Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File:                     UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier:          hRbKi2vlX6yXZ348i1sLrTDmNKjva8wvjU2kJIPb7ZM=
Subject key identifier:   0B:07:83:D8:25:2A:4F:77:8D:1E:9E:37:F7:54:4E:F9:2E:E1:57:26
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer:       /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial:       019E9A71F64DAE79B940451F922A244C3145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number:          10A1
Signing time:             Sat 06 Jun 2026 01:00:20 +0000
Manifest this update:     Sat 06 Jun 2026 01:00:20 +0000
Manifest next update:     Sun 07 Jun 2026 01:00:20 +0000
Files and hashes:         1: UcC2Y8zHvL_FDSURiolVRBuB8_g.roa (hash: p3IzoT2nzG2oBklzpQ6gR/NCnzvpo3xyP/73GYhUd3g=)
                          2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: B74cZkpAqe5rYir+pSUv4q5H58U6j+ZE+dNzu+aZxts=)
                          3: vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa (hash: YyzHvgYYzEsZBa9TKZu8r++ne7pY4Yz24jL7ObVc/TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:71:f6:4d:ae:79:b9:40:45:1f:92:2a:24:4c:31:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
        Validity
            Not Before: Jun  6 01:00:20 2026 GMT
            Not After : Jun  7 01:00:20 2026 GMT
        Subject: CN=0b0783d8252a4f778d1e9e37f7544ef92ee15726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e4:96:81:44:c5:c5:34:02:dd:12:be:94:fe:
                    66:dc:a7:66:d9:3f:5e:b3:1a:28:71:5a:f8:83:aa:
                    36:4d:ab:f9:a8:a6:48:ec:90:86:d3:13:b9:df:3c:
                    ed:e5:a4:5c:2b:5b:20:3f:cc:4d:c2:fd:45:85:09:
                    95:74:61:1b:d5:4f:77:79:7d:54:d0:07:57:b5:4a:
                    97:4f:04:b3:3d:99:d7:93:d1:f5:9d:f4:98:9f:fc:
                    e8:3b:8f:83:ec:a7:39:b7:31:8a:cb:e7:68:a7:d7:
                    73:3d:a4:13:df:f1:8a:ec:cc:60:b7:d6:5a:8d:39:
                    df:90:c5:03:5b:06:90:13:c8:c9:68:92:80:22:51:
                    df:2c:e3:e9:f1:11:8a:21:c8:e0:52:75:5d:b0:93:
                    aa:d2:cc:2b:12:d2:75:ec:7f:52:f8:db:fa:95:b8:
                    01:77:f2:a0:29:06:44:50:d5:82:e8:02:9a:24:27:
                    49:7e:8d:90:08:80:ab:de:e5:b6:d8:59:90:f6:91:
                    82:2e:74:d8:47:19:f2:ac:93:53:44:18:c2:49:58:
                    49:22:14:61:d2:bc:50:a8:3e:7b:53:f9:a7:8b:2c:
                    31:47:02:25:37:34:a5:6f:39:99:20:b2:9b:c5:90:
                    4d:1d:f9:b4:92:c8:57:47:38:c3:7f:45:04:19:09:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:07:83:D8:25:2A:4F:77:8D:1E:9E:37:F7:54:4E:F9:2E:E1:57:26
            X509v3 Authority Key Identifier:
                keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a2:0b:79:f1:53:d8:a9:06:5c:08:9a:11:4b:e6:94:20:e0:
         20:5e:50:7b:20:fc:10:89:32:bc:4e:04:e0:b7:c5:d3:f7:d0:
         51:20:04:e7:f9:90:31:ce:9e:0d:8c:af:20:b7:5b:ab:64:71:
         24:78:61:ea:ed:43:b5:4c:3c:86:e8:bb:fa:a6:b6:b9:6f:40:
         ff:2f:ea:81:f0:13:e8:44:31:4b:9b:64:31:45:cc:50:75:f1:
         b4:1b:7f:1d:5d:11:b9:5f:d3:1b:ec:63:a0:4c:08:07:eb:bd:
         e9:47:b2:5a:d3:fe:e0:d1:49:40:a1:b1:a0:a8:ba:12:60:9b:
         d4:eb:81:4b:87:82:34:41:fc:ae:c8:6b:50:6f:60:aa:a5:09:
         cd:be:9b:30:80:a1:9f:8a:b2:ff:bc:da:54:5e:05:c4:4b:b5:
         bf:cf:d0:0f:dc:a8:e5:a3:0f:c4:ac:0d:7c:38:c1:d9:63:22:
         36:0f:12:65:00:fe:58:5e:ac:4f:99:d0:5b:1c:5c:16:bd:1e:
         d3:53:2d:fb:b7:c9:22:1a:bf:a8:7d:a7:14:4e:15:d8:79:39:
         14:9b:70:d2:ee:bc:91:bb:53:6b:10:40:df:f7:0b:c4:e0:24:
         b1:6d:a8:6e:c7:17:ed:52:96:64:a8:f8:dc:53:91:c2:b3:df:
         59:34:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:57 2026 by rpki-client