Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
File:                     UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft (raw, json)
Hash identifier:          0f9kaU9Qp3WyktPSnk+nCtgziCfbF5KGjX2DCu/6qYA=
Subject key identifier:   83:9A:67:ED:F4:01:4F:BC:87:63:27:08:DD:10:B3:D7:EA:4C:C6:D6
Authority key identifier: 53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
Certificate issuer:       /CN=531484d0de039f665e1f92cab311cfebc592b7a7
Certificate serial:       019EBE1143A93D13887BB0AFD582EBB1FF4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
Manifest number:          0372
Signing time:             Fri 12 Jun 2026 23:01:02 +0000
Manifest this update:     Fri 12 Jun 2026 23:01:02 +0000
Manifest next update:     Sat 13 Jun 2026 23:01:02 +0000
Files and hashes:         1: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl (hash: c5iGOzUf9j/3L1O0RlnamJ/QbM7nkMtHQd8SKjZ1Qcs=)
                          2: id4cne0ADTAlR4kVnZ7TzsVyZd0.roa (hash: STBT1Ri+KbBfmsLxotuYk9/+lHx8/xJxtwJSr3baU/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:43:a9:3d:13:88:7b:b0:af:d5:82:eb:b1:ff:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531484d0de039f665e1f92cab311cfebc592b7a7
        Validity
            Not Before: Jun 12 23:01:02 2026 GMT
            Not After : Jun 13 23:01:02 2026 GMT
        Subject: CN=839a67edf4014fbc87632708dd10b3d7ea4cc6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:62:96:7f:d9:7b:7c:e5:e3:f1:f2:64:1a:
                    e6:fb:83:57:7a:69:c1:4b:15:63:46:f4:49:93:82:
                    2c:c8:0a:f4:dc:9e:29:20:e1:8d:da:78:eb:9e:47:
                    63:e0:0b:b6:9d:ac:20:fa:6e:b4:ad:a9:de:a6:c7:
                    b5:91:3e:38:35:8b:47:43:f8:e3:0c:38:3e:6e:f4:
                    1a:03:00:8d:61:04:99:f6:d3:39:04:60:ec:c4:50:
                    ce:82:63:4f:c3:53:d1:3c:67:4f:ac:a9:46:dd:b4:
                    42:19:20:82:c4:46:97:84:ed:a3:19:e9:88:4f:da:
                    5c:84:a1:56:6e:92:12:0b:ab:e1:b4:9c:63:fa:16:
                    33:df:b8:20:8b:d9:42:df:21:1a:90:c7:c9:98:6f:
                    0c:69:84:98:37:c6:4a:7b:4c:99:fe:ab:b0:ac:08:
                    3e:f0:6d:9b:05:7c:4f:07:8b:b0:ac:c4:6b:2f:8d:
                    b3:b6:af:10:20:21:c5:58:f4:a2:b0:88:18:73:29:
                    c1:a2:c6:d8:84:95:70:dd:66:e7:81:c9:22:d1:b9:
                    ed:18:7c:fb:82:3f:42:7d:b9:da:dc:1b:b1:ae:fe:
                    f3:12:d9:31:5f:37:8d:31:ab:da:ac:70:b4:f1:2a:
                    fb:c8:0a:dd:bb:bf:e6:1d:16:39:c5:a9:22:4b:f5:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9A:67:ED:F4:01:4F:BC:87:63:27:08:DD:10:B3:D7:EA:4C:C6:D6
            X509v3 Authority Key Identifier:
                keyid:53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:31:35:8e:c7:c1:13:4f:d3:b0:a8:58:5b:b6:75:bf:f8:01:
         62:d0:c8:ce:7f:1f:17:51:24:89:d6:b6:5d:d6:e5:f1:03:25:
         5a:c1:bc:69:52:fc:e0:02:cd:ce:c9:23:e4:b4:f8:f1:cf:b0:
         47:57:a4:99:8a:24:69:77:10:28:20:ec:19:f1:11:76:e0:87:
         7f:5f:a9:f5:1b:f4:64:b8:ec:fb:cf:6a:45:1a:9c:7b:e5:81:
         79:4f:dd:e9:92:0e:da:a4:4f:7c:27:16:61:ec:02:1f:3d:7b:
         ee:46:d6:79:e4:77:df:32:c8:d9:b1:8d:ff:99:e9:07:33:c3:
         39:19:41:04:19:a1:af:36:76:06:43:c5:62:d4:03:73:01:ef:
         a1:2b:89:9b:1f:b0:0a:21:cf:05:e2:3e:de:6e:43:be:d5:dc:
         e1:a9:86:de:a8:c0:a7:7c:21:64:b5:6b:3e:50:a4:9b:45:cf:
         68:a9:49:22:fc:02:36:50:59:41:58:f3:51:51:71:57:34:c3:
         74:2e:19:a0:05:5f:04:66:ce:6d:ac:9e:e5:3a:32:a2:87:de:
         e7:3d:7a:d2:be:63:64:63:e3:79:da:92:c4:25:dc:6a:cd:5c:
         2d:8b:c4:c1:fc:b8:45:f2:8f:cc:21:99:2d:89:65:ef:de:fa:
         1c:35:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:23:55 2026 by rpki-client