Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File:                     uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier:          mGFrRoPFUYtoXbXcgMnzfI/WR182Koj9EYI+rjUsEHY=
Subject key identifier:   27:8B:DA:8B:D7:6D:7C:DB:E5:19:BD:3F:CD:62:47:DE:95:9A:65:FD
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer:       /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial:       019EB7337673E345C5D5CE47AA134279A3A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number:          10B1
Signing time:             Thu 11 Jun 2026 15:01:03 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:03 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:03 +0000
Files and hashes:         1: lWdEpowAzHConUoYGbrc4-nSOV4.roa (hash: 9/NPZ8xgxrX7894j4qUQTxzBQ0X/YCJM81igBGzxaPE=)
                          2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: ZMMTPXSgJkGkJhPdAxIXSR1reQqqrLc9ybYWkGsZTc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:76:73:e3:45:c5:d5:ce:47:aa:13:42:79:a3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
        Validity
            Not Before: Jun 11 15:01:03 2026 GMT
            Not After : Jun 12 15:01:03 2026 GMT
        Subject: CN=278bda8bd76d7cdbe519bd3fcd6247de959a65fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:18:79:6e:fc:6d:26:21:e9:2f:b5:bf:2d:
                    01:69:12:dc:14:b6:8c:49:01:84:bd:f6:bd:6f:ac:
                    2c:8b:11:14:9b:31:74:2d:c9:7c:e2:5e:1b:2a:47:
                    c7:2c:23:bc:b5:b7:93:13:94:66:32:a7:26:b3:77:
                    a6:20:60:8f:69:3c:76:fd:e0:e0:ae:77:c2:4b:f8:
                    f1:e3:a1:39:3e:7d:dd:37:89:44:cf:8f:34:90:4a:
                    49:59:a0:69:2a:de:bd:b8:fd:16:83:b1:98:c7:42:
                    88:27:89:c4:a3:6a:f1:f9:98:e5:2d:50:47:58:f0:
                    71:e0:df:a3:39:7b:1d:72:b5:12:4b:44:31:4d:a6:
                    97:c1:d4:11:63:6c:16:2f:52:a9:54:90:9b:02:b7:
                    35:39:85:7b:86:ff:42:6f:b7:2a:26:4c:be:7e:e1:
                    25:46:21:e5:e2:cf:f9:4b:5a:ff:56:e5:14:03:78:
                    63:c8:33:f9:c4:c9:d0:83:92:99:61:70:c7:31:77:
                    55:e1:57:fe:c5:f9:ca:48:59:70:35:2a:b9:c7:2e:
                    f2:03:07:d7:68:41:55:0a:d3:27:d3:33:87:26:4d:
                    8e:5e:9d:d5:1c:13:da:47:be:a9:4c:91:7b:71:41:
                    4c:8c:73:27:ce:dd:16:c7:41:35:fe:5d:a0:bc:03:
                    a3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8B:DA:8B:D7:6D:7C:DB:E5:19:BD:3F:CD:62:47:DE:95:9A:65:FD
            X509v3 Authority Key Identifier:
                keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:32:bd:8e:63:fb:61:f9:cb:bf:33:a8:05:7e:76:30:a3:a4:
         e7:a4:55:cf:50:c4:fe:de:9b:1f:fb:6d:ac:df:a3:cd:4d:d8:
         d2:75:87:4f:e6:e8:4a:be:e2:43:99:6f:7e:1d:8a:85:83:c7:
         19:e2:69:d1:42:ce:b9:e1:c1:e2:27:86:19:d0:83:45:26:b0:
         f6:f7:02:21:dc:e7:3d:84:d3:bc:80:e7:ee:8c:1f:5a:1e:3f:
         3a:86:61:e5:47:47:4b:94:ff:1b:ff:ef:34:f9:65:4e:e3:e1:
         d7:81:7e:ae:96:1c:94:e1:d1:8c:b6:68:15:1a:96:ef:66:d0:
         5d:7c:d1:ef:a2:12:a6:ad:dd:69:9c:9c:0e:fb:1c:2a:af:e3:
         31:fa:b5:2f:0d:30:6c:27:4b:5d:66:93:09:04:47:91:8a:6c:
         cd:ab:68:ac:64:a6:bd:a7:88:06:35:6b:91:c7:f6:7b:e3:ae:
         71:3a:9e:e4:17:82:8f:2b:fa:cc:f4:4d:02:1e:f5:c8:ef:0e:
         39:5e:e8:1c:2f:5c:cf:dd:53:00:78:3d:a1:72:5e:9b:b8:3d:
         90:08:fc:ba:13:44:e0:be:f3:32:66:29:41:ca:67:ef:57:54:
         0d:a7:a2:77:a1:4e:00:79:9f:04:a2:56:3a:7a:ae:13:2f:00:
         8b:05:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:12 2026 by rpki-client