Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File:                     UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier:          FkIfIk6igTX+mVTYNCe0tU9A7aRnCfiSQlDkUOvklYY=
Subject key identifier:   8E:62:AA:79:23:F6:DC:12:94:F1:1F:1B:48:C1:DB:70:2D:CC:5C:E4
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer:       /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial:       019EBDA3259D7116DBFD7904DD9239CBEA30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number:          06FE
Signing time:             Fri 12 Jun 2026 21:00:46 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:46 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:46 +0000
Files and hashes:         1: 84SPRa3_ewxAnHZXEwBV1kLi3VM.roa (hash: xgIumFcFLchK1z/1Csr0/oD3z8aKLtyk1tFqPTQqxyc=)
                          2: B27nWL7f9vpF233InTtbaWdT1gY.roa (hash: K0asGHISIlJb0z9vg2XL1HxPcsZDl9Isvqzrusz0DAM=)
                          3: HdV5DSl350h-lbh-TN4zh4FfqZg.roa (hash: Tf/ZSSv57NTvJyODzYy+ZLfHUFt2upVkz6yStWywhz8=)
                          4: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: RhmjmaQ4jzdN8az6UNpC3qI49Jnc1KhVLGGVcOGCoUQ=)
                          5: _pMAzQKRKR13xl3uGDGCl2hCPIo.roa (hash: 5qQNZWBbvk2jxeJhrao+q24FJuEwboPGan3bLmujgOM=)
                          6: hCxkK3tHuqUrY0c51_Pu1X-lD1E.roa (hash: 2q6gI5yUFT+GtMB/2xyZdJMaVjKX7qKHcOOGGZrqRFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a3:25:9d:71:16:db:fd:79:04:dd:92:39:cb:ea:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
        Validity
            Not Before: Jun 12 21:00:46 2026 GMT
            Not After : Jun 13 21:00:46 2026 GMT
        Subject: CN=8e62aa7923f6dc1294f11f1b48c1db702dcc5ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:67:d2:66:66:17:22:0a:28:e1:c9:f8:d6:
                    f2:33:e2:75:8f:f0:e5:cb:1c:b6:cf:5e:73:94:ca:
                    a0:7e:e8:26:06:4b:01:06:68:46:90:a4:59:43:fb:
                    ae:98:f5:66:73:88:35:6c:c1:6d:59:0c:c8:f8:ab:
                    64:ed:d5:e0:33:9c:cf:f3:8c:5d:6a:09:d1:42:e4:
                    e8:7d:19:57:5d:97:71:1a:59:51:eb:05:bc:81:f8:
                    da:6b:9a:ad:65:87:50:62:81:fd:8f:dc:87:13:c3:
                    03:ff:45:59:a1:c9:37:16:f1:02:fc:f0:63:b5:42:
                    16:d4:c2:43:b4:80:32:0f:87:5a:18:49:2b:70:6e:
                    9e:3e:0a:6a:9e:88:aa:98:32:20:2f:ad:83:28:f2:
                    cd:ca:2a:24:12:80:27:32:78:3c:09:bf:e3:f8:b6:
                    07:e6:7d:c3:15:df:ef:c0:d2:ab:5c:0d:9c:32:77:
                    4a:ac:6d:6f:0d:57:ec:1e:69:9e:05:68:43:fc:f5:
                    79:67:7a:07:de:99:95:d0:7b:3f:a9:9d:f9:22:0e:
