
                    0c:2b:62:dc:22:f9:4c:4a:ec:00:6e:92:2e:3f:9a:
                    bc:b3:40:00:36:df:91:0a:84:30:24:df:c9:3b:26:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:15:27:4F:AE:11:08:ED:75:65:33:34:A9:D5:61:E7:90:7F:6F:EC
            X509v3 Authority Key Identifier:
                keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:a4:e9:c2:cf:d2:85:ca:c5:85:56:e2:b1:b6:78:5e:e7:
         dc:47:fb:44:44:1f:1f:71:4f:bf:2c:37:05:3a:03:5a:7f:63:
         96:6c:3a:b3:f2:c9:3d:8e:3a:8d:c3:8d:c9:df:c6:b5:e7:aa:
         ef:f1:93:5a:88:83:8f:b6:50:9d:d5:c0:de:49:70:90:c3:50:
         43:b7:5f:4b:ba:08:7d:ee:db:b5:fb:a6:c9:b3:d4:96:1b:77:
         8a:4b:b0:f1:3b:18:bc:e9:0c:c9:50:ec:c8:4f:0f:7d:7d:7f:
         28:4f:de:19:1b:af:6d:b0:e8:5e:8b:a1:16:b2:20:80:3c:82:
         a6:35:22:eb:c4:50:88:e9:f5:bb:c6:44:0c:d1:a0:59:80:b1:
         c8:19:e2:5c:65:15:77:4b:71:5d:1e:d0:da:f3:bf:bb:69:3b:
         52:8e:1d:70:ee:fb:68:6a:e5:4f:11:32:11:99:94:f6:46:1c:
         4c:57:71:81:65:28:42:70:da:28:8f:e6:b7:e2:06:51:66:4c:
         b0:0b:fc:60:24:fd:99:f5:af:81:80:2e:af:ee:8c:1b:7c:77:
         0d:09:06:7e:f3:e5:17:24:2e:58:0b:9d:95:1b:36:5b:b9:c3:
         0f:9a:56:f7:f4:b4:f7:32:e1:c1:e5:61:89:60:15:ea:57:42:
         81:c1:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:31 2026 by rpki-client