Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File:                     u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier:          KbGR2hDzieqekbZi09kLlbzEkVqKP0GNROElD/6NX/I=
Subject key identifier:   54:15:6E:75:FD:F6:CD:AE:D3:8F:69:8D:1C:C3:08:A4:4A:47:4E:8B
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer:       /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial:       019E999694D082E9AABCE741494F65EABD30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number:          10D5
Signing time:             Fri 05 Jun 2026 21:00:42 +0000
Manifest this update:     Fri 05 Jun 2026 21:00:42 +0000
Manifest next update:     Sat 06 Jun 2026 21:00:42 +0000
Files and hashes:         1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
                          2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
                          3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: 0YLAv5tHEFCFiW3qWNiq5kcPSQQCdvBKFciDtJkWMTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:99:96:94:d0:82:e9:aa:bc:e7:41:49:4f:65:ea:bd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
        Validity
            Not Before: Jun  5 21:00:42 2026 GMT
            Not After : Jun  6 21:00:42 2026 GMT
        Subject: CN=54156e75fdf6cdaed38f698d1cc308a44a474e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:4a:a1:99:19:09:61:28:37:5b:92:0e:88:
                    26:48:90:61:4d:5b:23:6f:54:4f:bb:d6:cd:08:63:
                    05:41:40:2c:23:d7:ef:6c:d4:2e:bd:99:ce:66:af:
                    a3:ff:a7:c0:7b:e5:ff:b4:2a:2c:71:81:d9:e3:73:
                    97:f1:91:6e:d1:64:93:b9:4c:e7:94:b4:b5:34:49:
                    dd:73:e6:72:01:72:3b:e1:7a:50:13:f4:6f:11:fe:
                    39:ba:21:ec:2b:08:a8:0c:77:d5:17:9d:8f:24:46:
                    46:27:7c:52:4e:da:0b:03:34:a8:fc:ee:63:46:8d:
                    fc:2c:f5:a1:81:86:aa:ba:b4:e2:04:ad:b5:8d:ff:
                    28:43:41:1c:55:41:e6:37:7d:78:1f:6f:b3:6a:60:
                    07:26:74:bc:dc:a4:5b:e4:9e:d2:8b:e2:a7:2a:44:
                    cd:25:90:fc:5b:19:bc:df:7e:1a:24:81:c0:ab:df:
                    25:2c:db:36:f1:bc:e0:bc:69:58:34:d0:39:f7:c3:
                    ce:e9:09:3e:95:09:61:3e:e6:25:69:ce:c3:1c:2e:
                    20:40:86:35:32:22:a4:93:e1:a7:17:9c:f7:3e:00:
                    34:59:bc:bd:88:38:97:cb:9c:1c:b6:01:96:bd:1b:
                    9d:7c:78:b7:50:d7:6e:2c:61:8f:31:c7:d5:6d:9c:
                    6f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:15:6E:75:FD:F6:CD:AE:D3:8F:69:8D:1C:C3:08:A4:4A:47:4E:8B
            X509v3 Authority Key Identifier:
                keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:10:9e:e5:43:08:f8:d7:58:9e:64:92:db:e1:aa:37:9b:0a:
         73:95:fa:ac:8f:26:90:46:28:1b:e7:c8:c4:0a:af:7b:45:ac:
         20:18:44:1f:2d:dc:8b:74:ee:aa:86:b4:f3:3e:14:d6:d4:28:
         2d:20:38:df:25:af:5b:0d:23:c8:7c:04:0e:f1:ff:e8:66:24:
         ae:be:be:5f:5a:b6:c7:bb:ac:6e:f5:1f:23:c6:86:c3:af:78:
         1f:22:70:4b:53:90:dc:cb:1f:82:13:56:b5:cf:51:7a:04:b8:
         7b:3c:4a:1c:1c:e2:af:67:96:98:60:ff:ab:3b:59:01:86:94:
         77:55:9d:0a:ee:1d:b0:48:a1:c6:b3:65:ce:80:e0:8a:26:48:
         00:9e:18:37:8d:b8:f4:66:95:25:dd:c1:ba:7f:2b:50:5a:74:
         36:fb:05:62:db:df:c6:8b:aa:43:6a:8a:cc:a5:9b:3b:ad:c7:
         92:3f:dd:fc:99:95:b7:f8:a8:f9:87:cb:e8:40:ef:01:d7:80:
         2d:71:aa:2d:55:4d:1c:81:3a:5e:3b:a3:07:ea:29:2f:59:5e:
         ed:04:e9:98:ce:a1:7c:36:9c:a1:85:ed:7b:9a:60:23:23:20:
         b1:29:b6:f0:51:d5:cd:ae:0f:a3:be:20:cd:8f:8b:f4:e3:eb:
         89:2f:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:59:06 2026 by rpki-client