Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File:                     UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier:          +nn4ZVIVJEesHHaJeO3zkpIy3xrQsbUcSeJVZcCyiOU=
Subject key identifier:   F8:0A:5E:04:28:5A:C6:9E:DE:3D:84:C6:79:C2:A6:2B:9A:AC:93:64
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer:       /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial:       019ED42AD28F354E132F8C78D3FE8378B1A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number:          0C45
Signing time:             Wed 17 Jun 2026 06:00:36 +0000
Manifest this update:     Wed 17 Jun 2026 06:00:36 +0000
Manifest next update:     Thu 18 Jun 2026 06:00:36 +0000
Files and hashes:         1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: MIa7Dk8fdzvp4As3cgCUWiiXsxTF7JSP4nddKU3z4nk=)
                          2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2a:d2:8f:35:4e:13:2f:8c:78:d3:fe:83:78:b1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
        Validity
            Not Before: Jun 17 06:00:36 2026 GMT
            Not After : Jun 18 06:00:36 2026 GMT
        Subject: CN=f80a5e04285ac69ede3d84c679c2a62b9aac9364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bd:02:58:b6:ca:52:17:75:c0:89:76:7f:99:
                    0f:8c:95:af:55:02:30:d2:9a:2f:10:38:c0:d2:d5:
                    14:7b:f3:ff:a5:ec:4b:9c:bf:45:ca:84:6e:a2:5e:
                    01:81:eb:6e:5e:35:8f:30:c1:94:93:bc:e5:b3:78:
                    72:54:5a:f2:47:fa:a2:45:b8:4d:09:19:a3:30:6e:
                    3e:47:aa:ff:0c:51:c0:ac:28:2d:3d:03:47:85:48:
                    1c:f2:2c:df:32:d5:09:9e:fa:b6:ea:32:d6:10:f5:
                    09:71:ea:68:53:ab:d6:b0:9a:7c:88:34:04:b7:bc:
                    da:46:30:cf:0c:64:42:e9:0c:45:2d:40:cd:a2:ad:
                    7c:03:9a:15:0c:05:18:15:55:8b:a5:94:0b:4c:8e:
                    8d:33:e7:c4:5b:16:62:3e:18:56:99:31:91:c9:4e:
                    c6:41:5e:0c:6d:fe:b3:a9:98:75:0b:37:75:43:b6:
                    72:b5:c4:2e:10:01:17:a4:04:10:ef:58:7a:81:36:
                    11:45:64:15:5a:8e:54:e8:14:f9:0b:53:9c:fa:3d:
                    97:db:ef:fa:7a:90:7e:38:70:26:5f:f8:bd:76:54:
                    42:11:e8:b1:9a:9d:30:b1:e6:e7:64:15:d6:d1:1d:
                    39:33:57:0b:f0:85:10:17:c2:69:7e:41:9d:80:36:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0A:5E:04:28:5A:C6:9E:DE:3D:84:C6:79:C2:A6:2B:9A:AC:93:64
            X509v3 Authority Key Identifier:
                keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:ee:31:4b:ba:8c:58:66:7c:5f:d2:13:90:90:70:13:ab:
         99:50:5c:a5:63:af:b5:99:70:d8:de:0d:1a:f6:ac:65:f9:da:
         71:5f:d0:d9:bf:6e:f2:2f:fb:18:74:14:d9:a8:8d:a1:36:ea:
         22:44:c8:b2:19:16:4a:cd:cc:d9:da:a4:9b:bd:28:91:73:30:
         d5:51:98:15:37:80:f7:47:c6:0a:1f:e3:39:d6:6f:f6:32:0a:
         e7:75:51:ba:ba:44:a8:3a:fa:ac:3a:2d:ed:cc:24:d9:2f:d9:
         35:2c:c7:f7:56:f7:f1:3a:9d:52:3a:43:a2:24:31:c5:e3:f5:
         64:6b:f2:b9:52:d5:be:b5:86:ca:f4:6a:7d:1b:41:4a:df:d9:
         26:b9:d2:8d:41:07:da:6b:d6:85:37:34:a7:0c:21:50:03:ad:
         85:3d:b9:46:80:d6:b5:1c:b3:97:75:c0:03:c7:60:e3:8b:f9:
         20:e0:1e:63:5e:b9:f3:65:9d:72:bf:63:49:e2:da:54:91:21:
         aa:cc:44:de:d0:3a:9d:4d:5d:74:46:79:9a:d2:83:df:3a:7a:
         a7:a5:91:3b:7d:91:92:bc:25:c8:15:36:74:17:5b:83:bd:a6:
         07:4e:6b:53:64:7b:74:2e:1c:3c:a2:95:0d:e7:3c:3a:e0:d9:
         e1:c5:dc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:56:13 2026 by rpki-client