Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
File:                     uakKhVIqpjnVeIL_2X2xpN2BELg.mft (raw, json)
Hash identifier:          dpDGtuVJBhnHT3vDKeHYIPx5yA76oQRATykPoa1B0tQ=
Subject key identifier:   49:FC:C4:5F:30:F8:8F:44:E9:58:10:1C:C4:AE:0D:F0:F2:E6:FB:98
Authority key identifier: B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
Certificate issuer:       /CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Certificate serial:       019EC11199BC2DF26965CF3CA8B3FFE54B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
Manifest number:          022B
Signing time:             Sat 13 Jun 2026 13:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:16 +0000
Files and hashes:         1: CsUMxPPZn7BWvRnMzKtwzumQlaI.roa (hash: s5cU5GsIZAY3fgBBTrdExxW/NI8apbM5B4zmDqtjvSE=)
                          2: q-jGore8m3Vj_5C7Ap3AXDg-4xE.asa (hash: ZNqsv7+pLU9fdFw+/1KeKKfY+X5+aMAfnSdQ+ZxMr4c=)
                          3: uakKhVIqpjnVeIL_2X2xpN2BELg.crl (hash: pAbu5AdeonPnZ5+Iqfj8ePONHSWYXtQdZ787fborMG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:99:bc:2d:f2:69:65:cf:3c:a8:b3:ff:e5:4b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
        Validity
            Not Before: Jun 13 13:00:16 2026 GMT
            Not After : Jun 14 13:00:16 2026 GMT
        Subject: CN=49fcc45f30f88f44e958101cc4ae0df0f2e6fb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0a:83:17:8a:62:cc:e2:76:2f:4f:42:1e:93:
                    8f:b8:d5:93:26:e1:57:70:96:92:24:5e:9f:4a:e0:
                    0f:02:a1:5d:84:99:8d:92:68:92:44:6f:b1:7f:bf:
                    de:55:ca:84:89:60:7d:64:7e:20:3a:84:92:3c:18:
                    8c:c8:0e:17:a5:21:49:ac:89:6e:d3:d6:fd:5b:f2:
                    20:67:75:49:f3:14:7a:e9:57:3e:66:97:ad:55:31:
                    75:86:1b:6f:ce:f4:65:8a:d9:65:27:6c:c7:95:25:
                    b9:5b:1b:a8:a9:e7:c3:c9:8e:12:8a:56:7d:d3:81:
                    fd:5c:47:9b:66:c4:ca:fa:73:71:32:e3:9a:e6:3f:
                    0b:b8:02:23:00:77:23:f9:fa:fe:11:09:52:ba:62:
                    9b:e8:56:81:ba:c8:7e:e1:9b:f6:d2:cd:d4:c6:23:
                    91:c0:35:00:7d:de:b2:5b:05:64:6e:d9:a9:c1:69:
                    ab:3a:5b:50:8d:25:2e:0e:f1:23:27:fc:4c:05:18:
                    a5:ae:1f:16:cf:90:58:17:88:95:08:14:62:64:a8:
                    49:59:cd:1e:54:eb:e4:79:7e:6c:e3:84:82:18:32:
                    34:81:3f:bf:89:eb:5b:69:ec:a1:6d:58:dc:e5:1b:
                    ac:b0:d5:ef:a8:a8:7d:21:9f:9b:22:28:cf:ad:24:
                    d8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FC:C4:5F:30:F8:8F:44:E9:58:10:1C:C4:AE:0D:F0:F2:E6:FB:98
            X509v3 Authority Key Identifier:
                keyid:B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:73:c4:68:73:9f:8b:9c:99:58:fe:66:9e:50:24:3e:ea:
         a6:e8:7b:f3:e0:64:ea:77:9b:f1:94:fc:d3:d7:eb:63:d4:d2:
         07:44:db:c4:59:93:34:a6:09:fd:fc:5d:4d:af:8d:1c:6b:ec:
         35:1b:ea:a6:4f:cc:e1:3e:14:ab:ab:97:77:91:6d:0e:77:0f:
         0f:2d:69:bb:bc:a2:2c:78:d0:4a:e6:d6:25:98:9d:fc:a6:53:
         8e:99:ae:ca:b7:32:65:75:2d:1e:f7:75:b9:29:a7:0c:fd:5b:
         b2:d5:42:90:b8:d3:cc:7e:f9:6f:94:c8:5e:1a:03:68:b4:3f:
         8a:23:f4:39:db:c6:f3:5c:5a:52:c1:58:07:12:5f:28:b4:10:
         38:df:43:47:79:be:6b:38:ad:4d:2b:59:91:b2:79:bd:31:ad:
         6b:9e:c3:6a:c8:c8:4b:5b:7c:ce:e0:b0:8a:ea:ea:e5:28:6b:
         bd:d9:a4:0b:e1:14:08:05:56:c3:8c:99:b1:a9:c9:27:fb:1b:
         32:89:51:e0:79:a4:10:4c:ee:95:de:fb:d1:b4:64:48:fd:b0:
         8e:76:69:06:db:5e:fa:5c:b4:08:cd:26:d1:59:50:b4:ed:e5:
         12:a1:ea:95:7a:ac:9a:a9:74:9b:4f:1d:0e:70:55:ee:c8:4d:
         f6:40:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:37:35 2026 by rpki-client