Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
File:                     UvbBEDFTJEhSvLPiO23ioWuqen8.mft (raw, json)
Hash identifier:          W3BYLOQ2o30N9yYNyHimg1pBiJFDloXRgErXXF5wdqM=
Subject key identifier:   4B:30:B9:C6:B8:B1:1F:7F:76:0D:D9:C0:79:F8:0C:04:56:1B:9C:52
Authority key identifier: 52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F
Certificate issuer:       /CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
Certificate serial:       019EB7D7ECDEAA7C6F191EAFE7526B899EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
Manifest number:          13A2
Signing time:             Thu 11 Jun 2026 18:00:41 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:41 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:41 +0000
Files and hashes:         1: UvbBEDFTJEhSvLPiO23ioWuqen8.crl (hash: MGVZh0nspmLur6jsYo734fLP+H/qS5dGmTbxSUw8WBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:ec:de:aa:7c:6f:19:1e:af:e7:52:6b:89:9e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
        Validity
            Not Before: Jun 11 18:00:41 2026 GMT
            Not After : Jun 12 18:00:41 2026 GMT
        Subject: CN=4b30b9c6b8b11f7f760dd9c079f80c04561b9c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:b7:b9:f4:7d:15:e6:3f:aa:fe:d4:07:f5:
                    f1:c4:a7:b1:0e:42:a3:09:2b:6c:0f:47:ef:97:93:
                    54:bd:7c:7e:aa:a6:0f:59:1f:b1:80:f0:bb:50:56:
                    d1:5c:ee:a5:b4:96:09:dd:a0:90:e2:73:06:61:cf:
                    7b:19:78:89:13:3c:6a:c6:2e:80:12:2e:ce:55:ea:
                    dc:e6:95:8f:5d:61:4b:24:45:f5:9a:03:03:8e:57:
                    5f:e6:36:75:95:ce:28:ea:23:e6:8f:66:d0:e2:5d:
                    ac:ea:88:0f:c3:00:51:cd:53:01:72:56:93:bf:1b:
                    8b:76:a7:02:e8:34:b1:60:49:49:7a:b2:e3:3f:53:
                    0b:a8:92:3d:54:9b:2c:4c:3c:d8:be:74:cc:b7:a1:
                    13:6a:22:1e:30:6a:26:98:4d:61:11:cb:98:89:df:
                    1f:b6:93:e0:60:bd:79:42:79:5d:d2:09:06:3a:71:
                    ec:21:79:95:90:c3:4e:c4:5e:b2:27:c8:3e:1c:bf:
                    56:2e:be:bb:3d:85:29:88:6c:e7:74:a1:85:07:3a:
                    08:b3:a3:7d:ec:46:a9:1b:8c:9d:73:06:37:94:f1:
                    32:c8:1a:69:34:37:64:7d:61:84:d1:4e:35:65:19:
                    54:db:77:da:d9:0d:e9:b3:35:70:8e:ab:3a:dd:af:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:30:B9:C6:B8:B1:1F:7F:76:0D:D9:C0:79:F8:0C:04:56:1B:9C:52
            X509v3 Authority Key Identifier:
                keyid:52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:43:e7:3f:14:57:ac:5a:af:5e:e9:46:b9:dd:5e:dd:bf:40:
         f0:7e:a9:fb:04:d5:47:6a:ca:36:37:c5:93:2c:15:67:04:4d:
         8d:cf:1d:f6:43:59:f5:41:21:10:2f:59:50:ea:99:56:b7:c0:
         85:d2:48:1d:fa:dc:eb:7d:d5:8b:30:23:e1:dc:7a:a9:31:fb:
         43:1d:ef:6e:c1:87:6f:72:81:1f:fa:54:9b:b7:61:9e:53:9c:
         9f:d6:b9:2d:fe:c6:9a:1b:a8:56:3d:08:b5:3f:d9:90:0e:42:
         c9:bc:1c:22:ae:8a:e5:4b:8d:31:ff:f3:78:09:1e:e7:3f:49:
         00:6a:23:17:da:73:a1:c0:aa:1d:98:ec:fe:c9:b3:e8:f6:18:
         2e:d0:04:f5:93:40:27:34:5f:bd:ab:fc:26:63:6f:a6:97:6f:
         c9:21:b1:5d:b4:04:6b:a4:05:94:e5:ec:b7:9c:9d:69:95:8b:
         70:1d:c7:60:9d:da:7e:26:80:6d:e2:79:3e:4d:a1:20:d2:82:
         ab:f1:61:32:d0:68:a6:3f:96:e5:6d:8f:20:ca:12:ae:4f:32:
         b1:0d:27:d7:c0:2a:65:79:d1:be:bf:5e:e3:64:a4:56:9e:24:
         5b:73:0c:4f:08:2f:30:1b:0c:82:9b:3a:a4:43:e0:df:65:fc:
         c0:4b:50:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:07:20 2026 by rpki-client