Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File:                     unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier:          YEet59Zo1Yw08540aKFOkC66yVEF9eylaVTX32nqz28=
Subject key identifier:   B0:8F:FE:E1:28:08:BF:4E:5B:38:A0:2F:A3:01:9B:84:30:6A:85:3A
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer:       /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial:       019EC4137BE2B05C221E7ABBDF2AA9161C39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number:          1967
Signing time:             Sun 14 Jun 2026 03:01:11 +0000
Manifest this update:     Sun 14 Jun 2026 03:01:11 +0000
Manifest next update:     Mon 15 Jun 2026 03:01:11 +0000
Files and hashes:         1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: u+e6ck4qZlBeQN6VXa4KalQA4+InmcJbZKb4+CduDGA=)
                          2: wNpTaVnPcvSj1HRi75G4KSOnkgs.roa (hash: Qvayj0OyKoed9w2o0NXQ4JAD5fOZl2wDcqSFJsq9rQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:7b:e2:b0:5c:22:1e:7a:bb:df:2a:a9:16:1c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
        Validity
            Not Before: Jun 14 03:01:11 2026 GMT
            Not After : Jun 15 03:01:11 2026 GMT
        Subject: CN=b08ffee12808bf4e5b38a02fa3019b84306a853a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:f0:34:50:5f:b1:bf:cc:cf:3a:b7:6c:41:
                    8f:6d:d3:24:e0:4f:f5:75:70:4f:ef:0d:2f:05:39:
                    54:df:b2:1d:8f:7d:37:dc:a5:09:e4:c0:bb:75:1c:
                    d7:ae:a4:48:c1:2d:c5:4e:13:94:44:99:7a:54:e4:
                    cf:84:50:1e:eb:77:0c:7f:1f:5f:a8:9a:6f:a8:0d:
                    1e:7a:b7:02:e2:57:5c:e5:48:18:d5:d4:9f:48:db:
                    e2:6d:88:14:b8:17:55:a7:22:7b:18:84:99:4d:93:
                    a5:39:a2:84:50:f5:ee:bc:80:ec:a4:f5:88:80:09:
                    bb:68:41:b3:ec:83:19:f0:36:7e:bb:dd:b0:a3:7d:
                    4f:48:8d:10:a7:56:87:20:99:9f:7b:20:85:65:0f:
                    fe:bd:02:32:ba:97:f0:98:14:56:d9:1e:56:48:8e:
                    df:49:a9:e4:c7:cb:03:80:1e:a8:19:50:c3:4c:b0:
                    87:ef:cc:90:5c:bc:9c:3f:a5:ae:80:fe:9c:04:17:
                    a2:49:99:a9:b0:37:7c:70:43:2a:ae:d4:2f:4d:a0:
                    48:ca:30:1d:8b:e6:dc:9b:fb:69:65:e2:d1:0d:04:
                    aa:15:3e:03:a8:50:97:82:60:6c:26:c3:6a:9d:46:
                    33:77:45:1d:0a:97:7b:5b:29:8d:b1:b7:36:d0:f3:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8F:FE:E1:28:08:BF:4E:5B:38:A0:2F:A3:01:9B:84:30:6A:85:3A
            X509v3 Authority Key Identifier:
                keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b2:ac:fc:f5:16:90:28:e0:ed:92:59:07:e7:9c:5e:17:0d:
         e7:c1:86:42:83:17:f7:a9:14:45:24:5e:1b:78:50:ae:73:d3:
         f7:3f:5d:f1:04:51:03:f5:50:e5:14:f1:b6:48:e3:63:05:b5:
         e3:6a:d8:48:6d:18:4f:7c:e3:5d:e0:95:a8:48:58:5a:88:29:
         91:9c:27:a5:3f:56:31:22:13:64:a8:02:21:89:f6:b1:45:7b:
         8c:50:3d:93:32:6e:ff:61:79:da:15:19:46:b9:ad:9e:cc:e4:
         6a:98:35:05:3f:66:7b:7c:f0:14:b9:90:66:4b:3b:61:b3:62:
         80:b5:41:73:3b:cb:f8:0e:f4:0b:9b:af:5e:0c:af:fa:7b:cf:
         a2:ec:6c:be:b1:2f:af:74:c9:50:94:92:64:a2:f3:10:c8:fe:
         78:98:61:ba:17:8b:d4:df:ed:b4:bb:4b:e3:ab:45:8a:4e:e2:
         80:5b:b2:cd:ba:b9:69:70:0a:0a:2b:c1:5f:45:44:cd:ad:b1:
         a0:20:3d:b9:6a:68:93:3c:8b:5d:fa:7b:28:b6:88:a8:e2:1f:
         d4:c1:76:ca:b9:54:e6:20:fb:ba:df:8c:e9:86:6f:94:1e:2c:
         d4:4a:6d:e6:73:c9:91:d9:06:fc:dd:23:20:f7:d2:0c:3e:6f:
         ec:71:62:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7EE3visFwiHnq73yqpFhw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjYwNjE0MDMwMTExWhcNMjYwNjE1MDMwMTExWjAzMTEwLwYDVQQD
EyhiMDhmZmVlMTI4MDhiZjRlNWIzOGEwMmZhMzAxOWI4NDMwNmE4NTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HDwNFBfsb/Mzzq3bEGPbdMk4E/1
dXBP7w0vBTlU37Idj3033KUJ5MC7dRzXrqRIwS3FThOURJl6VOTPhFAe63cMfx9f
qJpvqA0eercC4ldc5UgY1dSfSNvibYgUuBdVpyJ7GISZTZOlOaKEUPXuvIDspPWI
gAm7aEGz7IMZ8DZ+u92wo31PSI0Qp1aHIJmfeyCFZQ/+vQIyupfwmBRW2R5WSI7f
Sankx8sDgB6oGVDDTLCH78yQXLycP6WugP6cBBeiSZmpsDd8cEMqrtQvTaBIyjAd
i+bcm/tpZeLRDQSqFT4DqFCXgmBsJsNqnUYzd0UdCpd7WymNsbc20PNAIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCP/uEoCL9OWzigL6MBm4QwaoU6MB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrKs/PUW
kCjg7ZJZB+ecXhcN58GGQoMX96kURSReG3hQrnPT9z9d8QRRA/VQ5RTxtkjjYwW1
42rYSG0YT3zjXeCVqEhYWogpkZwnpT9WMSITZKgCIYn2sUV7jFA9kzJu/2F52hUZ
Rrmtnszkapg1BT9me3zwFLmQZks7YbNigLVBczvL+A70C5uvXgyv+nvPouxsvrEv
r3TJUJSSZKLzEMj+eJhhuheL1N/ttLtL46tFik7igFuyzbq5aXAKCivBX0VEza2x
oCA9uWpokzyLXfp7KLaIqOIf1MF2yrlU5iD7ut+M6YZvlB4s1Ept5nPJkdkG/N0j
IPfSDD5v7HFi4g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:15 2026 by rpki-client