Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
File:                     UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json)
Hash identifier:          6GqO8ZLBsYUSOqG2DK+fyfZ02+JSNT7+EKjKqfEseFA=
Subject key identifier:   C4:6A:03:CC:26:69:C3:B3:AF:FC:AE:28:A6:94:DF:99:E4:61:84:41
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Certificate issuer:       /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial:       019EBE108C853EBCF13F8C6CF00CF51CA801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
Manifest number:          0AD5
Signing time:             Fri 12 Jun 2026 23:00:15 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:15 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:15 +0000
Files and hashes:         1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=)
                          2: 6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa (hash: z38nmLbA27NPlhWOJNNoq+Tpqv3KWZDwtJ61CNlRP7U=)
                          3: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=)
                          4: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=)
                          5: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=)
                          6: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=)
                          7: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=)
                          8: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: wc2drjSbTR3CVPDMLzPgxci1q97+7S9t4Box+uzrHrk=)
                          9: X-k71aDoZWtFtR_cnu9r97seWXY.asa (hash: lw8Nl/kqTmv0YBXcCPnKH/oG1mGI+Wcg8DdG5SlWra4=)
                          10: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=)
                          11: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=)
                          12: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=)
                          13: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:8c:85:3e:bc:f1:3f:8c:6c:f0:0c:f5:1c:a8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
        Validity
            Not Before: Jun 12 23:00:15 2026 GMT
            Not After : Jun 13 23:00:15 2026 GMT
        Subject: CN=c46a03cc2669c3b3affcae28a694df99e4618441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a5:f2:33:37:47:52:06:bf:87:f1:26:aa:d6:
                    1a:51:af:cd:9d:8f:79:0f:8c:74:6f:86:c5:dc:3a:
                    91:4c:32:83:f9:38:82:38:d9:e2:4f:1c:61:98:15:
                    ab:b0:6a:93:11:dd:ab:aa:f3:89:90:f3:94:cc:c1:
                    28:dc:a4:ed:25:a7:99:8d:a6:18:7c:49:db:c5:5a:
                    f8:7c:7e:86:2e:dc:a0:f0:3e:15:72:1d:a0:6c:bb:
                    1b:12:83:e3:8c:e8:c8:7a:8e:00:39:73:15:d8:e2:
                    2b:b0:95:2b:60:90:8b:e1:f2:01:2f:d5:c7:e8:c5:
                    71:f4:0d:31:d8:ba:7a:79:cb:5a:21:d1:5b:18:38:
                    2b:2c:18:33:82:3a:53:12:3f:51:e0:fd:3f:e5:f0:
                    76:48:d3:08:0a:08:38:ec:38:0b:aa:95:55:5a:c8:
                    b4:11:27:85:4e:2a:0d:24:f9:12:46:77:72:e3:61:
                    31:b7:b8:b1:44:90:73:f2:2f:95:ec:a8:04:6c:12:
                    70:1c:e0:21:b0:52:b8:64:77:86:6b:94:28:de:a9:
                    d3:7c:9c:19:c5:a2:0c:b1:6a:4f:6b:01:9d:26:c5:
                    aa:67:7d:17:d1:98:e2:31:c4:40:88:f5:73:40:28:
                    52:88:69:e6:c3:bb:9c:e5:5c:4e:8f:b6:6e:0d:b5:
                    37:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6A:03:CC:26:69:C3:B3:AF:FC:AE:28:A6:94:DF:99:E4:61:84:41
            X509v3 Authority Key Identifier:
                keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:02:2b:ef:18:2c:68:c3:28:76:5b:9d:a1:9f:76:81:96:dd:
         20:4c:96:42:22:a3:fe:ec:08:dd:c0:69:44:1f:fa:be:ce:28:
         99:b7:45:2d:6e:cb:7b:6c:b2:c6:8b:a0:ae:4d:02:40:47:b7:
         05:92:65:af:4b:8a:2b:3f:a8:0e:6c:43:be:73:c7:eb:cb:ec:
         ca:39:ad:f6:d7:07:bd:3e:48:0f:10:99:d3:16:70:c6:f9:9f:
         4d:8c:d6:2f:13:c5:a2:52:05:04:d3:00:ae:05:62:a0:f5:37:
         ab:93:95:35:da:8d:35:cd:82:5f:e7:ca:6c:2c:c1:e4:15:98:
         96:73:de:5b:ad:5d:3d:a8:e3:8a:a1:0b:bf:73:64:37:45:bf:
         dc:ff:d7:5f:64:83:78:3a:6e:c6:fd:52:34:e1:92:6c:e6:1c:
         3c:a2:64:f6:fc:29:5d:9e:4b:9f:ae:e2:39:3e:a4:4e:dd:42:
         43:b0:0c:a7:36:e5:9a:30:f6:b0:b4:d4:58:6f:9c:77:62:b3:
         a4:bb:b2:6e:1b:2b:47:e7:6f:b7:ef:82:a0:12:d0:94:76:7f:
         7c:73:ae:b2:e2:20:72:1f:e0:60:a0:f8:55:23:ae:8c:91:46:
         b0:26:d9:7b:b1:2c:d6:73:31:db:72:fe:80:a4:1f:80:18:c8:
         3d:0d:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:01:21 2026 by rpki-client