Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          n+IeP+vINDexuhQEpOKVzEYAb/Hoi32ieRLsjOXcgG8=
Subject key identifier:   59:9F:DA:34:02:07:53:0E:25:FF:B0:7C:30:88:E0:B9:67:DA:99:89
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       019F08BD1E44094C8BB5CA7563C940CE0935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          198D
Signing time:             Sat 27 Jun 2026 11:00:39 +0000
Manifest this update:     Sat 27 Jun 2026 11:00:39 +0000
Manifest next update:     Sun 28 Jun 2026 11:00:39 +0000
Files and hashes:         1: 0d6SiGZ_3HskVJZrwW4LAUnPhVk.roa (hash: sH5j+6BmvxKro4kCtZa6p73msltGzoMgNQq57Mh0jXE=)
                          2: GBJMnjMbFvL5E-lL9i3lBFi6nWY.roa (hash: SL+iSObRv/yIgCUc1iePoCbQgwvJ0km8l952y/nYPkY=)
                          3: IY7fhcpZn8V1nFJzcjkAB2G_wy8.roa (hash: kypNUV6hOKnyhwHaYDOZf/jJOmWZK2acEUl1kQxKdoM=)
                          4: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: WeN0sqmrXNcfq9uJBIPK8vPrx+W85LAafU32W5mqFuI=)
                          5: ZDSwaO2zu2qpiNoQdfHO9f__qXE.roa (hash: /yuwN8mjkUUOdBbxmmKWCbuEc9CKVHYeB+reIdnpnsM=)
                          6: qfnbY9JngbTP144k13tCg-IRl3w.roa (hash: 9MKZ2wZQrvJYgyQxGjaYnWmRu2eM+70F1EApasiltnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:08:bd:1e:44:09:4c:8b:b5:ca:75:63:c9:40:ce:09:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Jun 27 11:00:39 2026 GMT
            Not After : Jun 28 11:00:39 2026 GMT
        Subject: CN=599fda340207530e25ffb07c3088e0b967da9989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:19:a1:94:58:da:92:37:e1:1b:07:06:eb:
                    b8:41:2b:68:5f:f8:12:96:ca:0d:72:5d:e0:87:66:
                    54:6c:55:01:14:ec:1e:16:e0:f6:04:6c:b8:cc:98:
                    8d:fd:9c:95:7e:d8:7c:06:81:34:7d:4f:4a:a2:fe:
                    8f:2a:7a:1c:92:5c:e6:75:71:13:24:5a:e0:a5:c1:
                    ff:10:13:9a:16:c4:02:95:f0:38:5a:f2:f2:34:e3:
                    0e:ed:5c:dd:ec:f1:4e:f7:ae:29:aa:a3:fd:32:9f:
                    5d:22:47:b1:37:ed:0c:3b:b8:7c:30:0c:e5:6d:bb:
                    23:f2:fe:57:8d:f6:0b:62:11:1a:e6:fb:5a:29:f2:
                    44:ef:38:15:fc:df:80:57:47:90:f5:ff:34:4c:9b:
                    a7:1b:3f:8d:2c:32:bc:2b:44:6b:ee:b7:28:f1:a9:
                    2f:b5:6b:7e:72:10:09:ad:6a:b9:40:22:a8:21:4e:
                    99:bc:06:91:95:39:01:0a:86:41:c7:cf:2c:c0:f8:
                    51:f1:67:ce:60:f6:ab:a2:ad:ce:e0:39:15:a7:ed:
                    0b:db:7b:f5:5b:13:c8:98:d3:ff:07:c1:85:61:93:
                    3f:e3:07:f4:81:f5:02:ca:63:19:0e:5c:48:a8:b3:
                    01:53:48:fe:1d:d8:4b:fe:da:13:e1:2b:24:da:cc:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9F:DA:34:02:07:53:0E:25:FF:B0:7C:30:88:E0:B9:67:DA:99:89
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ed:bc:27:e2:d5:54:ef:56:ae:20:f4:c9:e8:a9:07:1a:85:
         43:e4:d2:c6:5b:a3:e0:74:0f:19:9e:71:49:6f:27:0b:7e:3c:
         6b:6c:f0:6b:ba:0e:7b:48:5e:55:9d:98:32:39:98:17:4f:8d:
         a9:23:69:38:85:bd:8d:80:e3:19:87:14:f6:59:6e:6d:c9:31:
         ff:73:95:2c:8d:f7:6f:ba:53:66:35:29:9e:b3:72:47:27:39:
         be:8b:a3:bd:9f:09:89:30:4e:f2:ac:1d:c2:c5:d8:ee:94:b2:
         96:59:f2:a7:45:a8:db:95:16:cb:65:e5:1c:e7:cf:df:6c:66:
         6a:16:54:e9:5f:ae:5e:cb:95:08:d9:08:76:4b:f9:ef:14:23:
         92:9a:56:8d:36:65:dd:42:d6:8e:7f:ff:eb:77:c0:85:a3:0d:
         66:4f:f5:78:2d:d4:81:23:02:cb:f9:76:34:7c:15:08:c9:39:
         2a:10:b2:b1:f7:d9:35:44:97:9f:32:fd:95:15:df:86:b2:c1:
         8d:fa:a9:90:1b:7a:8a:ac:4e:33:d0:b3:5d:71:b4:61:e7:01:
         b7:90:a5:c4:a5:0b:3a:60:1a:26:99:5b:84:14:43:66:9e:d5:
         08:e0:47:64:23:48:cb:bf:a7:05:e8:40:57:74:a8:63:aa:98:
         b9:a2:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 18:48:16 2026 by rpki-client