Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
File:                     _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json)
Hash identifier:          QazR+y9uw7tZzBs7aBGyv9u+u4xCcBe84rfZoIuKNK0=
Subject key identifier:   DF:95:CF:65:C7:FD:A5:F0:F9:63:75:FB:7D:24:EA:F7:4E:72:23:3E
Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
Certificate issuer:       /CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Certificate serial:       019E8D929CC216D5A1994115E16C2FC04DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
Manifest number:          02A2
Signing time:             Wed 03 Jun 2026 13:00:56 +0000
Manifest this update:     Wed 03 Jun 2026 13:00:56 +0000
Manifest next update:     Thu 04 Jun 2026 13:00:56 +0000
Files and hashes:         1: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: TW3FkU5m/rxA+tAzMROz3Qnc06KH7a0ThHIdtUBWRjk=)
                          2: yncM80S6bhOyfcIc9bG9ql3nGdU.roa (hash: CZfd/HDwLXxhrOBjFBJhlZr9g1pP76QO2+w7mQygA1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8d:92:9c:c2:16:d5:a1:99:41:15:e1:6c:2f:c0:4d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779
        Validity
            Not Before: Jun  3 13:00:56 2026 GMT
            Not After : Jun  4 13:00:56 2026 GMT
        Subject: CN=df95cf65c7fda5f0f96375fb7d24eaf74e72233e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:33:8f:04:6a:73:ea:13:c7:f3:b4:07:cd:
                    59:98:72:49:46:40:83:ed:76:f9:4f:3a:2e:eb:da:
                    c2:a8:80:9e:31:ee:d7:e4:3a:12:40:57:53:d8:f2:
                    a6:d3:ea:4b:d2:d4:29:b9:8f:ce:ad:b4:c7:19:05:
                    67:10:da:55:b9:fa:31:6b:ec:3f:ca:67:f3:da:5a:
                    30:49:de:50:b2:52:bc:fc:c3:40:c7:8f:a7:ac:c2:
                    e6:8d:83:cd:8a:2e:f2:84:62:4b:70:1e:15:92:f1:
                    28:d1:d0:29:80:eb:fa:3e:53:98:59:5c:5e:b4:8f:
                    b2:ba:c6:0b:5e:13:f9:06:27:e3:ca:1c:fa:ac:f2:
                    81:d9:c4:17:0f:ce:88:7b:2f:0b:cf:62:e8:33:f4:
                    eb:66:a4:60:6b:d3:dd:34:89:63:56:e1:74:43:56:
                    c6:06:75:23:47:fa:4a:a6:89:67:bd:7d:2c:5f:d0:
                    3d:47:3a:2c:59:74:d2:8c:90:e1:e1:31:8f:21:6c:
                    90:0f:97:2b:43:81:f9:22:b0:fc:66:b5:ce:8b:76:
                    f5:df:4c:ff:37:a1:6e:80:e8:69:c9:74:b6:f5:7d:
                    f7:cb:38:63:81:80:99:6a:e7:bc:5a:96:35:ef:c9:
                    68:43:7a:86:57:3b:09:a6:e0:6a:95:35:30:25:75:
                    03:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:95:CF:65:C7:FD:A5:F0:F9:63:75:FB:7D:24:EA:F7:4E:72:23:3E
            X509v3 Authority Key Identifier:
                keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b2:85:97:63:c6:23:ff:99:a1:e4:ef:18:f5:13:ee:e1:13:
         a0:60:9d:e5:da:62:86:e5:66:64:32:a7:14:6e:d3:e0:aa:4a:
         af:d5:35:5a:5b:71:e3:f0:cc:43:6d:b4:e7:71:05:bd:92:26:
         ac:c1:06:27:07:df:a2:64:04:3e:5c:6b:f0:c8:fa:30:09:3f:
         fa:f8:63:bc:03:48:92:e9:3d:24:0a:4a:93:00:db:51:ab:2c:
         82:21:24:8b:e1:82:e4:f9:b7:e1:f5:cc:8e:7b:70:0a:58:07:
         fd:fb:8d:14:f1:8b:16:93:50:d3:ed:a7:26:15:54:2a:a8:49:
         2d:2e:05:e1:e0:a3:4a:7a:d1:1b:aa:d3:75:45:65:93:d7:0c:
         16:63:73:2f:c2:13:d5:fe:cd:98:e4:cd:0d:83:c5:0c:87:3c:
         c3:b3:33:a1:e8:7d:19:73:ec:ee:50:a3:d2:60:63:34:a9:46:
         2a:c9:49:fd:dc:22:05:18:1a:65:89:45:55:23:3d:8b:05:43:
         b2:e2:8b:dc:62:a2:7c:2f:d2:3b:40:a5:6e:28:81:cd:d0:bd:
         02:7b:04:92:6b:f2:7d:55:ce:55:69:55:e0:9d:e6:24:4c:92:
         ac:c5:0c:2d:44:21:35:81:66:2a:82:2a:fd:d0:cb:13:82:7d:
         2c:be:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:11:28 2026 by rpki-client