Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
File:                     uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft (raw, json)
Hash identifier:          jgmHv4eYVVCynnSikqAiNwN/skidIYkYKqn70UzeGCI=
Subject key identifier:   9B:9B:98:16:5B:4C:15:2A:42:A6:AB:11:C4:32:9E:FE:7B:2B:7D:21
Authority key identifier: B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27
Certificate issuer:       /CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527
Certificate serial:       019EB8EA60B63119F6BA347FC873FB3F74F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
Manifest number:          08B0
Signing time:             Thu 11 Jun 2026 23:00:28 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:28 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:28 +0000
Files and hashes:         1: uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl (hash: 0WXc4sD1XbQNODv1oyKJIBwU17AEvyYAFvPiHipggSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:60:b6:31:19:f6:ba:34:7f:c8:73:fb:3f:74:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527
        Validity
            Not Before: Jun 11 23:00:28 2026 GMT
            Not After : Jun 12 23:00:28 2026 GMT
        Subject: CN=9b9b98165b4c152a42a6ab11c4329efe7b2b7d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:68:64:03:37:fb:61:e0:11:4b:a0:73:74:18:
                    ed:36:0c:2b:96:5c:67:92:9d:6e:32:2d:9b:f1:3b:
                    ac:e9:63:d9:99:d4:3f:15:87:d9:38:d1:ab:53:fa:
                    81:d6:e4:48:8e:9a:d8:7a:ed:da:fd:b3:87:ae:ba:
                    a9:55:3b:4c:c5:fa:c5:01:1a:63:53:4e:f8:b5:c7:
                    8b:ec:4f:d3:ab:cb:3f:19:1b:6a:e3:fc:46:57:50:
                    3b:95:49:25:13:dc:04:5c:d9:78:ec:ff:60:09:51:
                    48:73:6e:71:b6:00:4c:6e:74:6b:ae:8d:f4:87:b8:
                    e5:29:10:09:f1:4e:56:97:06:6c:4d:b1:91:e6:e4:
                    34:6a:eb:53:76:2f:a2:13:e2:00:78:d8:48:2b:c4:
                    68:79:e8:5b:9f:91:79:cc:f6:9f:30:62:01:0a:d5:
                    2c:30:2f:98:10:fd:49:34:cb:cd:aa:ea:1d:a8:ef:
                    38:39:2f:f9:85:60:be:4e:e3:ce:2a:c7:16:67:98:
                    04:9c:70:91:50:cc:2b:2f:9d:f6:77:aa:c5:cd:8e:
                    3d:dc:0a:19:fe:96:fe:9c:31:45:03:a3:9e:ef:5e:
                    c6:fb:46:b6:d2:5a:fe:2d:67:7d:7a:47:06:c8:77:
                    88:a1:88:f8:56:c9:89:5a:8c:fe:c9:63:9b:8f:d1:
                    23:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9B:98:16:5B:4C:15:2A:42:A6:AB:11:C4:32:9E:FE:7B:2B:7D:21
            X509v3 Authority Key Identifier:
                keyid:B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5e:dd:39:01:c0:2c:db:d9:81:bf:c1:af:92:25:73:2f:28:
         8f:da:c5:b4:56:89:d3:18:6b:17:b2:b7:31:da:bf:70:99:9b:
         8b:6b:ea:93:dd:be:8a:05:1f:d0:a9:f2:ec:68:21:f8:d4:b7:
         00:d3:dd:16:cc:2b:48:25:26:34:b4:8c:ba:cb:cd:f7:9f:cf:
         d7:1f:1d:cb:7e:af:82:b8:54:32:f4:2f:92:2e:80:53:1c:eb:
         d5:be:94:6f:63:d4:48:04:82:1f:c6:51:77:4c:f0:96:6b:a9:
         9c:45:e8:0a:5e:63:73:ae:01:a5:e7:e3:a5:df:5e:35:24:8b:
         83:15:46:4d:9d:4a:84:d1:77:7d:da:06:77:6e:2a:6a:cb:c1:
         2c:2c:3b:ad:ac:c2:cf:e4:3d:3c:b8:76:5e:21:05:e7:98:21:
         17:2e:91:5c:d3:d6:db:de:11:df:ce:ab:89:b5:06:61:07:4c:
         85:ed:97:db:20:86:40:88:f4:52:b9:b3:5e:82:bb:b4:4b:a3:
         3d:76:38:85:60:c0:a6:a4:2b:43:74:5e:11:d2:d3:d9:9b:ac:
         44:34:95:74:11:a7:c9:f2:1d:55:b4:66:c1:77:2d:26:cc:c3:
         61:47:d3:7a:93:50:c8:d7:16:2d:bd:22:dd:44:2c:4a:99:b0:
         a5:34:ff:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:04:17 2026 by rpki-client