Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
File:                     UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft (raw, json)
Hash identifier:          NsOYr7iavvhgmdqLqRf9cRV7o9UrhqFghx86VZfr4m8=
Subject key identifier:   71:EF:3B:AD:E5:89:73:95:EF:5A:35:0D:9F:76:1F:3E:2F:84:A6:9F
Authority key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
Certificate issuer:       /CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Certificate serial:       019EB7A14D06526963F189B5F01AC52D0008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
Manifest number:          12BA
Signing time:             Thu 11 Jun 2026 17:01:01 +0000
Manifest this update:     Thu 11 Jun 2026 17:01:01 +0000
Manifest next update:     Fri 12 Jun 2026 17:01:01 +0000
Files and hashes:         1: MA1FZ0Kd9wdwMtmBadU0hhtttm0.roa (hash: QAEnbojUEEoHhXNLCPe+Qwxb4hVhw+T32YK80jDjtFM=)
                          2: RnXeifK4Zy4z7Hr-0Qy9PPM8URc.roa (hash: HgjgyZAigQ/nEaAqI1161JCp8LT44pVwgm+Zp8Usqxs=)
                          3: StMbJtvRlQO14wUNmurXIGj_dCc.roa (hash: nRl9T6KCGuQWggl4v4cSteE2c3YQrGkaeT7wlEMK0FI=)
                          4: UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl (hash: DX9V2fs36Rzh6uKI5XnGMCUGsryJrvPB8WhU+e4maww=)
                          5: Z8pxDWhAuztTIIzKExdxnSnHjTs.roa (hash: 1hBbd5uxBcduETbV3q1xDGuzk2oS13nrjozvxJvpvno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:4d:06:52:69:63:f1:89:b5:f0:1a:c5:2d:00:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
        Validity
            Not Before: Jun 11 17:01:01 2026 GMT
            Not After : Jun 12 17:01:01 2026 GMT
        Subject: CN=71ef3bade5897395ef5a350d9f761f3e2f84a69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:d0:a2:9d:79:bc:4b:f2:a5:75:12:1d:ad:
                    29:09:69:f9:83:78:67:42:66:0b:93:85:70:f7:d4:
                    ee:a9:23:af:97:fa:2c:f7:68:38:7a:5a:1c:aa:8a:
                    69:ee:e9:2b:e7:8c:a9:dc:71:49:b0:43:95:85:51:
                    b4:c0:43:2b:37:4d:c9:72:e8:48:9f:c6:83:e7:93:
                    1f:e6:c2:76:ae:e7:ac:0e:c5:54:0a:a0:1a:04:8e:
                    cd:45:b3:8c:5b:8a:44:d1:2b:b7:2a:11:a3:3d:11:
                    fb:26:a2:e0:16:8b:31:bc:65:a8:84:69:71:fb:bf:
                    a3:44:9c:12:30:9c:6b:7e:35:4e:5f:2d:bb:4e:0f:
                    6b:aa:d7:e5:8a:dc:21:c3:29:89:56:df:00:4a:4f:
                    4e:93:34:95:ef:bc:88:e0:aa:6f:58:94:ed:4f:1e:
                    c9:97:b9:b6:5a:ce:b6:a2:1c:80:da:5a:7a:2a:6a:
                    da:2f:79:08:ed:f7:80:2d:81:24:86:d6:f1:e3:9c:
                    fb:7e:8f:9b:af:8e:2c:03:ef:76:18:da:da:a9:5f:
                    3a:01:46:78:aa:bf:92:7b:26:de:c9:be:73:ca:4a:
                    e1:42:17:b1:9c:94:d5:78:8f:a4:8e:83:97:d3:11:
                    01:f7:88:bf:e9:fb:4c:4b:5d:05:90:03:b1:de:8b:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EF:3B:AD:E5:89:73:95:EF:5A:35:0D:9F:76:1F:3E:2F:84:A6:9F
            X509v3 Authority Key Identifier:
                keyid:52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f3:39:00:5d:41:c5:1b:2b:c7:0a:d1:3c:02:70:b2:8e:18:
         ea:16:80:a8:0b:3d:4b:5e:f6:ee:e9:14:85:c6:55:29:41:92:
         3e:b6:a7:0a:34:2d:d8:17:e3:17:e0:cf:40:19:be:ea:af:37:
         b9:0a:b4:c7:6e:b6:cc:43:87:3c:76:38:01:97:18:0f:39:5c:
         1c:c2:9a:e4:98:3a:2b:d2:f1:c5:33:4b:69:d5:c3:73:85:46:
         7b:84:49:45:98:b6:d8:86:18:15:fc:7b:e9:08:02:cb:a2:5f:
         86:18:ad:83:6c:47:ea:3d:da:15:1a:55:dc:1e:b8:61:9e:b1:
         1a:ca:7d:ce:52:e8:eb:90:b1:a9:61:85:44:ae:f0:40:2d:12:
         9f:94:7a:7b:25:66:2b:b8:78:33:c0:7b:99:78:66:ba:f7:d8:
         b6:46:53:3a:32:2a:4a:16:85:63:c1:13:d4:47:ea:5a:9f:af:
         b1:50:72:bf:2d:40:2d:f4:b1:07:e8:2c:33:3c:93:b5:b6:db:
         4b:e3:c0:67:4a:3b:70:c2:9d:4b:cd:75:d6:40:28:f5:1d:e5:
         df:bb:ba:23:9f:bb:e3:cc:9f:d4:ee:99:c7:d1:57:38:41:a2:
         bf:a2:82:96:6a:d3:13:83:ff:8d:75:73:05:dd:06:8b:e8:b3:
         5f:2c:a1:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oU0GUmlj8Ym18BrFLQAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTE2NWRjM2FhZmJlMmM2MmUyNjVmZjEwNDMyN2EzZTY3
NWY4OWYwHhcNMjYwNjExMTcwMTAxWhcNMjYwNjEyMTcwMTAxWjAzMTEwLwYDVQQD
Eyg3MWVmM2JhZGU1ODk3Mzk1ZWY1YTM1MGQ5Zjc2MWYzZTJmODRhNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCTQop15vEvypXUSHa0pCWn5g3hn
QmYLk4Vw99TuqSOvl/os92g4elocqopp7ukr54yp3HFJsEOVhVG0wEMrN03JcuhI
n8aD55Mf5sJ2ruesDsVUCqAaBI7NRbOMW4pE0Su3KhGjPRH7JqLgFosxvGWohGlx
+7+jRJwSMJxrfjVOXy27Tg9rqtflitwhwymJVt8ASk9OkzSV77yI4KpvWJTtTx7J
l7m2Ws62ohyA2lp6KmraL3kI7feALYEkhtbx45z7fo+br44sA+92GNraqV86AUZ4
qr+Seybeyb5zykrhQhexnJTVeI+kjoOX0xEB94i/6ftMS10FkAOx3otcrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHvO63liXOV71o1DZ92Hz4vhKafMB8GA1UdIwQY
MBaAFFKhZdw6r74sYuJl/xBDJ6PmdfifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFGbDNEcXZ2aXhpNG1YX0VFTW5vLVoxLUo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84MGFjZWItNTBlMi00MGMwLWE4NTIt
ZTI5OGI0MWI2YzgxLzEvVXFGbDNEcXZ2aXhpNG1YX0VFTW5vLVoxLUo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84MGFjZWItNTBlMi00MGMwLWE4NTItZTI5OGI0MWI2Yzgx
LzEvVXFGbDNEcXZ2aXhpNG1YX0VFTW5vLVoxLUo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvM5AF1B
xRsrxwrRPAJwso4Y6haAqAs9S1727ukUhcZVKUGSPranCjQt2BfjF+DPQBm+6q83
uQq0x262zEOHPHY4AZcYDzlcHMKa5Jg6K9LxxTNLadXDc4VGe4RJRZi22IYYFfx7
6QgCy6Jfhhitg2xH6j3aFRpV3B64YZ6xGsp9zlLo65CxqWGFRK7wQC0Sn5R6eyVm
K7h4M8B7mXhmuvfYtkZTOjIqShaFY8ET1EfqWp+vsVByvy1ALfSxB+gsMzyTtbbb
S+PAZ0o7cMKdS8111kAo9R3l37u6I5+748yf1O6Zx9FXOEGiv6KClmrTE4P/jXVz
Bd0Gi+izXyyhPw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:01:30 2026 by rpki-client