                    27:5c:52:48:7a:76:3b:2c:90:5d:12:60:03:a7:67:
                    25:ad:56:c5:ef:4b:bc:c8:fa:9d:06:40:2b:11:eb:
                    22:1c:98:c3:63:4d:66:70:16:eb:7b:c8:47:32:1d:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:62:AA:79:23:F6:DC:12:94:F1:1F:1B:48:C1:DB:70:2D:CC:5C:E4
            X509v3 Authority Key Identifier:
                keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c4:76:ec:2c:ed:d8:85:66:08:72:dd:96:e9:da:9c:44:f4:
         47:61:98:f5:d6:37:06:7c:37:81:0f:96:bf:8e:d8:46:f1:20:
         5c:03:cd:b4:d8:11:37:4a:ff:92:35:c0:1e:2b:f9:3a:4c:fd:
         8a:9b:34:bf:6e:70:6a:63:a9:97:a1:b4:19:69:5f:d1:63:bc:
         02:16:3a:37:21:e5:36:4f:08:0b:03:57:6b:3b:7c:4e:84:0e:
         0a:0f:2c:63:c9:60:d0:de:9a:46:6b:2f:d8:48:54:f9:41:00:
         f0:84:45:90:b9:93:bd:29:39:c4:86:0c:97:45:c4:d7:59:26:
         a7:82:39:d3:65:39:d8:44:80:0a:7d:61:85:cf:63:75:4c:a4:
         fb:eb:06:7f:4f:be:61:74:0d:a9:7c:e2:a8:10:8a:b7:1f:a0:
         23:e9:2f:df:a3:e6:6e:a0:ce:b2:6b:d8:ed:48:40:37:4c:12:
         86:2b:07:e0:bb:30:63:c4:67:a1:c8:fe:d0:b7:ac:e3:1f:a6:
         90:d2:7b:49:6f:b4:65:3e:9c:70:63:7f:c5:6f:09:e7:e4:91:
         12:98:c8:b9:92:29:2e:e0:74:d7:fc:79:b3:36:6c:eb:d1:eb:
         a5:cc:45:e5:c4:6f:aa:f9:92:6e:77:f3:1a:15:b8:a1:dd:42:
         a3:53:0f:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ69oyWdcRbb/XkE3ZI5y+owMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1
YjEwNjgwHhcNMjYwNjEyMjEwMDQ2WhcNMjYwNjEzMjEwMDQ2WjAzMTEwLwYDVQQD
Eyg4ZTYyYWE3OTIzZjZkYzEyOTRmMTFmMWI0OGMxZGI3MDJkY2M1Y2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyRn0mZmFyIKKOHJ+NbyM+J1j/Dl
yxy2z15zlMqgfugmBksBBmhGkKRZQ/uumPVmc4g1bMFtWQzI+Ktk7dXgM5zP84xd
agnRQuTofRlXXZdxGllR6wW8gfjaa5qtZYdQYoH9j9yHE8MD/0VZock3FvEC/PBj
tUIW1MJDtIAyD4daGEkrcG6ePgpqnoiqmDIgL62DKPLNyiokEoAnMng8Cb/j+LYH
5n3DFd/vwNKrXA2cMndKrG1vDVfsHmmeBWhD/PV5Z3oH3pmV0Hs/qZ35Ig4nXFJI
enY7LJBdEmADp2clrVbF70u8yPqdBkArEesiHJjDY01mcBbre8hHMh3zpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5iqnkj9twSlPEfG0jB23AtzFzkMB8GA1UdIwQY
MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt
MGY1ZjA5YjJlYjE0LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0
LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocR27Czt
2IVmCHLdlunanET0R2GY9dY3Bnw3gQ+Wv47YRvEgXAPNtNgRN0r/kjXAHiv5Okz9
ips0v25wamOpl6G0GWlf0WO8AhY6NyHlNk8ICwNXazt8ToQOCg8sY8lg0N6aRmsv
2EhU+UEA8IRFkLmTvSk5xIYMl0XE11kmp4I502U52ESACn1hhc9jdUyk++sGf0++
YXQNqXziqBCKtx+gI+kv36PmbqDOsmvY7UhAN0wShisH4LswY8Rnocj+0Les4x+m
kNJ7SW+0ZT6ccGN/xW8J5+SREpjIuZIpLuB01/x5szZs69HrpcxF5cRvqvmSbnfz
GhW4od1Co1MPRw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:28 2026 by rpki-client