Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
File:                     UqWb8EMIAwY1n1opSR9UWwcFHAU.mft (raw, json)
Hash identifier:          EfN8XLHh6hPg14U+ukhLKj1+JzC8dv0zMV50/gKQo0c=
Subject key identifier:   F3:BA:80:10:62:48:E8:94:2D:AB:6B:AA:64:CA:68:C5:06:AC:DE:BB
Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
Certificate issuer:       /CN=52a59bf043080306359f5a29491f545b07051c05
Certificate serial:       019EB845F3C18080C26FD819B4E325838931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 20:00:52 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:52 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:52 +0000
Files and hashes:         1: Hx2Y_QxMoZhXy4e6JKX5KPRxYeM.roa (hash: 3uzaIFxXEFFxlqJhGt+PM/l/uaNGyKXUk1SwVD4qq1o=)
                          2: UqWb8EMIAwY1n1opSR9UWwcFHAU.crl (hash: nZCItIKhb1O4S0XyDqPMtOrk7XdHPFK/mWDDruXcS/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:f3:c1:80:80:c2:6f:d8:19:b4:e3:25:83:89:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a59bf043080306359f5a29491f545b07051c05
        Validity
            Not Before: Jun 11 20:00:52 2026 GMT
            Not After : Jun 12 20:00:52 2026 GMT
        Subject: CN=f3ba80106248e8942dab6baa64ca68c506acdebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:01:ed:2f:bd:2d:00:97:d7:25:e3:04:fd:
                    6c:d3:c5:66:7e:5a:e3:5f:b1:05:98:63:43:0c:18:
                    2e:57:99:76:f3:55:90:b0:29:9b:c3:a3:36:fd:70:
                    01:73:5a:b2:18:38:5f:90:cb:60:83:ed:5d:15:98:
                    e9:67:13:3f:e8:c7:5b:86:4c:db:84:99:c1:d7:dc:
                    d8:af:dd:27:ae:c9:f5:cb:46:74:e4:8a:07:72:07:
                    fd:13:d8:e6:1c:aa:6f:32:e6:8f:a0:99:c8:f4:6b:
                    93:7e:ca:5d:7d:18:c8:e7:be:de:9d:22:96:f2:e9:
                    87:15:b4:45:2b:48:3e:ca:1d:0d:79:0b:2b:65:43:
                    78:58:3c:9c:50:45:bc:ae:0c:0b:36:19:ea:82:77:
                    9a:97:a9:a2:28:43:8f:6b:99:3a:94:5d:81:87:b6:
                    97:d3:e9:45:a0:ea:9c:c7:81:4d:08:f1:ce:dc:a6:
                    d3:28:f6:6d:1c:c6:99:f2:3b:51:3c:78:81:a1:9c:
                    8b:ff:a2:9a:b7:ed:61:85:05:ec:93:1b:1e:32:fc:
                    49:20:1f:fe:fa:d4:ba:d7:1f:46:a2:d9:5a:96:d2:
                    b9:bb:88:b5:08:66:5a:d1:22:d6:e6:26:09:d7:6c:
                    b4:91:28:a2:f5:a4:a3:3b:0f:98:9d:53:43:de:3f:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BA:80:10:62:48:E8:94:2D:AB:6B:AA:64:CA:68:C5:06:AC:DE:BB
            X509v3 Authority Key Identifier:
                keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8f:ee:ab:db:08:aa:a6:06:17:8b:40:7d:2b:c5:4d:64:be:
         81:73:b6:d6:bd:b6:76:ba:a9:77:2e:03:c2:ba:48:74:bc:1c:
         24:59:2c:9c:10:99:65:c4:03:66:f5:c2:16:fb:4b:67:65:0c:
         e6:02:8b:06:43:b2:a5:e7:43:0b:f2:35:d8:57:51:c8:7c:3a:
         dc:e1:e0:b2:cd:a3:81:bb:7a:7e:70:b4:9c:bb:3e:a0:fc:b4:
         df:da:55:5e:a8:ef:0e:bd:3b:98:a2:20:6b:14:8e:50:38:19:
         d3:80:fe:fa:7d:ce:e2:f8:f2:5c:14:ca:0d:07:b0:c3:93:2c:
         c7:56:6b:29:e3:b7:4c:df:84:fa:5b:75:65:16:be:40:e8:e1:
         59:b0:8c:83:8b:99:2b:f0:94:2e:a2:38:21:ef:fe:9b:b5:c2:
         84:5e:37:81:ff:ac:59:4d:ef:8c:39:91:54:41:b2:d4:32:e2:
         6e:dd:0c:43:19:c6:94:59:b4:df:0e:ad:fe:ad:d4:93:66:6b:
         3a:ab:03:c1:02:b0:86:5d:45:65:1c:77:e5:59:25:5d:8b:6a:
         7a:39:0c:6a:77:32:e7:d8:99:5e:06:d8:f6:47:6b:03:f5:e3:
         85:aa:40:e2:d0:5e:be:5e:a3:04:c8:a5:a0:c2:5f:3f:72:fe:
         9d:9c:03:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64RfPBgIDCb9gZtOMlg4kxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTU5YmYwNDMwODAzMDYzNTlmNWEyOTQ5MWY1NDViMDcw
NTFjMDUwHhcNMjYwNjExMjAwMDUyWhcNMjYwNjEyMjAwMDUyWjAzMTEwLwYDVQQD
EyhmM2JhODAxMDYyNDhlODk0MmRhYjZiYWE2NGNhNjhjNTA2YWNkZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0EB7S+9LQCX1yXjBP1s08Vmflrj
X7EFmGNDDBguV5l281WQsCmbw6M2/XABc1qyGDhfkMtgg+1dFZjpZxM/6Mdbhkzb
hJnB19zYr90nrsn1y0Z05IoHcgf9E9jmHKpvMuaPoJnI9GuTfspdfRjI577enSKW
8umHFbRFK0g+yh0NeQsrZUN4WDycUEW8rgwLNhnqgneal6miKEOPa5k6lF2Bh7aX
0+lFoOqcx4FNCPHO3KbTKPZtHMaZ8jtRPHiBoZyL/6Kat+1hhQXskxseMvxJIB/+
+tS61x9GotlaltK5u4i1CGZa0SLW5iYJ12y0kSii9aSjOw+YnVND3j90hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPO6gBBiSOiULatrqmTKaMUGrN67MB8GA1UdIwQY
MBaAFFKlm/BDCAMGNZ9aKUkfVFsHBRwFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82ZDcyOWUtZTE2Yi00MWE5LTkwMTIt
MDE0YzcwOTc3ZDQ5LzEvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82ZDcyOWUtZTE2Yi00MWE5LTkwMTItMDE0YzcwOTc3ZDQ5
LzEvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaY/uq9sI
qqYGF4tAfSvFTWS+gXO21r22drqpdy4DwrpIdLwcJFksnBCZZcQDZvXCFvtLZ2UM
5gKLBkOypedDC/I12FdRyHw63OHgss2jgbt6fnC0nLs+oPy039pVXqjvDr07mKIg
axSOUDgZ04D++n3O4vjyXBTKDQeww5Msx1ZrKeO3TN+E+lt1ZRa+QOjhWbCMg4uZ
K/CULqI4Ie/+m7XChF43gf+sWU3vjDmRVEGy1DLibt0MQxnGlFm03w6t/q3Uk2Zr
OqsDwQKwhl1FZRx35VklXYtqejkMancy59iZXgbY9kdrA/XjhapA4tBevl6jBMil
oMJfP3L+nZwDsQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:15:30 2026 by rpki-client