Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
File:                     UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft (raw, json)
Hash identifier:          gSzdrs5n7MxbaMQyJQtbw+KHbUATHQgN4nNW+VjLY8E=
Subject key identifier:   77:03:C5:E9:6C:56:5F:C0:CA:C9:B7:E4:AD:2E:71:9D:67:9E:81:D2
Authority key identifier: 50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
Certificate issuer:       /CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
Certificate serial:       019EB8B3C123251EF3449BCA0E1155982F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
Manifest number:          0CDE
Signing time:             Thu 11 Jun 2026 22:00:48 +0000
Manifest this update:     Thu 11 Jun 2026 22:00:48 +0000
Manifest next update:     Fri 12 Jun 2026 22:00:48 +0000
Files and hashes:         1: UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl (hash: zkdoyht4UXS+yvZqFxlsh6I3mE7c9H309hXaJK1qKJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b3:c1:23:25:1e:f3:44:9b:ca:0e:11:55:98:2f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
        Validity
            Not Before: Jun 11 22:00:48 2026 GMT
            Not After : Jun 12 22:00:48 2026 GMT
        Subject: CN=7703c5e96c565fc0cac9b7e4ad2e719d679e81d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:90:6b:93:e8:b6:51:33:94:c7:1a:77:12:
                    59:ee:0b:e4:eb:6e:18:3d:4e:27:60:f2:41:ec:56:
                    ae:4b:90:32:4f:7f:61:03:2f:53:da:5c:c4:a8:4b:
                    64:a6:3a:00:0f:b4:83:52:35:1d:29:f8:9f:ef:75:
                    08:c8:42:db:51:d4:74:7d:a6:98:d7:9b:e4:eb:08:
                    43:b3:f8:70:54:d8:c7:64:3e:86:c2:6d:fc:24:45:
                    7b:80:82:77:46:25:9c:16:e1:f4:3d:b2:20:a7:f2:
                    65:5e:51:0c:ab:27:d8:90:af:9e:3b:72:09:65:a7:
                    a1:2f:67:56:35:a6:6a:6e:52:f1:44:43:99:3e:1e:
                    da:4f:17:e6:f6:f8:8b:41:d0:7d:f3:32:e4:a7:1d:
                    83:7c:19:6f:7f:66:27:3a:d5:fd:fb:f9:ee:4f:16:
                    52:e6:2b:7f:d9:f6:f1:f1:7b:eb:0f:7b:24:1a:22:
                    f9:39:45:bd:56:06:0b:e1:73:c2:37:e3:62:d0:eb:
                    fe:96:99:63:38:6b:bf:38:23:ab:5c:fb:5b:da:4f:
                    ea:72:b4:fa:3d:d0:69:46:16:3b:7f:a0:25:68:7f:
                    a6:38:a7:bb:94:2d:1f:9e:8f:e2:b8:b8:4e:99:43:
                    61:e7:bf:cb:01:37:e1:c1:6f:26:8e:63:94:d5:d7:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:03:C5:E9:6C:56:5F:C0:CA:C9:B7:E4:AD:2E:71:9D:67:9E:81:D2
            X509v3 Authority Key Identifier:
                keyid:50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9e:c8:31:44:82:b6:2a:fd:59:f6:a7:ef:85:45:66:9a:1d:
         69:f5:8f:b3:a3:22:7c:bf:aa:15:37:56:96:a9:9b:68:b9:62:
         26:c1:29:cd:c6:b1:3e:20:e5:54:b8:69:19:59:df:78:3c:8d:
         28:a7:23:ad:92:60:2b:a6:9f:90:63:ab:ce:e5:c3:23:77:38:
         1c:8f:a7:77:18:d0:67:d6:43:6e:39:fc:fd:81:cd:59:5b:2f:
         54:ea:22:59:c2:36:65:d3:07:cc:d0:40:b4:e4:cf:9a:4a:69:
         2d:58:83:95:86:92:bc:a9:c8:86:13:9c:a3:ab:18:78:e9:76:
         b3:41:7a:89:1b:25:d1:9b:a7:24:fe:a2:6c:81:d6:10:ac:02:
         66:9f:99:82:76:f7:c5:7b:c5:79:8e:c5:bf:d4:da:92:53:6f:
         5c:db:0d:80:4a:05:c5:ac:9a:c4:10:b9:78:4f:af:08:e3:c2:
         10:54:75:0e:1a:dc:a3:81:5e:f7:96:f9:3e:57:2d:b4:b0:60:
         cd:be:ee:81:a6:d5:79:0d:38:ca:98:bd:65:6c:58:a8:e8:7a:
         94:be:84:f9:7f:61:22:50:0c:76:81:39:dc:6a:f6:fd:2e:45:
         0f:07:cb:bd:9e:18:87:0a:26:46:9a:e1:2f:ed:5a:f8:86:f5:
         42:f5:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:34:58 2026 by rpki-client