Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
File:                     CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft (raw, json)
Hash identifier:          pRQJ39zhmzmbLHDKNBmYblBjdYYS4XURE9Nq6PzSQQ0=
Subject key identifier:   C7:9B:67:CA:C8:24:66:26:CA:83:0C:4E:A0:57:7D:13:73:EF:31:FA
Authority key identifier: 09:47:BF:06:FF:D6:AA:83:73:71:66:6A:C4:FB:48:5C:33:22:AF:30
Certificate issuer:       /CN=0947bf06ffd6aa837371666ac4fb485c3322af30
Certificate serial:       019EFC1641B0B863C380F945F5555917DF02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
Manifest number:          76
Signing time:             Thu 25 Jun 2026 00:02:57 +0000
Manifest this update:     Thu 25 Jun 2026 00:02:57 +0000
Manifest next update:     Fri 26 Jun 2026 00:02:57 +0000
Files and hashes:         1: 1eP5CXO1PBIl9QsPThVXxpFKkiI.roa (hash: KZ7tVteP3lGVX8UW1l2BZ5G++9dxomswpEwb1weu7Qg=)
                          2: CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl (hash: 9SCTP6oa2YIDNYIJgi/I8bTolT0ILiQc3viAZhH6GY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Jun 2026 00:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:16:41:b0:b8:63:c3:80:f9:45:f5:55:59:17:df:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0947bf06ffd6aa837371666ac4fb485c3322af30
        Validity
            Not Before: Jun 25 00:02:57 2026 GMT
            Not After : Jun 26 00:02:57 2026 GMT
        Subject: CN=c79b67cac8246626ca830c4ea0577d1373ef31fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:14:38:18:37:34:76:c1:cc:28:be:1b:45:
                    9e:57:15:72:90:24:71:e8:0b:e7:15:43:b1:c1:30:
                    45:ea:a8:3f:dd:21:65:73:34:84:c4:7f:d8:14:c6:
                    1b:ef:14:70:18:82:d1:dd:52:e8:16:d9:c9:01:46:
                    2e:b3:b0:ac:96:ec:a4:61:38:65:e5:e9:37:75:42:
                    6d:65:e7:95:59:a5:98:b8:a6:30:ec:ac:f3:96:63:
                    e5:a2:3f:af:79:43:6e:ac:9e:fa:e6:54:ca:40:85:
                    91:3f:7e:39:a2:6c:d7:8b:00:86:2f:bb:f5:a3:db:
                    40:e8:b4:d7:0a:8d:e0:63:11:7e:81:74:02:64:d6:
                    93:7b:67:e3:5b:c4:82:19:59:c3:1a:92:bf:e6:06:
                    97:bd:19:98:f2:c4:64:43:c7:4d:98:dc:ea:89:3b:
                    b0:c1:03:7f:ab:10:4e:8b:fd:54:11:fa:ce:5d:dd:
                    ad:ec:82:4d:96:3a:46:57:17:d3:4d:72:a1:22:c2:
                    78:14:86:6b:eb:e5:3f:19:14:c1:96:ae:d8:8e:f3:
                    95:fb:4c:43:5f:33:06:7a:0f:e1:8b:8e:a1:e2:93:
                    ce:57:c6:23:ac:fb:f5:0a:df:38:4a:17:e4:d4:f9:
                    a9:95:d1:12:65:e1:de:e3:87:38:8e:55:07:7e:e1:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9B:67:CA:C8:24:66:26:CA:83:0C:4E:A0:57:7D:13:73:EF:31:FA
