Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
File:                     uetMLe4ILeo7gNjvslpGhlcIy7Q.mft (raw, json)
Hash identifier:          6dIPmY9ELu87icvkOoQphuG49FRUKwDy+rN7ovC89OM=
Subject key identifier:   B7:E4:BD:39:BA:4A:61:2D:04:21:1B:2E:04:D5:22:45:87:28:EB:11
Authority key identifier: B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4
Certificate issuer:       /CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
Certificate serial:       019F19B1D82E4F69375EA9E25CC0108DB6F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
Manifest number:          120E
Signing time:             Tue 30 Jun 2026 18:01:53 +0000
Manifest this update:     Tue 30 Jun 2026 18:01:53 +0000
Manifest next update:     Wed 01 Jul 2026 18:01:53 +0000
Files and hashes:         1: YrOiyXQBvFt-emPhJBkIUx-kXzY.roa (hash: gDdOxaSqMhs+DnQoSQE1kiV7IppRkHiklEiaQCzF0J8=)
                          2: uetMLe4ILeo7gNjvslpGhlcIy7Q.crl (hash: UY6PvyhtcYIKH1kJ1BZ6m78/v4m355lbJS2TOTn4JsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b1:d8:2e:4f:69:37:5e:a9:e2:5c:c0:10:8d:b6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
        Validity
            Not Before: Jun 30 18:01:53 2026 GMT
            Not After : Jul  1 18:01:53 2026 GMT
        Subject: CN=b7e4bd39ba4a612d04211b2e04d522458728eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a0:50:7b:f2:da:c1:1d:18:ef:ea:1b:d3:34:
                    45:40:7f:77:96:53:13:42:82:06:7e:0c:66:a2:84:
                    5a:52:61:83:8d:9b:9f:f5:93:54:e6:f4:58:87:00:
                    08:b2:b0:12:17:31:a8:d6:98:43:33:7f:ee:d0:ce:
                    33:04:7d:cc:aa:25:fa:ee:9f:6a:41:8a:26:4d:35:
                    7e:9d:7c:bc:7a:cb:fe:94:ff:1c:f3:d2:05:a0:2d:
                    d2:39:b2:77:2d:b0:61:5c:35:b9:e0:f6:0f:f5:db:
                    3d:df:6a:7c:cf:db:a5:38:f7:6a:65:97:7a:a7:3c:
                    45:81:93:5a:55:ff:2e:b5:dd:28:74:fe:b3:e9:ad:
                    06:80:e6:de:71:5d:a6:ae:84:36:86:ab:b1:c5:9a:
                    dd:2c:af:8e:ba:60:32:3f:49:71:2a:42:20:1f:55:
                    89:a7:62:0d:d4:bb:68:9c:21:d9:11:05:d9:87:68:
                    4b:02:9d:cc:bb:ad:a6:d9:2d:39:65:2d:43:28:0a:
                    11:58:4b:26:91:17:da:e0:bc:10:49:c6:0d:9f:8e:
                    3b:90:c4:bb:cc:31:65:56:bc:b3:75:7d:16:4b:aa:
                    3a:0f:8c:79:20:e0:f4:43:1a:ca:3a:d5:8c:28:58:
                    bb:64:94:21:ef:86:b4:10:54:14:e4:50:ce:84:4b:
                    3f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E4:BD:39:BA:4A:61:2D:04:21:1B:2E:04:D5:22:45:87:28:EB:11
            X509v3 Authority Key Identifier:
                keyid:B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:2b:e8:e2:35:d3:c1:f1:7e:45:75:a7:ea:e9:eb:ae:c7:a3:
         68:1f:16:7c:31:d0:5d:99:71:6e:58:b2:a8:c9:f2:61:8b:a3:
         8e:db:e0:d3:fc:d8:3f:92:63:00:0d:a0:da:dc:e6:d1:91:92:
         d1:af:20:fd:d3:2e:fe:b7:1e:af:0a:44:29:0e:8f:62:1b:b2:
         08:fd:9d:50:4f:10:dd:d8:63:63:aa:83:cd:9b:14:ec:8e:78:
         ec:98:95:cf:da:ec:a8:58:24:d5:5b:5e:de:28:7c:55:38:22:
         45:17:8b:20:da:66:1d:64:72:ea:24:7b:93:aa:1a:8a:7b:47:
         52:89:91:e6:ae:61:19:59:43:ab:56:0d:12:82:19:05:db:b6:
         8f:83:fe:0d:9b:f7:99:55:bd:18:10:e2:22:96:ff:4c:5e:93:
         6b:28:c7:6a:cf:8c:9f:3e:24:81:32:b8:58:77:03:f7:9c:81:
         a9:2c:24:80:bf:1e:b2:7a:0e:9d:d5:1b:8f:08:20:7e:fc:56:
         8f:48:fe:54:e7:e4:cb:8e:5b:7e:a1:2d:71:ab:7c:df:26:d5:
         90:eb:1a:a5:91:36:aa:85:c8:3b:63:3d:15:07:61:58:5a:8e:
         a0:a7:cc:46:7a:e2:d4:7b:fd:e5:f9:bb:75:ee:8d:6f:ed:07:
         7c:aa:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:15:57 2026 by rpki-client