Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
File:                     UYnbLl9XTdoOPBfjldXwW2YlTsU.mft (raw, json)
Hash identifier:          exitDQu2EjiWig+zqzbCOh8GvgwpSN+JSdedPnMIvgg=
Subject key identifier:   87:28:CA:25:E2:72:68:F5:CB:2D:C8:C7:9D:0F:89:2B:D1:F1:9B:CE
Authority key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
Certificate issuer:       /CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Certificate serial:       019EB76A297AC470B2168A3CE633990B3A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
Manifest number:          103D
Signing time:             Thu 11 Jun 2026 16:00:48 +0000
Manifest this update:     Thu 11 Jun 2026 16:00:48 +0000
Manifest next update:     Fri 12 Jun 2026 16:00:48 +0000
Files and hashes:         1: Lx0GZ21TiR4ew8qj_wZ5bar6vug.roa (hash: lf4lQFDrnk5VRiTZ4XBPmQTyhm8ggaJBhIQsymhNxRU=)
                          2: UYnbLl9XTdoOPBfjldXwW2YlTsU.crl (hash: YS0a2ypmVylpzS1NHQ/rMHG3pYgtSIzBRZPRNAYEy0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:29:7a:c4:70:b2:16:8a:3c:e6:33:99:0b:3a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
        Validity
            Not Before: Jun 11 16:00:48 2026 GMT
            Not After : Jun 12 16:00:48 2026 GMT
        Subject: CN=8728ca25e27268f5cb2dc8c79d0f892bd1f19bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:f7:f6:2e:09:d8:f2:37:43:6b:d8:e3:d8:
                    ab:61:7b:5d:80:aa:10:54:36:3b:90:ce:28:12:9a:
                    1b:36:10:25:e4:af:0a:de:24:15:fd:73:06:e5:62:
                    a1:e2:b0:92:c4:9a:1a:cd:3b:b6:56:d9:31:61:30:
                    a7:ee:6f:0b:7c:1f:8d:7d:90:69:47:cc:2c:c8:8a:
                    70:4e:37:7c:3d:43:87:d5:66:03:08:8b:c2:84:f7:
                    77:34:5f:04:29:72:4b:df:a1:6c:6c:25:0d:b8:48:
                    dc:1a:57:98:4a:16:e2:52:93:78:84:e4:ca:93:19:
                    5c:51:22:25:5c:9a:a9:9e:ca:25:91:43:d3:6a:99:
                    12:a3:0d:03:5f:1a:7b:b2:61:4b:2a:df:c7:e2:2b:
                    6c:e5:9e:3a:6c:b9:b7:68:55:90:a2:bc:dd:6d:dc:
                    d6:7a:95:7d:08:a1:83:66:d9:a3:1e:ce:3a:90:6a:
                    36:af:85:a9:a9:ee:83:25:d2:71:a7:8b:62:c5:80:
                    38:7f:7c:c3:48:a7:41:6e:c8:a3:ae:9a:3d:ad:6a:
                    c7:53:30:19:0f:78:1a:a5:59:08:09:68:8d:6e:29:
                    7f:74:c9:13:3f:5e:83:10:3e:9f:d6:9c:ea:dd:29:
                    32:e8:21:d5:bc:aa:86:cb:d6:0e:37:2f:47:89:57:
                    e1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:28:CA:25:E2:72:68:F5:CB:2D:C8:C7:9D:0F:89:2B:D1:F1:9B:CE
            X509v3 Authority Key Identifier:
                keyid:51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:bc:8a:cd:da:c6:eb:b4:d5:29:52:84:95:7e:45:12:38:ca:
         1e:8e:60:26:84:d8:2f:ad:b3:c1:49:5e:e3:71:b9:f2:90:17:
         7f:48:2e:6b:1d:ad:cb:ec:b8:da:5a:64:7b:20:b1:68:fb:11:
         21:a4:ab:5e:5c:89:6a:4c:03:59:bd:0a:8c:b3:eb:66:37:4a:
         ee:4c:f0:53:c7:85:ee:45:b1:df:9b:de:56:97:74:76:e6:1d:
         e3:72:5b:2e:6a:f1:3e:5c:f5:a4:e4:c7:48:94:a1:8c:ea:3b:
         d9:3a:b0:05:7c:09:65:46:53:e9:ab:11:37:5b:7b:d2:91:cc:
         73:52:7f:44:f3:53:77:be:bb:7f:1f:79:2e:da:4d:4c:66:26:
         6a:fc:cf:2f:6f:83:c2:e3:0b:7b:d5:25:8f:d8:ba:ef:3f:62:
         7e:67:2a:24:89:23:de:03:e2:1a:ee:9d:f8:bd:05:5e:b6:58:
         26:d2:08:2d:70:fb:f0:f0:9c:d3:59:a2:08:0a:8c:40:da:4c:
         6d:e3:a6:74:80:d6:3d:f9:d8:a4:c6:4a:fd:5a:ab:98:09:40:
         51:57:e5:69:af:56:6a:21:8b:82:7c:be:91:f1:1e:03:7a:cc:
         07:f0:ce:09:f6:42:78:3b:a2:70:35:6c:83:6b:26:42:eb:54:
         2c:24:d3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:19 2026 by rpki-client