Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File:                     1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier:          ZlcqvfXN6xS3jRVAE00Qa4wulFGogUeDmdi2HTmRvso=
Subject key identifier:   A1:F2:B7:BD:3C:37:7F:FD:7D:91:93:98:C6:33:2F:A1:DF:DB:14:3F
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer:       /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial:       019EC1B68C0F7B06B2CE49F061934B81E052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number:          153F
Signing time:             Sat 13 Jun 2026 16:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:26 +0000
Files and hashes:         1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: RDOhOTFb2Fgj0tuzf/N9YGJFl40JRqP10G3W8sacktY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:8c:0f:7b:06:b2:ce:49:f0:61:93:4b:81:e0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
        Validity
            Not Before: Jun 13 16:00:26 2026 GMT
            Not After : Jun 14 16:00:26 2026 GMT
        Subject: CN=a1f2b7bd3c377ffd7d919398c6332fa1dfdb143f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:9e:a3:04:5b:a4:fd:2c:43:56:13:0f:fd:
                    b8:0b:02:11:7a:a7:fa:7a:94:e8:87:f5:70:1f:27:
                    d0:99:ef:0d:89:26:ad:25:63:69:ca:8d:d1:32:5b:
                    ad:40:31:97:a5:1b:9f:bd:eb:6a:4d:44:0a:90:aa:
                    62:fe:95:c5:f8:09:80:2b:18:19:1a:18:f5:da:77:
                    49:b8:3c:93:19:73:db:9b:63:a9:72:35:0d:60:7f:
                    78:37:fa:00:78:9e:de:3f:e6:09:05:18:d3:de:fa:
                    0a:35:3b:64:af:f9:a8:8a:35:c0:b4:00:c1:01:a2:
                    93:27:8a:67:66:29:4e:1d:6d:c4:ab:f1:d6:83:0f:
                    0a:fe:0d:dc:94:85:c0:65:88:2d:0d:de:3f:d8:cd:
                    98:0a:5c:46:d2:c2:c5:15:de:2f:77:c9:4e:1a:2f:
                    21:5c:10:41:7a:12:34:40:bf:50:a2:96:7a:d2:de:
                    8d:78:d6:be:a3:d8:3f:8d:2a:6f:c5:e6:d8:08:07:
                    68:9b:cf:4b:5b:78:f9:f3:5f:86:08:e6:50:78:44:
                    cc:62:e9:39:e0:4e:8d:7c:ff:24:a0:1b:4e:a4:b4:
                    b6:5a:80:f4:ca:a8:19:85:02:a1:31:4a:04:5b:6c:
                    b8:ca:18:0d:41:86:4b:1b:57:13:89:3f:fa:8c:26:
                    66:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F2:B7:BD:3C:37:7F:FD:7D:91:93:98:C6:33:2F:A1:DF:DB:14:3F
            X509v3 Authority Key Identifier:
                keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:be:30:3a:7b:0d:b9:8c:42:0f:77:58:74:b4:74:f6:17:40:
         3c:03:c1:9b:5d:2b:8c:43:a4:52:80:82:7e:7b:ba:b0:2c:9b:
         2c:50:70:1d:f8:f9:92:17:2d:0e:6e:6c:06:7c:7b:a8:24:c8:
         31:fa:84:a9:6f:94:19:7b:72:ed:cc:4f:4e:c9:bb:36:be:fc:
         6f:19:cd:27:46:9f:38:dc:81:79:b8:d4:bc:73:51:2e:48:38:
         39:21:86:b0:ec:be:14:e8:3f:3b:55:fc:83:23:8b:bf:e2:2d:
         67:08:c1:9a:0d:4e:a4:09:9a:9c:59:c4:00:2d:ac:52:a0:50:
         da:8f:80:ed:b2:f5:74:c6:cd:3a:90:ff:97:11:7a:f7:77:73:
         78:b8:29:58:68:0b:ae:01:63:6a:5c:3a:c5:ee:60:be:64:4a:
         f0:fa:1b:dc:8d:66:5d:4a:17:39:d6:17:b9:8d:5d:b0:b0:17:
         da:3e:99:78:e1:7f:bd:ce:69:3e:0b:e9:b8:1c:8d:ce:4c:de:
         ea:ef:de:a4:f8:b3:c1:0f:16:f9:c2:fc:b1:01:eb:38:5c:70:
         c1:71:26:7b:01:a1:5f:53:de:9d:ca:f5:4d:b0:7a:81:87:21:
         ca:16:9c:60:18:8e:e0:12:ce:3c:9c:37:c2:04:a7:40:32:37:
         74:ab:e9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:43:29 2026 by rpki-client