Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
File:                     pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft (raw, json)
Hash identifier:          UAL3T/s7a8HultE6myMVrZYbHQkrtF4KpdKxknF+R80=
Subject key identifier:   ED:F5:22:FE:2D:4E:A1:F8:AF:0C:93:00:31:DD:38:F4:72:82:09:52
Authority key identifier: A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
Certificate issuer:       /CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Certificate serial:       019E91DD58EC01C91D1D7B6DBD67DB5450FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
Manifest number:          2C
Signing time:             Thu 04 Jun 2026 09:01:03 +0000
Manifest this update:     Thu 04 Jun 2026 09:01:03 +0000
Manifest next update:     Fri 05 Jun 2026 09:01:03 +0000
Files and hashes:         1: fQqoytdZe3efQdtbRgKaQr_FGkA.asa (hash: oVC/eeHkYxE/OzAWRpiZywStaTtlvwubtfIZBNNN4CI=)
                          2: pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl (hash: 79vA45rc9+luvEiVQOOtGt+oDXVmgmtmJxJogbHNrx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:dd:58:ec:01:c9:1d:1d:7b:6d:bd:67:db:54:50:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
        Validity
            Not Before: Jun  4 09:01:03 2026 GMT
            Not After : Jun  5 09:01:03 2026 GMT
        Subject: CN=edf522fe2d4ea1f8af0c930031dd38f472820952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:55:ea:55:3c:6c:08:1f:fc:70:2a:69:67:
                    d4:92:89:e2:43:42:c2:93:71:a6:8b:58:23:b5:11:
                    23:3f:3c:5b:b6:52:fe:a0:34:df:af:2b:d7:ad:1d:
                    cf:fc:8b:42:c0:a4:50:d4:49:ec:73:a6:64:94:b3:
                    f4:92:52:59:e1:e0:53:a9:e6:7c:fc:ae:42:e2:d8:
                    da:37:16:20:8e:20:7a:3d:5b:e6:7a:f0:3d:49:9b:
                    78:da:7a:0c:91:42:bd:8a:3b:49:86:66:88:09:ba:
                    7d:2d:1d:78:fc:1b:84:50:07:ed:7f:62:bc:00:42:
                    36:6e:a7:ff:09:90:38:ca:15:74:8f:52:ad:d3:89:
                    54:dc:cf:31:60:fd:42:5d:00:68:f2:ce:eb:42:80:
                    43:60:a4:a6:86:43:2b:38:43:09:ca:29:b8:a3:b1:
                    f0:68:67:98:c2:ec:3f:cc:bb:26:8d:56:63:c2:3b:
                    27:e8:d3:62:ed:94:fd:d1:47:e7:57:50:fc:f3:5b:
                    0c:66:4f:39:40:6f:9a:50:cc:54:52:c4:4a:9e:ea:
                    b1:e6:d8:26:52:90:81:f4:cd:69:fe:b1:55:fd:a6:
                    6b:9c:2b:dc:15:3c:47:94:8a:6a:12:f6:1c:04:2d:
                    2d:6a:de:81:67:8d:cb:31:50:c8:d0:eb:3b:90:9a:
                    73:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F5:22:FE:2D:4E:A1:F8:AF:0C:93:00:31:DD:38:F4:72:82:09:52
            X509v3 Authority Key Identifier:
                keyid:A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c1:cb:34:ce:ea:2c:3e:4b:0e:38:e8:6d:43:02:e6:3e:07:
         03:b9:89:38:ad:45:c0:a0:ae:fe:9c:df:b2:64:c5:aa:db:3d:
         f0:87:9a:06:31:d8:2b:16:72:bf:40:39:e1:82:c7:6c:63:7a:
         63:8a:23:df:84:96:7a:a3:2d:ef:2a:ca:b6:b8:71:5f:8e:6d:
         c2:24:75:2f:93:11:58:82:f6:c5:6a:b2:3d:0a:37:e7:f4:49:
         c7:5e:fa:ed:79:e2:ca:53:8f:b2:03:f3:7a:0c:e8:57:00:12:
         6b:9e:5b:1f:d9:26:a1:89:c3:69:38:f9:1c:a0:29:26:b7:d2:
         27:81:2a:2c:39:b1:cf:5a:2a:34:13:77:15:52:42:3e:8d:fa:
         cc:6c:56:a0:bc:0e:04:86:3f:61:94:1e:da:e4:b0:39:9f:44:
         b1:fb:46:65:5b:7a:df:6e:a0:41:2c:5f:e1:37:d3:97:6d:1d:
         aa:5f:50:9b:54:ff:ce:5b:7c:46:dd:75:f8:49:39:4e:10:94:
         6e:28:00:34:e7:b9:cb:07:1e:15:03:40:60:1e:60:e1:14:6f:
         84:71:ea:84:82:16:03:8c:17:2e:7d:88:81:c2:f6:1a:ba:87:
         b9:13:ee:46:79:19:bd:7b:b9:e8:07:94:cd:4f:2a:a9:b4:17:
         25:57:b5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 17:08:03 2026 by rpki-client