Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File:                     UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier:          Dpq9KRdBDxPUmOugCjZPRPDS9spJ2nROFTNX2q1I6ds=
Subject key identifier:   AE:B3:52:24:66:23:23:3B:23:4A:BD:FD:FF:75:86:F4:33:AE:44:3F
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer:       /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial:       019EB733C275D88A28312B68AF3883A7E352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number:          195B
Signing time:             Thu 11 Jun 2026 15:01:22 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:22 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:22 +0000
Files and hashes:         1: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: UpxrUMBRZQNdjzuUwTkByGCmbfFT+KjBGu5yVjKYpXE=)
                          2: YiTZyM0LJDlibzSScA19n-r_1NA.roa (hash: xUwCbyrQAmjQ9KEmQXtJqtnkqDlVNHnF+1vzDoqaWUE=)
                          3: iLi7f9ZUhRFIePAx_CbpyKFYVLY.roa (hash: +jK5YhwAWuiSD7jiuyksRnOSQ26Q7wRKEX5irQTiJO4=)
                          4: jaFu9pBfM8muxEa6Z1M7bqPV5TY.roa (hash: D7hQEIQMJfA1ZdopDczTPfE2hg2zaIc0IFSTi8hUD0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:c2:75:d8:8a:28:31:2b:68:af:38:83:a7:e3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509df728d1b46634054972d2945fda58073b5762
        Validity
            Not Before: Jun 11 15:01:22 2026 GMT
            Not After : Jun 12 15:01:22 2026 GMT
        Subject: CN=aeb352246623233b234abdfdff7586f433ae443f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:3e:6b:81:c1:8b:eb:2c:16:ac:b1:73:2c:
                    db:d7:0b:69:75:3b:92:10:05:5d:f2:d6:be:73:12:
                    63:e8:7a:37:38:84:c8:cd:81:7e:c2:35:29:21:2e:
                    80:f2:85:c6:18:da:4e:d0:2c:da:4b:43:92:d1:03:
                    75:cb:f4:9a:56:7c:ed:9d:e1:45:ae:58:ce:44:54:
                    bb:52:52:ac:4f:60:18:14:0d:e1:ae:7a:0d:a9:34:
                    86:ed:b0:e7:a0:1e:7d:8d:84:10:e2:52:2b:34:28:
                    81:3d:6a:2d:f0:be:d4:2e:7f:d2:5d:a6:36:8d:1d:
                    6e:ca:02:11:d5:d6:a5:8e:ce:e6:c6:07:33:1e:71:
                    48:ef:b3:83:38:ac:4c:ba:5b:5e:0b:d3:74:b0:04:
                    6d:b4:dc:55:56:3b:71:25:74:de:ca:4c:88:55:db:
                    f4:db:fc:4a:9c:30:63:cd:24:40:c6:f2:e1:78:f3:
                    8a:a8:fd:8a:0a:1b:70:0c:bd:0f:02:dc:e7:be:39:
                    ef:4f:fd:f4:fe:94:58:f4:7a:18:15:c0:b2:e7:ca:
                    d8:93:59:fe:93:cc:b9:d0:55:8d:76:4e:8b:d5:66:
                    f5:fb:f5:5c:48:76:0c:9b:00:6c:f3:ea:b1:9d:7f:
                    69:39:ce:e3:13:03:26:3e:81:97:1c:6a:fe:6a:09:
                    fa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B3:52:24:66:23:23:3B:23:4A:BD:FD:FF:75:86:F4:33:AE:44:3F
            X509v3 Authority Key Identifier:
                keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e2:de:6c:d3:f4:4d:96:d1:30:17:ab:46:05:eb:2f:eb:5c:
         1e:e3:d6:fc:83:50:47:b6:89:ae:f0:c7:93:9b:32:21:15:bb:
         e6:c9:2c:44:df:5c:71:3d:eb:85:9a:61:47:75:be:97:ad:2a:
         7b:4e:6c:f0:c0:60:43:5b:0b:19:b6:e7:a3:d2:ef:ee:46:a8:
         eb:bd:39:d6:71:a6:ba:3b:1c:5d:a9:92:24:5e:2c:e9:a0:fd:
         b9:22:9a:30:64:13:ec:07:0c:82:d4:c2:ce:e0:bb:b0:16:53:
         a3:37:0c:2a:7a:8d:95:15:a8:84:d4:4b:9d:56:c2:f7:e6:fa:
         d0:ba:6c:2d:30:cb:82:20:75:25:66:39:b7:8f:14:56:61:d5:
         c0:91:8f:1b:48:9e:27:38:1f:77:67:77:57:34:f1:b2:e3:6b:
         a3:9e:ef:19:0c:69:aa:05:eb:42:3c:cb:8c:e7:21:0c:61:20:
         4a:d7:3b:3c:9c:99:79:5d:08:1e:ee:75:1f:0f:df:1d:24:5a:
         37:9e:c7:63:a9:5a:03:d0:5d:45:7e:74:1c:75:1c:d7:5d:c6:
         86:30:fd:5e:b7:4a:74:3b:d8:5f:0c:c3:13:6c:3e:df:d9:c7:
         d2:07:53:63:70:a3:d0:bc:ca:42:81:3f:e5:93:f4:58:8f:e7:
         9c:35:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:47:57 2026 by rpki-client