Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
File:                     UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json)
Hash identifier:          re1ZQN3e70H7pgc9CP1CEqtfToYW//dHzBidx+wZ4OQ=
Subject key identifier:   4C:7C:05:74:8F:A7:0A:92:8E:0D:64:38:49:AC:42:EB:58:74:B2:31
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Certificate issuer:       /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial:       019EB8EA733E7D8ABE9165F77FA3EEA69A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
Manifest number:          1281
Signing time:             Thu 11 Jun 2026 23:00:33 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:33 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:33 +0000
Files and hashes:         1: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: pQqCH+kDNxiIW49nXCetRG08Hxlx6oA6fnq6GOMDYrA=)
                          2: ajuDEzNJwC4r5rxMhDlnFbCct18.roa (hash: d8WaXIaoocbHmWCmpBjreywqEe6b/owRz1fe/aRzGoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:73:3e:7d:8a:be:91:65:f7:7f:a3:ee:a6:9a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
        Validity
            Not Before: Jun 11 23:00:33 2026 GMT
            Not After : Jun 12 23:00:33 2026 GMT
        Subject: CN=4c7c05748fa70a928e0d643849ac42eb5874b231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:4f:d5:7b:8e:b2:d6:fc:64:4d:79:8d:c7:
                    0c:07:65:ab:6e:63:96:8c:79:d0:a8:ef:0d:fb:6e:
                    1a:f1:7a:db:0a:27:60:f0:a9:15:82:73:df:bf:73:
                    4e:b2:d6:b4:31:c7:42:4c:41:25:d7:54:05:77:c4:
                    e7:e2:f0:72:03:4d:d4:87:b2:04:47:85:d3:7c:b2:
                    61:54:70:35:5a:00:12:bf:66:a3:21:98:87:05:67:
                    a8:4f:e4:fd:fd:24:c3:ea:02:52:07:2d:9e:ca:c7:
                    bf:9d:34:5b:8b:f8:14:c8:b4:54:4b:4b:63:2d:f1:
                    c3:bf:05:6d:af:2d:83:82:0d:9d:fc:bd:8d:4d:58:
                    d6:56:18:98:d5:b4:83:ae:6b:77:f5:a3:78:a6:2c:
                    01:2c:ab:fa:83:75:31:0b:6d:b4:db:53:47:2c:bb:
                    35:52:8e:ad:73:d4:04:52:39:9c:d1:e9:3f:d1:23:
                    9e:96:83:12:aa:d7:5b:c8:b8:ff:94:a0:16:10:48:
                    d9:21:a5:72:14:20:3a:fd:ec:e7:80:a1:83:1b:43:
                    03:0c:b7:26:76:32:c1:76:72:97:9c:d2:7c:0c:5c:
                    ba:73:38:9f:43:6b:d3:c3:18:d5:6b:66:da:7d:27:
                    b2:a4:fe:4a:d6:a2:1d:99:0a:64:50:3e:44:4a:e2:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7C:05:74:8F:A7:0A:92:8E:0D:64:38:49:AC:42:EB:58:74:B2:31
            X509v3 Authority Key Identifier:
                keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c9:65:8d:12:c2:91:d6:20:46:de:62:8c:4b:79:42:40:f4:
         69:68:ba:28:c3:e9:ec:a5:92:e4:fd:52:0f:99:23:a7:3e:e6:
         f6:a5:16:e9:2a:86:bf:6a:13:b8:ad:99:5e:0f:af:99:2d:52:
         0e:32:64:a3:7f:35:14:ee:51:32:cb:7c:73:12:39:b4:9c:e1:
         c8:90:96:5c:53:6e:df:82:e0:36:37:08:42:70:94:7e:98:46:
         da:da:20:20:ef:d8:63:bc:50:3b:24:a8:0d:44:f2:fb:67:3f:
         62:94:90:89:e4:ca:5f:21:da:44:c5:82:ce:f7:04:f5:16:d3:
         67:d4:43:bf:63:91:b6:33:6d:2f:c7:be:3c:aa:d9:fa:aa:69:
         d7:13:0a:6d:a0:37:4d:6b:4e:dc:eb:8b:52:02:e3:8b:43:52:
         4d:76:2a:d9:68:83:2e:fc:19:4d:9a:c1:55:f3:26:c8:01:38:
         9e:a1:d1:29:db:15:44:79:78:62:71:02:32:19:ef:40:bc:11:
         3b:6c:3d:c1:49:9a:7f:ba:fa:a6:d4:15:2d:6b:a9:e1:4d:3a:
         2d:17:34:d1:a2:9d:ed:eb:06:95:5f:02:b5:bb:5a:9d:57:04:
         66:89:3f:fe:a7:de:55:c8:15:7a:52:93:c5:bf:e5:47:68:8b:
         80:b9:d4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:00:46 2026 by rpki-client