Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File:                     uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier:          kPOn7zPt+RvI2cLlJnZc0PuH24GOE3haHvIFzGHd7sY=
Subject key identifier:   A8:DC:68:A4:2B:C1:BE:C5:AA:A8:1D:EE:86:3F:1A:87:87:DB:A8:A4
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer:       /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial:       019EB8B3C25E3DE96AB42BE393C264F4DA4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number:          1957
Signing time:             Thu 11 Jun 2026 22:00:48 +0000
Manifest this update:     Thu 11 Jun 2026 22:00:48 +0000
Manifest next update:     Fri 12 Jun 2026 22:00:48 +0000
Files and hashes:         1: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (hash: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI=)
                          2: hTUAMk4ivW-zcf6qV0iH6m50Tko.roa (hash: VBCrCjN466HYq/3fbWnNr2nU6AFrUJpSz4d+MsDsH6k=)
                          3: po2AjEIA0cEB2DRz3ItNN0tLtJA.roa (hash: emEIyu5B7Cay8ES1oJZR9gyFPVy8pKl4tqO8qQcgwDQ=)
                          4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: aQZUQDnJ4Cp7imflxz9yWjuEczBWa2uG9eRCwEQy4ng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b3:c2:5e:3d:e9:6a:b4:2b:e3:93:c2:64:f4:da:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
        Validity
            Not Before: Jun 11 22:00:48 2026 GMT
            Not After : Jun 12 22:00:48 2026 GMT
        Subject: CN=a8dc68a42bc1bec5aaa81dee863f1a8787dba8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:a8:15:1f:05:7f:cd:e2:e4:ce:ed:60:09:
                    40:08:0c:7f:61:16:19:fc:f2:18:6f:7d:0b:94:a1:
                    52:f1:ac:89:db:66:7b:5f:b9:c2:be:a7:2a:8d:80:
                    79:2c:12:a1:fa:23:3d:93:8c:42:10:6b:5c:6b:02:
                    40:eb:ec:37:a2:e2:aa:65:c7:f4:86:e0:44:44:c0:
                    6f:cc:f1:b3:d1:58:9b:01:2b:62:fb:c9:2a:56:34:
                    fe:68:61:86:3a:67:d5:71:6a:3c:38:d5:5f:8c:0c:
                    c5:d3:6b:34:50:94:f0:a9:12:41:46:1a:56:92:20:
                    35:eb:bd:e5:61:d8:c9:b3:b1:58:0a:bb:86:a8:72:
                    98:d6:b1:bd:41:b5:42:81:25:b6:14:0c:96:f8:36:
                    04:87:3f:9e:20:27:6f:c7:4f:ae:20:db:5e:39:64:
                    07:66:08:8b:8e:87:83:67:60:ca:b4:dc:52:d8:08:
                    2a:a3:bf:66:a1:05:cd:63:13:93:08:32:d5:9d:13:
                    8d:41:c4:ac:ca:1f:55:2b:46:49:13:01:f8:b3:7f:
                    69:a9:38:56:b2:ba:61:11:7d:65:e2:34:c7:3b:0c:
                    fb:49:ef:8e:d4:1b:02:c8:31:46:09:1a:58:b2:dc:
                    61:c3:15:14:83:00:d6:03:d0:53:bb:e5:59:d6:51:
                    1f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DC:68:A4:2B:C1:BE:C5:AA:A8:1D:EE:86:3F:1A:87:87:DB:A8:A4
            X509v3 Authority Key Identifier:
                keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:99:b7:32:da:15:8d:47:8b:8a:e3:2d:13:4f:ae:19:71:cb:
         c8:66:46:d4:e7:7a:0c:28:49:d5:5e:0d:5e:fc:72:14:2a:f8:
         ad:d0:70:4f:bc:36:72:65:19:51:48:5f:13:41:10:ee:59:4e:
         cf:67:50:22:ce:86:90:13:54:84:a1:00:e2:7d:7a:a5:5f:e6:
         2c:8e:a0:fd:44:55:3f:52:30:78:bd:be:df:3f:49:e7:f3:3c:
         49:84:43:bc:89:be:64:1a:36:70:d6:5c:4f:77:f7:46:ba:02:
         63:9e:c7:fa:b1:d1:94:9b:45:76:8d:4c:4c:f9:97:c7:44:c4:
         13:8d:93:89:ef:54:d1:8d:6d:ec:a0:0b:28:b6:ed:d0:78:5e:
         f6:ef:19:dc:e7:9f:c2:c2:3f:02:6e:45:64:7f:8a:10:b3:7c:
         3f:77:9c:23:07:88:29:91:f4:04:91:44:e4:db:77:20:c0:e5:
         71:9f:9f:27:4a:83:b7:cc:d9:c8:cc:92:19:aa:40:57:b3:f0:
         fb:88:da:29:11:6c:fe:ca:f4:77:70:fb:f3:dc:58:43:b0:dc:
         4d:58:93:8e:12:ce:62:3e:c2:4b:c9:5e:41:e0:18:0c:e5:f9:
         52:e6:4d:20:37:8a:83:6e:c0:4f:5b:9f:17:81:a0:ab:bf:94:
         2f:74:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:46:03 2026 by rpki-client