Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
File:                     UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json)
Hash identifier:          r75HuTFqRycm7+lJ2hTZ/90x8S50ou4WneQg4F99gmE=
Subject key identifier:   A9:DC:0D:B7:0D:59:BF:4D:85:A4:15:3D:57:88:C2:57:EF:78:9F:3F
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Certificate issuer:       /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial:       019EBFFF1E75B6386B6BB73A2F7661B2E425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
Manifest number:          0AD6
Signing time:             Sat 13 Jun 2026 08:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:28 +0000
Files and hashes:         1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=)
                          2: 6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa (hash: z38nmLbA27NPlhWOJNNoq+Tpqv3KWZDwtJ61CNlRP7U=)
                          3: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=)
                          4: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=)
                          5: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=)
                          6: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=)
                          7: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=)
                          8: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: JdYSWThtQ9tF8rlMj8AkMfN1UBQprkyALfoYtYRD+hE=)
                          9: X-k71aDoZWtFtR_cnu9r97seWXY.asa (hash: lw8Nl/kqTmv0YBXcCPnKH/oG1mGI+Wcg8DdG5SlWra4=)
                          10: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=)
                          11: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=)
                          12: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=)
                          13: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:1e:75:b6:38:6b:6b:b7:3a:2f:76:61:b2:e4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
        Validity
            Not Before: Jun 13 08:00:28 2026 GMT
            Not After : Jun 14 08:00:28 2026 GMT
        Subject: CN=a9dc0db70d59bf4d85a4153d5788c257ef789f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:c1:16:13:7f:b9:55:ef:c2:36:e8:56:b8:
                    b4:ea:d4:f0:90:82:b6:84:d9:8c:c8:ee:42:31:39:
                    ce:af:e0:1d:b4:b6:75:2f:12:ed:b5:36:3c:b5:fc:
                    6e:c0:16:b2:45:96:39:2c:bf:9b:ee:66:ff:c5:11:
                    36:f8:7c:ca:8d:0d:be:e9:0c:d9:58:15:ba:a0:ca:
                    97:90:59:32:52:8f:f6:2e:e0:d8:41:02:12:02:a1:
                    f4:0e:e2:20:c0:2e:8d:2d:ab:cc:35:39:b7:21:ac:
                    b6:cc:4b:af:e8:c0:48:50:d7:bb:48:d2:e1:ab:3f:
                    ff:11:76:cc:82:b4:65:8c:de:69:5a:22:e9:66:33:
                    5c:c0:97:10:58:0f:a7:54:18:29:ad:92:65:2d:f7:
                    b0:6a:fe:ed:6d:e3:fa:b8:c5:6c:99:5a:74:06:fd:
                    29:6f:61:54:fe:fb:b9:d3:6d:5f:b7:9b:92:aa:ec:
                    66:fd:0d:3b:8b:8e:32:bf:0a:b9:17:fb:f7:91:04:
                    42:d0:14:87:8a:90:68:b1:07:45:60:b4:75:1f:c2:
                    20:66:9a:dd:ef:a8:58:a5:f7:89:e6:03:27:81:a8:
                    08:d5:34:68:ae:9c:88:ab:7b:8c:0e:0d:f3:75:d2:
                    14:a4:6b:00:ff:82:fd:7e:04:fb:80:a9:dc:60:d4:
                    a3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DC:0D:B7:0D:59:BF:4D:85:A4:15:3D:57:88:C2:57:EF:78:9F:3F
            X509v3 Authority Key Identifier:
                keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b6:c4:e0:67:d8:52:8c:42:91:68:73:5b:ce:80:66:87:4a:
         21:1d:d8:90:c1:90:45:97:bd:f2:43:44:2a:db:31:09:cc:05:
         87:a0:a3:80:46:9c:d9:af:f4:c7:e2:1f:08:71:5d:a3:96:3c:
         73:ad:6a:16:ef:57:e2:40:7c:19:e0:be:71:b0:69:7d:41:96:
         25:f3:4c:5f:0d:1e:65:b8:b6:5e:aa:40:f7:f1:8c:f5:14:27:
         2e:2f:56:a1:62:1d:2b:22:56:ad:51:b3:f1:e4:a8:4e:26:5e:
         e1:8d:1b:d2:49:8a:8c:63:fc:c0:b5:c9:26:e6:40:19:81:00:
         d9:ed:fd:ee:3f:ff:11:0d:1b:e0:4d:21:93:29:94:9f:a0:35:
         12:49:05:4f:00:87:7e:52:42:93:15:b5:e9:5c:45:b5:2a:42:
         1d:ab:83:7f:b2:41:f2:d3:16:27:da:0b:d2:9b:f7:24:d8:18:
         7f:39:b7:47:90:bc:8e:31:a3:a5:95:d3:99:64:f8:84:92:2b:
         52:0d:0b:2d:0f:9c:fe:36:e2:58:c3:bc:e6:8d:65:5c:f6:9c:
         a3:76:c0:3f:ed:dd:bc:ee:8a:a0:5d:a4:06:dc:88:e7:a2:2d:
         32:5c:84:90:fe:e9:26:51:23:0c:6c:0c:64:ee:cf:69:82:13:
         df:10:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:47:00 2026 by rpki-client