Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
File:                     Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json)
Hash identifier:          AWQOt802USBDnyPrhezEkB1tIy0RgruNZhKyh4Kzxjk=
Subject key identifier:   9F:E1:6E:53:19:5D:E6:D1:CE:CE:C6:65:7B:73:94:6D:59:2B:83:E4
Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Certificate issuer:       /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Certificate serial:       019EE7E92F1F293EC8ADE5A9AA12B980DA5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
Manifest number:          1530
Signing time:             Sun 21 Jun 2026 02:01:19 +0000
Manifest this update:     Sun 21 Jun 2026 02:01:19 +0000
Manifest next update:     Mon 22 Jun 2026 02:01:19 +0000
Files and hashes:         1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: XT08olV1rPHTMaVG2XHoOSfHH+bVBET8eT61gVO7QyY=)
                          2: oOmlfKVzpMVENSLkIqqHr9oYYIg.roa (hash: /1cGoeAjRc1hP5Tzk5VY4ttcaNmL4WoxJgl5UoSxmIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:e9:2f:1f:29:3e:c8:ad:e5:a9:aa:12:b9:80:da:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
        Validity
            Not Before: Jun 21 02:01:19 2026 GMT
            Not After : Jun 22 02:01:19 2026 GMT
        Subject: CN=9fe16e53195de6d1cecec6657b73946d592b83e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:c3:5b:bd:fd:dd:89:60:99:28:3b:34:58:
                    08:87:84:b7:e3:83:d5:fe:3c:3f:e4:37:f6:db:f9:
                    7f:7e:d3:ec:bc:fd:cb:80:83:b1:a6:48:fb:bc:c1:
                    b9:41:73:e2:aa:04:27:0e:b7:92:12:0b:54:a8:ca:
                    5e:3e:49:e1:50:0d:97:8e:01:68:1d:51:a5:46:b1:
                    4f:9a:10:e8:d2:8d:c7:49:d5:79:55:0d:ce:44:32:
                    5f:95:86:8c:81:0c:fe:71:06:98:da:41:51:34:cd:
                    8f:e1:52:88:9a:87:6c:f9:39:b7:25:45:b6:ea:af:
                    af:0f:5d:d8:57:0b:78:7a:f2:16:90:c3:c2:22:38:
                    99:36:58:47:0c:ef:5b:e5:b2:61:3a:a6:d2:44:04:
                    28:d7:47:bc:58:32:cc:fa:56:0d:e5:f2:a2:99:9b:
                    7e:12:88:e1:ba:55:3e:d7:d8:ec:e6:35:6b:ab:bb:
                    09:33:14:3a:75:b0:c5:d1:9a:45:b2:40:96:22:fe:
                    50:71:6a:d1:c7:f4:fb:95:8a:10:de:d7:69:d5:d3:
                    c9:9d:9d:7c:eb:5a:c7:30:b7:58:19:a4:7a:b4:4c:
                    fc:cc:84:93:5b:46:cf:81:50:1a:cc:8c:e9:11:1b:
                    0f:1c:3a:a7:34:cf:c7:b5:4e:72:e3:88:58:34:34:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E1:6E:53:19:5D:E6:D1:CE:CE:C6:65:7B:73:94:6D:59:2B:83:E4
            X509v3 Authority Key Identifier:
                keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c4:5c:ff:f2:68:28:18:ec:52:ad:78:d8:1b:8d:65:4e:07:
         5d:19:cd:63:d3:c2:f7:1d:24:23:f3:ef:c6:69:5a:37:1c:87:
         ae:74:f6:7f:8c:9f:a5:ca:92:fc:f1:81:a7:da:da:41:dc:99:
         b5:47:9f:e0:10:c5:46:13:10:ba:85:e4:d2:e5:f3:83:01:56:
         2e:cc:ab:79:5e:3b:71:6d:88:c6:6c:1c:42:1b:6c:ab:55:11:
         c4:3d:c9:ba:1b:66:03:ca:ca:1c:90:eb:ca:02:13:60:0e:3b:
         93:bf:17:4a:dd:2c:c6:2d:b5:ac:28:98:30:70:18:23:7d:d4:
         9c:f1:4c:d5:ed:38:fc:a3:8a:4d:66:bd:bb:d1:b2:0c:38:aa:
         49:b3:f6:6e:45:90:c9:b8:e5:ca:11:08:07:18:a6:3d:55:96:
         7b:ce:64:d2:ed:39:f2:1c:44:bd:f8:3f:89:78:ee:ca:ba:56:
         ee:10:09:38:ce:3f:c2:35:5c:83:a4:79:5f:b9:07:e5:25:11:
         6c:3f:ce:a3:c1:99:bf:9b:69:13:c8:aa:83:4b:19:bc:07:61:
         f8:74:32:40:c2:09:10:c6:ac:bd:5b:54:75:7f:aa:6f:85:e1:
         8f:e7:98:d2:c8:76:db:e2:44:af:31:2f:b1:87:6a:ae:18:f0:
         fa:72:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 09:02:50 2026 by rpki-client