            X509v3 Authority Key Identifier:
                keyid:09:47:BF:06:FF:D6:AA:83:73:71:66:6A:C4:FB:48:5C:33:22:AF:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ea:4f:c8:92:54:35:ba:0b:49:6e:8b:bd:12:ea:21:c9:fc:
         28:31:e3:20:e8:c6:ae:e5:a9:a1:c5:52:dd:02:4f:79:be:44:
         7d:e4:c2:03:2b:3a:e3:e6:26:da:d4:98:82:3d:05:66:8d:32:
         75:33:54:0f:c0:53:1b:5a:38:a4:8c:87:50:25:59:52:13:78:
         1b:e6:5d:ed:8c:fc:26:5a:87:bd:e7:6b:d8:35:1f:34:c4:d4:
         0b:b5:9b:54:3c:b4:f9:c1:1b:12:be:00:e6:48:c9:6b:71:de:
         72:42:e8:31:49:f5:57:40:27:d7:06:de:19:a9:85:ab:2e:ce:
         e7:f3:c5:64:81:d2:f1:67:62:3d:ef:39:20:24:0d:cb:0d:1d:
         4e:a7:1b:c9:cf:d4:e4:cc:6c:f0:e5:e7:5a:ce:bc:f3:b7:12:
         3d:4e:3f:89:74:19:86:c4:75:82:9e:6a:0a:f7:31:be:83:10:
         14:b9:a5:8a:ec:c9:6e:f1:7d:73:2f:ac:85:ed:02:b5:ca:19:
         dc:fa:77:ec:db:f0:11:9b:9a:88:5b:24:b7:72:0f:50:cf:62:
         f3:13:dc:a2:e4:b0:ca:5a:ae:e5:10:e0:fb:0c:65:64:24:ad:
         11:c2:39:95:a2:91:04:51:31:e6:70:be:9c:7c:67:32:d3:7a:
         d9:7e:7e:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ78FkGwuGPDgPlF9VVZF98CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDdiZjA2ZmZkNmFhODM3MzcxNjY2YWM0ZmI0ODVjMzMy
MmFmMzAwHhcNMjYwNjI1MDAwMjU3WhcNMjYwNjI2MDAwMjU3WjAzMTEwLwYDVQQD
EyhjNzliNjdjYWM4MjQ2NjI2Y2E4MzBjNGVhMDU3N2QxMzczZWYzMWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5wUOBg3NHbBzCi+G0WeVxVykCRx
6AvnFUOxwTBF6qg/3SFlczSExH/YFMYb7xRwGILR3VLoFtnJAUYus7CsluykYThl
5ek3dUJtZeeVWaWYuKYw7KzzlmPloj+veUNurJ765lTKQIWRP345omzXiwCGL7v1
o9tA6LTXCo3gYxF+gXQCZNaTe2fjW8SCGVnDGpK/5gaXvRmY8sRkQ8dNmNzqiTuw
wQN/qxBOi/1UEfrOXd2t7IJNljpGVxfTTXKhIsJ4FIZr6+U/GRTBlq7YjvOV+0xD
XzMGeg/hi46h4pPOV8YjrPv1Ct84Shfk1PmpldESZeHe44c4jlUHfuGzgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMebZ8rIJGYmyoMMTqBXfRNz7zH6MB8GA1UdIwQY
MBaAFAlHvwb/1qqDc3FmasT7SFwzIq8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VlX0J2X1dxb056Y1dacXhQdElYRE1pcnpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80MzIwZTItNTVjYy00ZTVkLTk4Y2It
MDkxMmQ5YTVkOTQ3LzEvQ1VlX0J2X1dxb056Y1dacXhQdElYRE1pcnpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80MzIwZTItNTVjYy00ZTVkLTk4Y2ItMDkxMmQ5YTVkOTQ3
LzEvQ1VlX0J2X1dxb056Y1dacXhQdElYRE1pcnpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARupPyJJU
NboLSW6LvRLqIcn8KDHjIOjGruWpocVS3QJPeb5EfeTCAys64+Ym2tSYgj0FZo0y
dTNUD8BTG1o4pIyHUCVZUhN4G+Zd7Yz8JlqHvedr2DUfNMTUC7WbVDy0+cEbEr4A
5kjJa3HeckLoMUn1V0An1wbeGamFqy7O5/PFZIHS8WdiPe85ICQNyw0dTqcbyc/U
5Mxs8OXnWs6887cSPU4/iXQZhsR1gp5qCvcxvoMQFLmliuzJbvF9cy+she0CtcoZ
3Pp37NvwEZuaiFskt3IPUM9i8xPcouSwylqu5RDg+wxlZCStEcI5laKRBFEx5nC+
nHxnMtN62X5+2w==
-----END CERTIFICATE-----
Generated at Thu Jun 25 11:25:03 2026 by rpki-client