Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
File:                     uoGySm1gML8IjeowyaWTL-vcanw.mft (raw, json)
Hash identifier:          KUYdVcZuAqpsC0GC5iogZqlBVfXgW6OIwYJAkPc115g=
Subject key identifier:   AC:C6:0D:8B:0B:D7:D3:ED:95:F0:5B:D9:01:F8:7B:C2:8A:91:9E:F3
Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
Certificate issuer:       /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Certificate serial:       019EB958A16D99AB40D93524FB5E902B7A84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
Manifest number:          041E
Signing time:             Fri 12 Jun 2026 01:00:53 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:53 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:53 +0000
Files and hashes:         1: uoGySm1gML8IjeowyaWTL-vcanw.crl (hash: S0ilw+dKsqlAK3GNRsWrT8CO1o2MZz3LeiH9cYE5RbI=)
                          2: zl-n2q1Zb7EgYohA26XnxYXqdxE.roa (hash: BY/YVHNSQVEAmKd+rhuDTBW07jn5TB4TSJNB9lFmcSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:a1:6d:99:ab:40:d9:35:24:fb:5e:90:2b:7a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
        Validity
            Not Before: Jun 12 01:00:53 2026 GMT
            Not After : Jun 13 01:00:53 2026 GMT
        Subject: CN=acc60d8b0bd7d3ed95f05bd901f87bc28a919ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:68:1e:a8:39:56:fc:b2:27:dd:03:eb:9c:1b:
                    8d:9a:d6:8d:c7:1e:15:52:75:13:df:a9:ab:2b:fb:
                    90:09:08:f9:7d:58:fe:e7:7f:18:87:03:31:16:24:
                    ac:17:38:86:55:16:48:5e:b1:b6:d6:9b:20:59:8d:
                    29:63:ce:b1:04:d6:dd:d7:9f:b3:8a:44:4d:23:20:
                    42:e9:a1:00:78:5c:9d:2b:74:c5:1c:98:06:f8:db:
                    dc:a1:4e:ad:be:21:fc:39:45:60:f3:6e:5f:cc:b8:
                    88:b3:60:79:76:3f:c5:dc:b9:16:38:49:ff:55:e7:
                    7d:4e:3d:e8:7b:d1:fa:8f:b3:c1:b9:55:36:46:24:
                    c7:56:3e:f6:c8:ad:7d:47:99:35:f7:6e:14:20:42:
                    c2:80:f1:53:d8:42:aa:a9:62:92:e7:84:87:53:7a:
                    64:2b:b0:e5:5f:93:04:8f:44:72:ca:49:e4:7c:eb:
                    4f:96:b8:a9:2f:84:d4:cd:54:43:53:0d:74:3e:4d:
                    fb:f4:c0:88:3b:e6:b4:13:c1:03:41:92:ee:6b:9e:
                    94:68:45:d5:c2:f7:96:56:93:23:44:11:3a:cb:ba:
                    00:e2:2e:d3:d0:a5:93:16:0b:66:69:17:f1:94:20:
                    57:e6:1f:a2:79:e9:33:32:a1:a9:59:e5:2d:32:a2:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C6:0D:8B:0B:D7:D3:ED:95:F0:5B:D9:01:F8:7B:C2:8A:91:9E:F3
            X509v3 Authority Key Identifier:
                keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:69:e1:b0:9c:b5:11:3e:8d:5c:db:81:f6:f4:08:93:8f:70:
         58:06:54:ba:74:63:69:d0:2c:5c:a6:31:e5:cd:28:06:54:e6:
         58:9d:ee:db:1d:1c:b7:fa:af:7e:06:f6:76:ac:21:eb:3b:74:
         06:92:34:64:94:8f:c5:27:08:ee:a8:74:24:dc:83:23:11:94:
         b4:b2:73:de:d6:4d:0f:66:a9:fc:40:e7:15:21:58:3b:05:8a:
         4e:74:a0:57:a1:fc:22:5d:b7:06:7e:34:6f:fd:e7:06:b3:8f:
         8f:3f:c6:61:bc:76:c2:a5:ae:87:cf:b8:39:d1:ea:e4:95:7d:
         d6:f5:c4:44:e3:aa:eb:76:b0:b8:cf:cb:96:2d:d2:b0:cc:ed:
         c2:b5:b7:d4:c5:61:73:1e:42:a3:a1:77:53:7c:ed:50:7f:eb:
         e3:d2:3d:ee:36:3d:90:fb:e5:54:29:5f:35:e5:6a:72:7c:63:
         93:be:a7:a9:d2:14:b4:55:77:22:14:1f:6d:34:f4:09:65:49:
         4f:a3:db:d4:b4:b4:44:b8:ce:fc:67:86:05:98:a1:bc:35:36:
         af:49:e5:8b:8b:6d:f5:8b:85:38:54:30:4f:c5:42:41:9b:ef:
         1e:cb:d7:49:0b:8c:f6:79:a0:da:6b:bc:e6:1d:33:0d:c6:8d:
         18:0d:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:27:02 2026 by rpki-client