Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File:                     ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier:          MEy5HKbG8xfxPCAdfx/a6/ECvyHD7VXv26VfgpM4NfE=
Subject key identifier:   CF:E7:76:60:93:2B:0B:9E:E0:51:09:7B:F4:CB:32:FF:47:F4:EA:27
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer:       /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial:       019EC2C9BB3C2E514644FF8E7EBE2615B8C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number:          0D33
Signing time:             Sat 13 Jun 2026 21:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:01 +0000
Files and hashes:         1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=)
                          2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=)
                          3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: GSEVyOCpnCurM5ZYQM33Zbyq0pgGcDBgR8l1NAuUz64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:bb:3c:2e:51:46:44:ff:8e:7e:be:26:15:b8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
        Validity
            Not Before: Jun 13 21:01:01 2026 GMT
            Not After : Jun 14 21:01:01 2026 GMT
        Subject: CN=cfe77660932b0b9ee051097bf4cb32ff47f4ea27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:c9:aa:b6:56:03:cb:30:da:0c:b0:a4:ba:
                    c8:52:e4:b2:1f:d2:85:3f:ca:cd:df:e4:14:fa:be:
                    8c:da:42:c7:e7:31:1d:82:8d:b5:7c:50:6d:e3:d8:
                    52:8e:fb:76:b8:5a:56:5b:5d:45:36:e4:fc:c1:85:
                    7c:96:04:46:12:55:f2:fe:4b:f9:0f:b4:0a:e4:6e:
                    f2:b0:41:05:04:5f:55:76:93:17:6d:8b:d7:8b:89:
                    69:b7:1d:bc:a8:ec:8b:55:dc:0e:e3:a3:95:3c:d7:
                    c0:2f:da:e3:28:5d:13:ab:83:71:1f:ba:e3:0b:4b:
                    d0:02:10:7f:27:53:91:51:fe:08:71:e5:f5:07:6b:
                    e0:31:77:05:d5:71:df:d3:8e:2d:c6:8b:36:2e:e3:
                    23:c2:1f:b4:6f:1d:1e:4a:7c:01:b4:b9:86:fe:1c:
                    76:07:34:90:92:e6:89:f0:96:6a:45:24:d6:fa:b7:
                    3c:13:af:67:11:3f:46:90:cb:55:7e:a0:ed:43:d3:
                    cf:c9:e5:d2:2a:86:1d:13:1f:ee:45:cd:08:a5:09:
                    e0:02:db:d6:05:4b:7e:b6:8d:34:35:a0:d0:62:ec:
                    1b:8d:66:97:a3:e3:ae:5a:86:66:a5:87:9a:10:35:
                    08:3e:7d:8c:8d:fe:80:10:46:0f:96:7f:98:4e:65:
                    a7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E7:76:60:93:2B:0B:9E:E0:51:09:7B:F4:CB:32:FF:47:F4:EA:27
            X509v3 Authority Key Identifier:
                keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e6:a7:41:36:05:5c:9e:35:46:a5:8a:b4:8a:fd:a2:e0:d4:
         87:fb:7f:a4:19:c9:81:2d:fd:cc:f9:19:81:68:59:d7:8f:30:
         e3:9f:91:26:46:b8:e6:f8:4f:ea:13:18:f4:c1:d3:51:70:9e:
         62:20:9f:d2:a2:05:44:62:15:45:ae:3a:e4:9f:bc:68:c1:93:
         2a:61:d0:ce:f7:5c:b0:21:58:9f:22:f5:bf:75:41:77:f1:95:
         f6:9f:59:55:16:1b:e0:37:a1:50:cd:bc:69:02:2d:86:0f:93:
         8b:c6:d8:fd:03:b3:b0:94:28:28:0e:8a:f1:51:68:48:2e:22:
         1e:c8:92:71:60:5a:d2:b3:3d:17:63:80:d3:26:bf:86:95:e9:
         80:86:47:36:aa:46:67:9b:58:f0:9a:e9:55:4d:8d:a9:1c:62:
         73:de:43:48:6b:bc:70:49:ba:99:d5:0d:75:fa:5f:cd:20:8a:
         34:ac:6c:01:59:be:d3:e2:0f:df:25:60:f8:6e:06:56:37:1e:
         df:27:ab:29:69:59:74:09:1c:18:61:d7:d8:46:12:73:82:15:
         40:4a:f4:78:07:10:90:e4:79:ed:2b:c8:35:55:a0:27:de:7f:
         a8:c7:ba:92:38:be:8c:23:7b:ba:e1:4e:6c:55:9d:23:08:5f:
         a9:70:aa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:04:21 2026 by rpki-client