Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
File:                     UeY89ghzETR_MU8k4mlsf2zqbXI.mft (raw, json)
Hash identifier:          +RZ10KBQaO7gDe+B7qw1IKTNhxufXOZgwNDoQSQXmdA=
Subject key identifier:   01:9A:E1:D0:72:FE:F4:86:11:CA:48:CA:57:6D:9E:36:66:A3:25:96
Authority key identifier: 51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72
Certificate issuer:       /CN=51e63cf6087311347f314f24e2696c7f6cea6d72
Certificate serial:       019EBF5A2AA51585B61F1D348F2ED6640E3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
Manifest number:          0204
Signing time:             Sat 13 Jun 2026 05:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:17 +0000
Files and hashes:         1: 64cOQxiZnrejgF_yLbuSNNh-5DY.asa (hash: /CmbqsnAzo+sIy4VN1xw/guWwGwOsWmQxl16cZjywCU=)
                          2: UeY89ghzETR_MU8k4mlsf2zqbXI.crl (hash: 2HAsvj3/9c46AjsFxhA90BmGJGJjEtQz0W1ofqSLOBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:2a:a5:15:85:b6:1f:1d:34:8f:2e:d6:64:0e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e63cf6087311347f314f24e2696c7f6cea6d72
        Validity
            Not Before: Jun 13 05:00:17 2026 GMT
            Not After : Jun 14 05:00:17 2026 GMT
        Subject: CN=019ae1d072fef48611ca48ca576d9e3666a32596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:6a:f8:0d:1f:ac:3e:ed:56:25:00:63:02:
                    4b:ab:77:3a:6f:28:cd:99:03:c8:47:cb:7f:10:f2:
                    1a:22:a6:e0:e0:85:ac:08:3d:ec:51:0c:80:39:c8:
                    7c:ab:4f:bf:6e:fe:3c:c0:d6:f6:1f:d2:4d:e0:14:
                    9b:20:30:2e:dc:78:18:ca:de:f1:26:16:47:b1:b2:
                    eb:bb:33:51:7f:23:d7:98:98:fd:b2:04:e6:10:0e:
                    7e:69:17:54:a4:a0:85:de:7d:ce:9f:65:a6:bf:44:
                    3d:b9:c4:85:ae:f4:4b:2d:15:6e:f5:52:e1:c8:de:
                    c6:bf:b4:4b:44:7c:93:e7:a2:51:08:e4:ac:bd:03:
                    5c:b2:9d:7f:f4:3a:63:4a:f4:79:e6:c2:c8:d7:c9:
                    aa:da:82:31:0b:06:97:ed:43:29:0c:da:f0:8c:9a:
                    be:4b:0d:c2:ec:4d:e8:f5:e8:e8:b0:77:2a:72:c8:
                    37:d8:98:30:78:4a:47:9c:b4:38:fb:a9:11:f5:7f:
                    1b:50:ba:b6:61:0d:d2:29:9b:8b:de:28:8b:47:3d:
                    1f:1d:ad:95:9a:92:da:f2:3d:ed:c6:66:c2:f1:25:
                    68:d8:71:bf:0c:cd:bd:4c:f5:30:be:a4:a2:b6:a9:
                    9d:39:9d:12:75:6a:bd:4f:5e:ad:89:19:93:dc:75:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9A:E1:D0:72:FE:F4:86:11:CA:48:CA:57:6D:9E:36:66:A3:25:96
            X509v3 Authority Key Identifier:
                keyid:51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:5c:04:83:e6:ed:e4:d0:91:08:76:07:28:57:8c:18:2e:a4:
         36:ac:e1:46:c5:bf:e4:be:38:2d:9a:55:8a:40:ad:97:40:d3:
         9f:46:d2:64:f3:90:99:93:a6:80:24:60:6a:54:02:2a:c5:1a:
         8e:3c:b7:54:85:d3:62:69:2b:db:8e:f0:e2:a6:b2:0c:ef:1a:
         ec:86:90:2f:26:1e:0c:bf:37:f0:5b:68:42:71:1f:4f:59:54:
         e1:26:63:38:b7:ca:2e:6f:e1:e8:ab:a1:dc:49:2f:05:b2:92:
         67:65:bc:ec:e1:09:d2:08:11:9c:9f:12:ea:4f:af:e9:28:26:
         6e:36:45:4d:04:c9:95:fb:73:d2:67:a0:15:53:49:2e:ce:e0:
         8b:f8:0c:c0:2c:c7:17:be:b4:c6:c2:66:74:b2:16:e4:77:a0:
         fa:83:e6:85:20:8f:7f:41:52:99:4c:59:1c:06:ac:fd:a4:fc:
         66:82:26:31:9f:c5:d2:ec:44:c1:f7:9c:21:a8:07:2f:35:f2:
         06:e7:b3:63:2f:71:f5:b7:c7:8a:a1:c3:1b:b5:ba:a4:4f:97:
         15:c4:0a:dd:10:60:8c:85:b7:5f:aa:58:dd:54:78:fe:5f:38:
         ed:e0:b6:a4:79:9c:c6:36:cb:ce:1c:5f:70:a4:77:54:ac:01:
         ec:e7:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:10 2026 by rpki-client