Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
File:                     ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json)
Hash identifier:          UmylyiYnZyLdNnNsuOjPTlqBDwDPdxidSEY8LWmZDCs=
Subject key identifier:   0F:1C:48:4A:25:BD:17:31:E1:BD:CD:30:D9:7D:01:B6:4D:10:6C:7B
Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
Certificate issuer:       /CN=50b0e7157147a90ce37460b719cb760694ab5414
Certificate serial:       019EB76A4AE7E87A779C5097F31616F10ACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
Manifest number:          025D
Signing time:             Thu 11 Jun 2026 16:00:56 +0000
Manifest this update:     Thu 11 Jun 2026 16:00:56 +0000
Manifest next update:     Fri 12 Jun 2026 16:00:56 +0000
Files and hashes:         1: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: MnAZZsrerDvx5Gqayl2UWpJYWcKHf8rA8nw93pcmzvg=)
                          2: YTZnwgX1fpqLaA8u7GzOIk6ue1k.roa (hash: mBjPd/UyUtpVQP57vDWgcX+PhPNfMg70eOHjoJqEsnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:4a:e7:e8:7a:77:9c:50:97:f3:16:16:f1:0a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414
        Validity
            Not Before: Jun 11 16:00:56 2026 GMT
            Not After : Jun 12 16:00:56 2026 GMT
        Subject: CN=0f1c484a25bd1731e1bdcd30d97d01b64d106c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:9d:e7:27:a8:cc:7a:39:58:d7:dd:ad:79:
                    1c:d7:44:5a:13:e9:93:70:00:4a:c9:17:04:0f:c8:
                    9f:4c:ad:21:96:24:92:d6:83:53:da:18:b3:85:9b:
                    e6:25:06:c7:d1:3c:e6:89:37:8c:47:3e:7d:de:33:
                    30:cb:47:5f:3e:e8:29:34:22:bf:5e:f6:a1:6a:b2:
                    13:4b:ca:9a:24:d1:ea:93:34:aa:57:35:dc:ad:be:
                    dd:06:5e:b8:27:4d:52:96:14:7b:a1:90:b4:33:57:
                    c3:a2:85:57:07:c3:0e:c9:a9:42:34:94:77:ae:99:
                    17:08:48:0d:60:b5:78:b6:f6:84:4e:83:c3:7e:18:
                    f6:63:53:c8:0e:26:1a:d0:0e:ca:a1:21:aa:f9:a0:
                    47:d5:9b:cd:84:c4:fd:96:21:d8:b3:72:49:0b:e5:
                    bb:fb:66:0f:0e:e2:8e:a3:dd:31:7c:a0:2b:53:f6:
                    64:60:0d:8e:49:ca:9f:8f:4b:b1:60:9c:0c:05:83:
                    99:fa:58:51:a3:34:e5:47:1c:29:05:75:05:b9:1b:
                    bc:62:38:7d:80:23:8d:fb:d9:97:7c:b2:f3:20:d3:
                    f2:4c:06:9f:00:06:be:e2:69:35:dd:59:0c:3f:16:
                    ff:45:d2:fb:7b:21:1d:00:8d:0b:e2:3c:50:23:3a:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1C:48:4A:25:BD:17:31:E1:BD:CD:30:D9:7D:01:B6:4D:10:6C:7B
            X509v3 Authority Key Identifier:
                keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:4b:91:d3:40:a7:95:ba:0f:81:fb:cc:4c:13:f0:28:4e:
         af:5c:d0:1e:3f:12:62:e5:b0:2d:7c:da:1b:94:bd:d6:ab:95:
         d4:98:2e:4d:e2:d7:bb:59:6e:aa:40:67:5c:45:74:a4:f4:3b:
         08:84:a1:35:6f:bc:90:5a:b6:83:7b:f3:d6:bb:26:6d:ef:95:
         7a:57:6b:be:ae:2c:c7:c3:ae:95:20:31:7b:d8:e9:1c:99:8c:
         cf:fb:49:b0:e5:51:4d:a9:0f:ce:dc:d5:4b:0c:ae:2d:4b:cf:
         9d:4d:29:d8:87:71:68:48:16:0d:7f:83:c9:e6:3e:b3:04:e2:
         98:1d:ad:8d:61:89:41:40:61:2a:f0:57:a7:b8:b0:d1:4d:eb:
         e5:37:cd:c4:fe:94:28:db:20:77:4f:b7:f3:d3:6a:7f:bd:fb:
         d7:66:7c:04:6c:13:a1:bb:d6:6f:34:1d:3a:f1:6e:87:37:a8:
         87:be:2f:c3:a9:2b:fc:99:32:69:52:13:55:b9:e7:79:9d:b1:
         10:40:68:95:5b:ea:01:7e:ec:35:5a:6e:bc:13:ff:5a:75:0b:
         05:8b:b4:bb:f1:07:cb:78:3b:77:8d:d9:0a:f4:1c:89:38:eb:
         ea:25:a5:57:ce:72:3c:1a:a9:c2:31:9a:53:bc:1c:aa:85:71:
         37:f2:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:26 2026 by rpki-client