Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
File:                     UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft (raw, json)
Hash identifier:          2hjZSQjerH0O8I5IOxUg5K0wvcVwWblOunbLFj4QLZQ=
Subject key identifier:   7D:04:AF:93:3C:56:96:F1:5E:6D:A2:A1:A5:8E:9C:2C:D9:0A:12:12
Authority key identifier: 50:10:9C:EA:34:8A:09:D3:90:17:0B:2B:50:FD:4F:2F:4F:A0:C0:71
Certificate issuer:       /CN=50109cea348a09d390170b2b50fd4f2f4fa0c071
Certificate serial:       019EBB0FA375FBE8965A9C5621C9528EC3F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
Manifest number:          53
Signing time:             Fri 12 Jun 2026 09:00:24 +0000
Manifest this update:     Fri 12 Jun 2026 09:00:24 +0000
Manifest next update:     Sat 13 Jun 2026 09:00:24 +0000
Files and hashes:         1: UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl (hash: w/MzZHA1hxqN7ImdZ7C+lJmdWbRkkxqgv4pgjy4BpeM=)
                          2: VlDvPryAuk2PGBFGwuY-gCe_F5A.roa (hash: TJR1bUgs/pW0JpJ4B506N0MthyLFTUA8QuoRDNEKpko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:0f:a3:75:fb:e8:96:5a:9c:56:21:c9:52:8e:c3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50109cea348a09d390170b2b50fd4f2f4fa0c071
        Validity
            Not Before: Jun 12 09:00:24 2026 GMT
            Not After : Jun 13 09:00:24 2026 GMT
        Subject: CN=7d04af933c5696f15e6da2a1a58e9c2cd90a1212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:45:56:b1:53:21:25:2f:4e:1b:89:14:85:
                    36:49:25:8c:b4:a9:9f:26:cf:4a:b4:d8:9e:68:16:
                    a2:e0:c9:f6:b5:14:17:12:50:2b:87:24:62:98:78:
                    f7:20:3b:74:2d:9b:9d:bf:e8:96:01:23:4f:1c:af:
                    60:f3:8a:cc:e8:ab:e5:aa:ee:49:44:ae:1a:b6:21:
                    5a:22:6e:5e:a6:d7:14:80:fa:85:1b:13:a5:f7:d3:
                    46:66:2c:28:44:64:3d:b7:2f:dc:51:b8:f8:de:8d:
                    95:f6:64:ac:c9:05:5e:ee:7c:19:03:a5:fb:79:33:
                    71:62:71:b7:01:4f:e2:47:ed:c7:18:24:5e:a7:d6:
                    69:31:36:1e:18:45:0c:79:14:1b:48:01:65:d9:a2:
                    83:a9:e1:3a:62:b0:04:1f:cc:63:57:2a:9d:b9:9e:
                    3a:f5:b4:a8:72:6f:74:88:f6:c5:46:51:9f:85:58:
                    f7:9c:b6:ff:79:25:23:b2:16:73:47:5e:12:8e:95:
                    c1:72:09:01:3e:a8:19:3c:16:9e:73:f1:19:ee:88:
                    aa:1c:3d:37:35:d8:3f:29:db:1b:cd:ed:8b:c3:e5:
                    d3:71:1a:ff:35:08:c9:14:f2:a2:4f:a4:1c:04:da:
                    3f:a8:63:49:52:b1:42:34:23:86:60:be:76:19:be:
                    d9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:04:AF:93:3C:56:96:F1:5E:6D:A2:A1:A5:8E:9C:2C:D9:0A:12:12
            X509v3 Authority Key Identifier:
                keyid:50:10:9C:EA:34:8A:09:D3:90:17:0B:2B:50:FD:4F:2F:4F:A0:C0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:24:14:e2:36:2f:8b:92:b8:9c:a1:1e:eb:f2:4f:3f:27:17:
         8a:3d:64:67:42:e9:7b:bf:a8:31:b7:46:8f:a4:36:80:af:b6:
         90:e6:95:cc:76:f7:f7:99:7e:33:98:40:d5:5e:a2:ed:e5:09:
         91:82:af:9b:e3:84:93:15:5b:35:8f:7b:dc:c0:08:d6:12:20:
         eb:32:ca:65:7d:94:19:e1:73:f1:c9:78:a3:22:a4:52:26:40:
         b9:ad:06:d9:a4:66:cc:3d:f0:5a:e9:58:bb:c6:27:c4:2a:dc:
         5f:6d:a5:6a:a5:65:23:73:0e:d6:4f:7f:42:80:d8:c2:1a:47:
         99:37:5d:1e:48:c4:f3:f7:0f:2f:e0:26:22:42:43:3b:af:14:
         ba:9c:4b:d3:ca:73:92:19:77:22:6e:21:28:f7:2a:ee:2d:a8:
         9b:21:11:a8:0a:c7:fb:7a:38:dc:57:1b:26:60:e4:2f:f2:95:
         90:99:2b:82:d1:ce:8b:b6:8a:0e:d3:de:8b:9a:d8:ad:cd:5e:
         4b:eb:58:1d:ea:be:6d:da:af:76:95:93:43:35:8a:0d:d6:82:
         11:75:3f:b0:4d:10:7e:fa:ce:4c:11:28:35:e3:10:49:c1:bb:
         a9:6a:65:b2:9a:54:9e:73:75:55:b9:be:bd:d8:9a:3d:79:cd:
         43:66:55:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:18:35 2026 by rpki-client