Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File:                     unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier:          S2SYtQV4T8qjCOC3DxmOu3IefiW22kYx3daV9kD1JKU=
Subject key identifier:   AF:54:C6:30:81:98:45:83:3E:5E:85:BE:9B:80:82:AA:11:2A:85:20
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer:       /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial:       019EC22506F8A6A822744DEF4B283123F1B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number:          1966
Signing time:             Sat 13 Jun 2026 18:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:06 +0000
Files and hashes:         1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: gtzT4jIBr6bJuUsJ+1UceUtgI9TcMF9V0r6RngaCWfg=)
                          2: wNpTaVnPcvSj1HRi75G4KSOnkgs.roa (hash: Qvayj0OyKoed9w2o0NXQ4JAD5fOZl2wDcqSFJsq9rQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:25:06:f8:a6:a8:22:74:4d:ef:4b:28:31:23:f1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
        Validity
            Not Before: Jun 13 18:01:06 2026 GMT
            Not After : Jun 14 18:01:06 2026 GMT
        Subject: CN=af54c630819845833e5e85be9b8082aa112a8520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:da:51:84:52:7a:66:54:ca:17:da:4b:e7:
                    c1:cc:00:fe:89:6c:a4:8f:fc:b2:33:5f:19:4c:69:
                    4c:7b:5b:ea:58:ea:2d:f8:a4:9c:fa:a4:0d:b9:49:
                    d9:55:48:e4:f6:52:c7:5e:d7:70:2c:de:a4:59:b8:
                    4f:3d:ea:28:29:df:0f:cb:cc:ae:9a:1e:3f:fa:69:
                    65:51:e5:8d:ce:fa:a1:bb:cd:2c:ff:c5:14:e5:65:
                    d2:98:38:57:18:46:ac:a6:da:21:cc:3c:71:58:d8:
                    1c:60:96:cf:24:08:cc:31:53:8b:db:6e:0a:da:4e:
                    91:5b:1a:5a:79:67:68:75:a4:5b:b3:d6:00:07:5e:
                    44:5a:dd:32:d1:02:c0:a6:08:8a:2a:ba:eb:e2:63:
                    cf:53:df:e3:8f:58:d6:1b:96:98:04:2e:2a:69:0f:
                    b6:73:08:18:c3:0d:a4:b7:9d:bd:e0:06:79:df:10:
                    60:f8:ac:af:2c:a0:0c:08:76:3b:f3:5a:64:3d:98:
                    ce:ea:aa:fd:cc:a6:2f:da:b2:4f:af:57:93:7b:2e:
                    6b:c3:76:30:68:ea:22:20:65:ad:17:cc:28:9c:93:
                    f5:25:90:5d:7a:7c:6d:2a:dc:78:73:41:9a:8b:ca:
                    e9:8a:2f:c9:85:1a:48:43:77:01:ae:d1:62:66:f4:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:54:C6:30:81:98:45:83:3E:5E:85:BE:9B:80:82:AA:11:2A:85:20
            X509v3 Authority Key Identifier:
                keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:11:b0:48:a8:5e:14:c3:f3:c0:04:1f:2b:40:04:df:38:
         96:04:5a:a0:86:d0:eb:a9:23:20:65:4f:14:0a:50:95:f1:87:
         fa:21:36:bc:63:5b:fb:d2:8c:03:aa:bf:2d:b2:76:17:0b:16:
         e2:9c:bc:2a:88:40:33:ba:4d:0d:d6:93:5b:bf:98:bd:3f:a4:
         77:16:c7:d8:d4:ac:37:20:f8:bb:8b:c8:1a:a6:ab:de:63:0a:
         78:ad:14:d2:41:c8:59:13:d3:f7:1c:36:33:12:ca:e5:12:1c:
         b0:8c:a5:88:52:e2:0d:73:d9:77:c5:e4:34:5d:00:02:4f:22:
         a5:61:d2:5e:de:7e:b4:76:11:41:01:e8:a9:a2:4d:90:4f:76:
         54:1b:14:79:1c:4f:3d:8f:92:a6:62:7c:c9:2a:6b:77:be:5a:
         3b:ae:e2:b7:c0:14:3e:9b:a8:e6:11:58:ce:92:4f:f7:73:13:
         1e:69:b9:64:ad:ed:52:ce:a9:9b:d4:ee:a3:13:24:78:ad:37:
         17:0e:0a:a9:d1:00:93:c8:12:35:72:14:92:16:ea:cb:60:7d:
         53:bf:b1:39:1e:a9:3e:21:9d:99:80:80:83:1c:3c:97:b1:01:
         a2:85:ed:3c:e7:64:9c:54:22:ec:aa:f0:b8:a8:91:79:e6:a3:
         f5:9d:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:53:27 2026 by rpki-client