Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File:                     uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier:          K0VCwrz9g5UXlo4bT5Bb2RxcaSEv+aVRYVxmWo3Jj0k=
Subject key identifier:   08:01:B5:CD:35:A8:D9:38:5F:3F:BC:FA:7F:B4:D4:A3:0B:46:8F:DD
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer:       /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial:       019EF9831CAD8CE851E88FAEBC7FA44E0427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number:          10A0
Signing time:             Wed 24 Jun 2026 12:02:59 +0000
Manifest this update:     Wed 24 Jun 2026 12:02:59 +0000
Manifest next update:     Thu 25 Jun 2026 12:02:59 +0000
Files and hashes:         1: 3xkUgPDW1_nU5u-zQWPWFuXblOU.roa (hash: TwymWVxNW7YipwcwZomXLwsBqGn5JSf6tMGWjIIvIuA=)
                          2: biwapYjW-yR38S3KZARQ10moe30.roa (hash: 1QN2loKj68piSOW4bamGYfAlPoY1h07q4+Z8Ry6dkfo=)
                          3: isbgVHj3TmGYN0uwFkd2CdHyHMU.roa (hash: QwGaFwSh5hfuRjoHH0+UtDhSsDuuueUvGza6DS4Ifsg=)
                          4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: rVMtdiw7kiWc21zaA6Rs77dBLJLQtDl9xvmO/3TsuSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 12:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:83:1c:ad:8c:e8:51:e8:8f:ae:bc:7f:a4:4e:04:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
        Validity
            Not Before: Jun 24 12:02:59 2026 GMT
            Not After : Jun 25 12:02:59 2026 GMT
        Subject: CN=0801b5cd35a8d9385f3fbcfa7fb4d4a30b468fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:23:e9:e7:a7:eb:9f:05:79:b5:cd:71:02:
                    e7:2d:13:d7:35:b5:79:a8:b1:d7:be:87:1b:64:a4:
                    e2:74:2a:7d:6f:a4:99:cc:5a:05:4f:61:26:9b:cb:
                    88:46:bf:52:cd:a6:59:50:31:9a:b5:4b:09:bd:b8:
                    b8:d7:e9:2e:70:ee:a2:3a:a4:16:4c:e1:ae:dd:eb:
                    56:6b:bd:78:c6:75:54:32:7c:a3:d8:df:27:24:41:
                    2f:e8:49:a7:47:26:a8:64:6b:07:a4:ed:b6:37:e0:
                    76:ac:45:e8:cb:cd:ae:f4:d4:a1:77:78:d9:6e:dc:
                    94:f0:f1:ee:6a:1c:6f:e5:1f:13:af:09:0d:9a:8b:
                    71:c8:59:8a:d3:1f:1d:f8:78:0f:fa:1f:4b:65:9b:
                    e2:b3:1b:72:4c:fa:d2:62:90:dc:96:c2:ba:4e:84:
                    82:ff:02:cd:d3:ba:04:26:12:30:8c:e7:77:ea:29:
                    e7:f5:77:c3:4a:59:9f:c5:8f:08:12:13:be:62:c1:
                    e7:db:b8:c1:9e:9e:41:95:a1:f7:19:ca:de:4d:62:
                    aa:d0:d8:cc:9e:a9:5b:31:d5:8d:b6:be:d8:fd:ee:
                    27:b9:77:70:71:c9:58:78:51:2a:8d:af:04:39:f9:
                    60:00:72:cb:51:c7:2b:5b:e4:3d:7d:9e:cd:ba:c8:
                    f6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:01:B5:CD:35:A8:D9:38:5F:3F:BC:FA:7F:B4:D4:A3:0B:46:8F:DD
            X509v3 Authority Key Identifier:
                keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d9:9b:d8:ac:08:b9:7d:da:14:1d:ba:ac:c4:1a:5d:5e:0a:
         98:7b:f6:10:d9:7f:d3:58:29:d5:8f:7d:fa:4a:28:e5:36:25:
         61:1b:48:58:95:4c:4c:7c:cc:18:00:68:30:dd:e8:91:c3:a0:
         58:c3:4d:e1:4a:cb:89:9e:21:df:f4:63:95:34:d1:09:09:1b:
         d8:47:b5:66:c4:9b:4b:1a:9e:e4:bb:1b:86:80:ad:a0:f3:b4:
         cc:5b:c5:b4:81:db:04:d6:4a:e8:17:a5:db:95:25:31:2b:40:
         a0:2c:b1:99:d2:2b:e4:07:ba:11:d6:7b:c3:d7:68:e1:02:e9:
         66:9c:e0:e6:03:e4:84:bb:4b:5a:c8:b1:f7:3a:51:65:0b:e0:
         d7:49:ab:c3:e3:e7:1d:1d:8a:eb:b8:2a:6b:81:d1:df:6e:00:
         0d:dc:a2:12:29:6a:94:0b:ab:88:c2:ff:e0:21:93:00:d6:b8:
         e7:4e:78:1e:d3:d8:58:c9:93:53:41:1b:88:43:04:33:69:49:
         30:84:34:23:46:67:aa:1a:46:f8:de:5e:07:10:38:28:f4:d9:
         fa:a3:39:dd:b7:da:4a:21:91:49:91:0c:98:3e:4b:0f:a1:26:
         cd:9f:70:68:2f:3f:7a:03:ed:28:78:7c:f0:d6:d8:37:5a:e6:
         f1:cf:49:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:27 2026 by rpki-client