Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File:                     UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier:          6zGiw+iUHnpLYqCCgMGQ8Ls3NaQ6KJBWF8xkIfQfsJQ=
Subject key identifier:   7F:83:0D:05:3B:DC:FE:88:1F:E4:05:FB:A0:1A:60:3A:CC:DC:E8:B8
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer:       /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial:       019ED4991FAC73BA02B85FCF451DBB467F9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number:          142F
Signing time:             Wed 17 Jun 2026 08:01:05 +0000
Manifest this update:     Wed 17 Jun 2026 08:01:05 +0000
Manifest next update:     Thu 18 Jun 2026 08:01:05 +0000
Files and hashes:         1: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: EjDZc9pusCcROlJ+og0RgkEjn9/HTo417flAMKLyL8c=)
                          2: ldVLo-eNAW-W-3vclMcqBGxufHM.roa (hash: 3oSvQLb4YGLMfy8gAiD/iZGExJiz2TXf3tCjeUQNbTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:99:1f:ac:73:ba:02:b8:5f:cf:45:1d:bb:46:7f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52386e520478e625be1d6282d216b05912f83874
        Validity
            Not Before: Jun 17 08:01:05 2026 GMT
            Not After : Jun 18 08:01:05 2026 GMT
        Subject: CN=7f830d053bdcfe881fe405fba01a603accdce8b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:30:12:d1:34:ce:42:44:64:99:f5:5f:ef:
                    72:56:4e:6a:ed:9c:5d:44:a1:a3:cc:2e:86:fc:1f:
                    13:f2:ff:a9:5a:1b:d0:d0:ce:81:ae:95:89:3d:3f:
                    70:a9:dd:fb:ef:f0:64:b4:4f:9c:82:05:bf:a7:67:
                    da:91:0e:57:6e:b8:44:b0:9d:b4:d9:18:b4:5d:3f:
                    eb:9b:38:3e:d3:8d:fe:c0:81:2f:92:d7:4c:21:33:
                    1b:4b:21:07:c4:ea:ab:59:8d:ce:9f:3f:df:a1:ff:
                    b6:96:8b:a1:69:c6:fa:ad:a1:9b:b8:18:cd:98:0a:
                    7a:14:9a:81:d0:c7:b7:31:f5:16:2b:c2:a2:ab:ee:
                    c7:51:91:92:ca:30:68:7f:3d:8e:8d:f5:75:b3:47:
                    d7:a3:03:60:c9:7f:eb:20:2d:aa:55:ec:8b:83:70:
                    4c:25:36:33:12:a6:d9:b1:7e:dc:11:86:14:e3:d7:
                    b0:96:dd:cf:b4:3e:b5:9c:fa:cf:9d:e3:a0:4c:bc:
                    b9:8b:1e:c4:88:3b:ba:8d:37:b5:36:2e:76:f7:a8:
                    90:60:8e:0f:b2:4a:49:99:31:69:2c:4b:2b:02:e8:
                    7e:0d:dd:8c:3f:22:97:b8:6c:58:f7:3e:3f:4a:43:
                    eb:40:46:d2:5a:cb:7e:35:0d:6f:24:f7:07:02:e5:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:83:0D:05:3B:DC:FE:88:1F:E4:05:FB:A0:1A:60:3A:CC:DC:E8:B8
            X509v3 Authority Key Identifier:
                keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:fd:48:8f:fc:b7:0c:49:83:50:f6:2c:01:c6:af:36:ec:61:
         26:b0:37:9b:f9:82:1f:ec:25:79:09:be:33:a7:a5:46:ef:23:
         c0:51:b4:61:da:88:f6:8a:3f:cd:13:3a:39:76:42:aa:7b:ef:
         78:2f:11:cc:fa:bc:36:86:55:52:2a:c2:73:07:ce:bc:b8:81:
         4c:32:11:65:3b:eb:c5:09:f5:40:90:20:dd:57:00:ae:fc:4d:
         b5:f2:84:00:d6:f9:48:1a:c4:09:65:b8:3b:87:67:0e:6b:a5:
         f1:33:80:ef:d7:b7:e2:65:a1:da:41:e3:70:4c:7c:b4:14:80:
         0f:35:3d:51:88:3e:bd:05:0e:c5:e2:d5:94:f4:05:6b:31:7e:
         c2:03:c4:dd:c5:01:f4:9b:1e:54:6c:d0:10:b2:65:4f:42:2b:
         e4:c5:e0:50:ac:e1:74:1b:f0:aa:65:e3:c0:21:c6:5d:d5:b4:
         1b:ef:55:92:3d:bb:49:53:ab:31:e9:2c:2d:42:77:26:e4:2c:
         ee:3b:ce:8f:ea:2a:d8:91:b6:2f:b4:0d:05:52:1d:05:1f:d3:
         63:c7:29:7b:bf:87:b4:0b:fe:2c:17:b8:18:82:ae:6e:6d:d6:
         6a:45:d3:23:26:91:32:f5:13:ce:5a:70:c7:d7:38:e6:f3:97:
         6b:fc:33:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:36:08 2026 by rpki-client