Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File:                     U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier:          lQcXaGiT2y7Qfsjc0ZiZwh39HW4Znj6EuL1OCMPMvU4=
Subject key identifier:   6A:C8:A3:DE:39:53:54:7C:12:C8:DA:2A:E0:15:63:CE:27:D4:1F:FD
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer:       /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial:       019EBAD90DF4DDF4528BE01AD2E939E9E5C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number:          1960
Signing time:             Fri 12 Jun 2026 08:00:47 +0000
Manifest this update:     Fri 12 Jun 2026 08:00:47 +0000
Manifest next update:     Sat 13 Jun 2026 08:00:47 +0000
Files and hashes:         1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
                          2: CRXS8yJabkFe9zngcADmlt5Mjh8.roa (hash: V+gmBDqtYsm9sl2kIiueYpvE2PqUIfwWQ+IMlLrBBzI=)
                          3: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
                          4: QbAALDYZ_RGHs07gYUQih_CDJyk.roa (hash: +Uv/ugRA2zDra5XT10jpvOYMi9ZmxhbMWKYPoPRN5bM=)
                          5: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: ItZcD1Jh9fWq0DT7ffzvMTiAI4uWlAsMIclzJRMsJl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:d9:0d:f4:dd:f4:52:8b:e0:1a:d2:e9:39:e9:e5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
        Validity
            Not Before: Jun 12 08:00:47 2026 GMT
            Not After : Jun 13 08:00:47 2026 GMT
        Subject: CN=6ac8a3de3953547c12c8da2ae01563ce27d41ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:3b:a6:97:51:d1:77:1d:1d:9d:c8:4c:06:
                    85:96:8d:a6:0b:98:16:ad:c7:91:a7:dd:1d:e3:a7:
                    da:7f:73:4c:8e:05:66:41:55:a6:61:c3:a8:51:23:
                    c3:e8:89:33:b7:a8:91:7d:7c:57:da:4c:42:35:d1:
                    30:14:24:f0:b4:e0:ac:77:4d:83:c5:7c:f6:e1:b2:
                    59:00:5a:c0:8a:3a:14:2a:ef:f7:48:72:48:98:51:
                    7e:8c:a1:fd:d3:93:1b:fe:38:45:ea:42:dc:07:53:
                    8a:db:09:ae:df:f3:2e:c4:fc:bc:07:91:50:60:cc:
                    7c:2a:53:ef:fa:ed:af:5f:8b:fb:33:ec:c0:43:77:
                    18:4d:43:bb:a8:9b:9d:3a:96:9d:0c:75:43:21:75:
                    c0:14:5d:19:79:c2:9f:fc:c4:4a:01:f4:86:21:f2:
                    94:2c:c8:18:95:8d:c8:4f:93:28:4a:7f:75:9f:14:
                    cb:7e:70:28:e4:e8:1d:d7:26:ef:7f:12:16:fc:1c:
                    b5:7f:cb:c6:e1:a6:5c:a9:42:93:59:2e:97:e0:e8:
                    73:1f:e8:aa:24:cb:8c:4b:1f:56:cf:5e:83:51:3a:
                    7f:5a:d4:82:bc:b2:b4:9a:70:f7:87:cc:ac:fe:be:
                    fa:c3:79:09:d3:3c:86:fe:57:43:9e:96:c5:ee:19:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C8:A3:DE:39:53:54:7C:12:C8:DA:2A:E0:15:63:CE:27:D4:1F:FD
            X509v3 Authority Key Identifier:
                keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:74:70:ed:14:ce:51:cb:bb:49:3b:af:97:19:d0:1e:71:a7:
         09:a8:b9:51:79:05:20:18:3c:72:f5:9d:53:fd:5b:54:5c:af:
         4c:00:3d:ad:d1:3b:60:d4:d7:7b:9b:03:48:de:56:55:77:bb:
         66:e7:7d:99:b5:7f:0c:a6:04:9b:0b:fc:fe:da:4e:fe:7a:bc:
         dd:4c:4f:5c:78:85:8e:df:39:a8:8a:cc:23:2f:b5:73:2e:71:
         dc:d2:db:5a:c7:3a:4f:02:8e:8b:40:e8:47:eb:33:1c:77:8b:
         86:c5:68:7f:32:4a:d7:15:dc:ba:89:3a:43:c5:4d:4c:10:8a:
         52:5b:ce:6b:1f:28:ae:ae:73:71:00:b6:d5:f6:bd:0d:33:08:
         44:9f:92:86:ec:9d:67:1b:e0:2b:ef:c8:fb:10:6b:ac:3e:c6:
         cd:0e:e3:14:7e:28:3e:54:32:b3:a5:7f:2e:aa:f2:e0:4c:e0:
         61:97:79:eb:4b:23:f3:cf:3b:1e:8e:01:6b:af:fd:eb:44:16:
         75:82:e0:08:dd:43:1a:cf:b9:d0:c0:3c:b7:79:1a:b0:28:6a:
         e3:c1:ce:fb:6e:73:a5:eb:53:6b:64:c2:b7:2a:a7:5b:8f:18:
         fb:c3:a0:06:63:a4:e5:f9:fa:57:1b:81:d0:22:b6:33:6f:37:
         15:83:4c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:57:41 2026 by rpki-client