Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
File:                     uHLaD5xsVoaj257hJKmQQrCogtE.mft (raw, json)
Hash identifier:          +G9RnizAWZpUmeJKC7SC2FRUb6CDqrqDX3VOrsBv5mU=
Subject key identifier:   E5:6B:09:37:44:84:00:E5:E8:59:5F:1D:85:26:82:12:BD:65:1A:48
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Certificate issuer:       /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial:       019EB68E7422E28B0DC0908F4E3B139F282B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
Manifest number:          1954
Signing time:             Thu 11 Jun 2026 12:00:49 +0000
Manifest this update:     Thu 11 Jun 2026 12:00:49 +0000
Manifest next update:     Fri 12 Jun 2026 12:00:49 +0000
Files and hashes:         1: 4i8l1Q-FIgnv4ElEMlL-rxdJK5Q.roa (hash: FSXcacLcS9NFl9QL5QX0dsKZrr4j/cA0RvIb9VXgClE=)
                          2: 5z2ugNN4RBvN-s8lDFfAdlsr0vM.roa (hash: +MFvjCgMQZKr4AK37XrGX62GkhpOrU8EW9hs8ZLbdbE=)
                          3: 91jzPpyhLA-PAXeNm7LV01McVYk.roa (hash: zVfFgQK9yW19axQR7Z9c3CenPU09qBELr2O2n+U7UAs=)
                          4: uHLaD5xsVoaj257hJKmQQrCogtE.crl (hash: Pv18MnuMNLU17tzEjk1yNVTFyu//ycTZ27wY5XtfYa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:8e:74:22:e2:8b:0d:c0:90:8f:4e:3b:13:9f:28:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
        Validity
            Not Before: Jun 11 12:00:49 2026 GMT
            Not After : Jun 12 12:00:49 2026 GMT
        Subject: CN=e56b0937448400e5e8595f1d85268212bd651a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0c:56:d6:0e:ba:62:06:d3:54:a4:19:a7:61:
                    dd:76:6e:82:24:b0:eb:9a:06:71:e3:aa:28:25:6e:
                    57:70:7e:75:65:ca:72:ac:4e:a0:75:3c:dc:79:f3:
                    18:52:96:e6:b0:f0:a8:9d:04:25:a3:57:95:12:fc:
                    93:e9:10:fa:7b:8a:69:a2:c5:f4:7a:7f:68:80:fe:
                    f5:2f:6c:0b:50:3e:a4:f6:7b:fe:e5:8c:7c:7f:f3:
                    5a:d0:36:1e:32:4e:4c:16:cc:7c:f5:2f:49:71:54:
                    91:38:65:5d:9a:fd:27:a8:12:c6:12:a9:44:a0:b8:
                    0e:1c:06:1f:3a:db:79:9e:9a:db:47:4d:6a:ac:d8:
                    42:ac:82:97:4a:79:ce:d1:eb:aa:bb:d0:4b:36:02:
                    65:5a:04:59:f2:42:72:49:1d:60:43:84:fa:3f:04:
                    02:db:2a:32:17:61:21:3a:cb:65:86:97:23:2e:73:
                    1b:25:10:3b:84:a3:e0:7b:79:ac:a1:d5:3f:24:4c:
                    62:1c:4a:13:35:5f:13:01:b7:6a:5f:80:94:04:f0:
                    79:b9:ef:67:32:8b:5f:03:6a:e2:f7:65:0a:cd:85:
                    fc:68:b4:3f:59:0d:73:fc:8d:04:1d:53:11:c3:6c:
                    ae:59:d9:5c:8c:b8:8f:f3:63:d9:0b:22:d2:4a:71:
                    cc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6B:09:37:44:84:00:E5:E8:59:5F:1D:85:26:82:12:BD:65:1A:48
            X509v3 Authority Key Identifier:
                keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c0:dc:4b:03:73:b8:f6:41:b0:d3:b2:75:1c:79:d8:68:be:
         fc:ee:2f:23:02:8d:94:58:e4:e8:31:de:dd:a1:36:a9:07:a7:
         5d:ef:39:35:c1:5a:12:75:e5:2b:a7:d1:1d:b8:74:cc:96:02:
         94:60:60:7e:62:a0:b9:5c:ca:c6:8a:1c:b6:71:8a:18:49:38:
         b8:6a:47:31:f4:d1:83:ee:ba:e8:15:a6:cc:69:8d:23:52:dc:
         9f:a8:a2:f3:f7:f4:79:93:cc:6c:31:1d:b5:46:9d:ec:24:e2:
         34:39:af:f5:40:f6:02:e0:00:ab:f2:d0:07:f3:13:87:f8:93:
         32:62:b5:00:a3:00:2e:a0:86:da:b9:fe:ec:58:2d:46:b5:32:
         8a:d9:4d:54:de:0e:0c:30:d2:6d:8b:ef:fc:f8:c0:18:a9:10:
         da:02:57:d4:29:35:7c:89:b7:ec:e5:86:ed:89:87:d9:81:ce:
         13:eb:f7:b2:3d:76:9c:68:d0:b6:6b:7a:69:ab:9a:ec:eb:5b:
         9a:27:c9:3d:f0:55:73:39:1b:76:18:c3:b1:18:67:79:2b:1f:
         01:79:8f:aa:e7:09:43:f0:77:5b:26:18:63:a1:50:f6:4c:6f:
         fc:68:1a:0e:d0:6a:f9:5d:88:24:93:f8:86:ff:d9:57:4d:22:
         24:05:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:18 2026 by rpki-client