Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File:                     uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier:          kFOBEd7vrca+VBdioKLy8OlAyHbdVdsB7S/5kAaKu2Q=
Subject key identifier:   CA:6B:00:57:E3:44:C2:5D:C9:5B:34:0C:00:1C:C7:71:A3:7E:4E:18
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer:       /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial:       019E905CC7114C05FFD19C21D1EC9F3466EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number:          06BB
Signing time:             Thu 04 Jun 2026 02:00:59 +0000
Manifest this update:     Thu 04 Jun 2026 02:00:59 +0000
Manifest next update:     Fri 05 Jun 2026 02:00:59 +0000
Files and hashes:         1: iKkWIp0DEWZQb0bqgDVCyCJAi0A.roa (hash: PFeZsS0VaFwKNbnP+0r0KTidZnHP3EFHKfZKD7B1cfU=)
                          2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: G/um40gYFI+pw2r2aJhhp3aZaow7/vaiMQ6C+c76eQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:5c:c7:11:4c:05:ff:d1:9c:21:d1:ec:9f:34:66:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
        Validity
            Not Before: Jun  4 02:00:59 2026 GMT
            Not After : Jun  5 02:00:59 2026 GMT
        Subject: CN=ca6b0057e344c25dc95b340c001cc771a37e4e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d7:2d:8f:d3:ec:f7:19:b6:2e:02:1f:b1:64:
                    9b:2a:86:b3:81:d2:63:e8:68:c4:67:e6:a5:63:95:
                    5f:ec:17:5e:9b:62:4f:3c:34:82:3f:3e:fd:b0:fa:
                    2f:c0:b4:06:78:08:0a:bc:3a:a1:f1:92:94:b4:b6:
                    96:a3:10:4b:95:76:1b:fd:14:2c:d1:f9:d4:76:34:
                    42:7d:7b:47:72:21:3a:0e:1c:7c:3e:a7:a3:bf:1a:
                    86:6d:fd:aa:37:b7:85:d8:27:3c:e3:c7:74:1a:3c:
                    05:a4:a4:f6:c0:b1:67:3a:22:5c:48:a6:37:19:0e:
                    5a:25:64:05:ec:ff:b6:59:06:2d:19:b2:4b:5c:81:
                    b8:85:f5:6b:50:c7:4f:5f:9b:40:66:b1:76:5f:b5:
                    29:b9:32:6d:a0:b0:a3:b3:35:fa:17:b1:6d:bb:81:
                    63:05:33:75:e6:88:cb:85:17:41:19:44:51:84:b8:
                    a0:20:1a:15:7e:4c:18:df:b4:65:90:a1:35:d7:f2:
                    14:6f:44:f4:a2:af:e3:1c:e0:5a:ab:e6:cb:ce:9c:
                    b6:83:55:92:cf:ad:fa:41:27:ea:44:4c:01:dc:e5:
                    dc:c2:e8:9e:0e:22:93:8b:cb:ac:ad:07:63:c6:9f:
                    9c:21:34:40:1c:ca:7b:10:a5:f9:38:e0:33:3d:d0:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6B:00:57:E3:44:C2:5D:C9:5B:34:0C:00:1C:C7:71:A3:7E:4E:18
            X509v3 Authority Key Identifier:
                keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:f2:44:90:f3:5c:49:f3:25:89:fd:62:40:59:ed:72:b1:
         57:da:9f:8c:6a:79:b1:5d:ba:c6:a7:a0:d6:68:d9:e8:e8:48:
         b2:2c:98:35:32:34:e2:49:2e:35:97:d3:46:30:ed:8b:f6:a0:
         16:38:6e:bc:13:2c:75:7e:26:37:aa:a5:b7:ca:22:d7:41:8a:
         ba:5e:09:ac:6b:62:a6:50:cd:b7:27:bf:71:a4:05:37:15:29:
         16:8e:f5:99:9c:cc:26:f5:b1:40:40:79:bb:30:69:f4:60:ab:
         33:8a:26:ee:53:41:ea:b2:03:9a:2c:4d:a0:2d:1d:77:c2:d7:
         eb:02:49:ca:5a:98:98:e7:cb:91:71:37:29:90:18:d8:4e:0c:
         07:92:b6:60:88:4b:79:c7:33:a2:7a:4f:43:4c:db:6c:de:c3:
         12:4e:e1:ed:c2:29:a3:4a:a4:a8:57:a5:3f:0d:d6:c9:76:d0:
         bb:04:e1:44:9b:a0:15:8a:4e:d6:12:8b:d4:ea:4b:bf:1c:45:
         5e:81:e2:06:f3:94:85:af:18:39:20:2a:ae:96:76:dc:a5:1e:
         8a:9a:92:d7:ce:8f:a8:d3:bf:cd:db:79:1e:a4:46:62:f7:3a:
         50:45:63:90:83:ca:70:e8:5f:42:0e:53:5b:6b:34:53:f8:2b:
         e3:90:53:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:04:21 2026 by rpki-client