Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File:                     uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier:          15lhZuIL0hsM6UoAhWeDIGfBDtD2PsUgCgXhRpdH4Do=
Subject key identifier:   AF:D5:B9:05:94:EE:FE:C4:15:21:3A:05:DB:F6:19:6E:DA:16:37:D1
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer:       /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial:       019EE69F28050220F9EC84DCF77392EBC604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number:          1971
Signing time:             Sat 20 Jun 2026 20:00:50 +0000
Manifest this update:     Sat 20 Jun 2026 20:00:50 +0000
Manifest next update:     Sun 21 Jun 2026 20:00:50 +0000
Files and hashes:         1: c8CsVa9fXYgke6S-ngSoGNntydo.roa (hash: Fwv89IU2a8LpbILl9PnyWFIyy2FdK+fO/FwW2CCp7u4=)
                          2: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: IcK9310aDjHrdweH6DrDFRkSkrR/zG0BkFcxKMJfYJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e6:9f:28:05:02:20:f9:ec:84:dc:f7:73:92:eb:c6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
        Validity
            Not Before: Jun 20 20:00:50 2026 GMT
            Not After : Jun 21 20:00:50 2026 GMT
        Subject: CN=afd5b90594eefec415213a05dbf6196eda1637d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:15:5f:f1:5e:a7:90:3e:08:4f:c7:23:2f:eb:
                    4f:b1:eb:5b:50:41:99:57:57:7a:c0:f8:8f:4d:b6:
                    96:4a:32:a6:46:d6:08:58:c6:c9:9e:a5:00:7b:e7:
                    b8:52:d6:5a:72:9d:fd:bf:93:cf:b9:31:dd:0d:45:
                    59:c8:47:a7:1c:9c:d4:f5:62:d0:df:13:b1:47:4e:
                    59:24:82:98:89:70:55:76:1b:57:ec:53:72:a6:42:
                    10:5d:a6:d8:7a:3a:31:64:c0:66:52:9d:f5:e6:7f:
                    df:32:ac:a0:4b:39:68:ef:4f:58:07:33:3f:81:a3:
                    82:90:51:51:ff:3a:47:c9:f3:41:47:62:48:b2:ff:
                    12:72:e6:35:8e:9d:f0:11:89:32:17:c2:5c:55:f9:
                    95:27:c1:01:83:2b:25:0e:18:8d:55:aa:1f:57:e7:
                    dc:b7:21:6d:d4:3d:19:9f:c2:75:9c:77:84:31:58:
                    09:83:2f:db:88:96:7c:8a:93:3c:8d:5b:63:04:70:
                    1c:f9:d0:76:8a:38:ca:41:5c:7d:b2:38:0f:0c:4f:
                    05:61:c1:72:62:2c:bc:b4:a9:93:53:a1:72:93:6f:
                    63:2e:22:b5:de:a9:50:77:44:66:78:3d:89:a9:b4:
                    1e:bc:64:6f:d4:b0:46:cf:6a:ce:d6:b5:3c:7e:15:
                    c1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D5:B9:05:94:EE:FE:C4:15:21:3A:05:DB:F6:19:6E:DA:16:37:D1
            X509v3 Authority Key Identifier:
                keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c8:78:b6:a4:fb:8e:e1:f3:9e:fb:11:28:ec:b6:5a:fd:76:
         2f:9e:c3:74:12:ab:52:0f:bf:8e:dd:47:f3:cc:54:e7:37:f9:
         01:78:98:a0:e8:c8:e2:6c:af:0f:08:52:0c:8a:e0:da:78:39:
         33:bf:0f:28:c4:bf:22:08:5f:b6:ce:e7:fe:42:d2:6c:a8:81:
         7f:bb:ef:9e:94:0b:2c:dc:90:8b:32:75:36:79:aa:9e:2a:41:
         b1:3b:d6:dd:d5:9c:ce:a9:e3:9f:c0:ad:18:51:d6:9f:ce:cc:
         d5:bb:97:59:4f:e2:37:bd:58:98:04:03:07:be:c0:fc:d5:04:
         79:c5:c3:2e:56:ec:2b:91:29:3a:e4:0a:b9:d9:0a:cd:ff:69:
         d0:d6:b3:fd:80:9c:3f:81:fc:0c:a6:b3:f6:aa:ac:a1:5f:8e:
         ab:6e:3a:9b:cd:4d:92:d1:73:f2:61:a7:e7:7f:59:cc:65:4d:
         d7:c8:c8:af:38:a9:34:09:38:f8:ef:26:f5:dd:6a:9a:b9:4e:
         4f:f1:b8:0c:5d:27:64:01:40:67:b0:7f:ea:eb:ce:9c:6a:da:
         3b:7a:21:56:39:7c:f8:95:1c:0c:f8:5d:b3:d8:b4:d1:aa:ed:
         0e:1a:65:65:9d:96:f1:5b:7d:0f:dd:63:20:74:59:ac:76:4e:
         37:9b:8e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 06:08:52 2026 by rpki-client