Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File:                     1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier:          +HOHlevKSx9VBsoQnZyx/OFXSSMX7zfw4+f3yYsBLHU=
Subject key identifier:   B7:F4:14:E0:92:C2:1A:7A:76:09:70:53:38:C1:6F:6B:B5:3F:99:6F
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer:       /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial:       019E303BEA8E53EB06A1CFC9875518D47903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number:          06BF
Signing time:             Sat 16 May 2026 10:01:33 +0000
Manifest this update:     Sat 16 May 2026 10:01:33 +0000
Manifest next update:     Sun 17 May 2026 10:01:33 +0000
Files and hashes:         1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: BBVU8b8QZ1A8kWMJnAFOlizEuka7JtuYHjC5RYovAVQ=)
                          2: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (hash: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk=)
                          3: kMBoN8BIPVWo7lqtxGHBrurWvHw.roa (hash: i1cQsNkY+Ek8/EIGbv2ilZlKDr5/h3NWpJx8CDdeQnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:ea:8e:53:eb:06:a1:cf:c9:87:55:18:d4:79:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
        Validity
            Not Before: May 16 10:01:33 2026 GMT
            Not After : May 17 10:01:33 2026 GMT
        Subject: CN=b7f414e092c21a7a7609705338c16f6bb53f996f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:41:32:b0:94:e9:ba:2d:11:98:c9:bb:5c:
                    e6:63:b7:8f:b5:9a:92:7c:c3:98:49:b6:b6:98:69:
                    a9:69:f0:be:79:61:fc:33:8e:ea:eb:de:2f:8b:80:
                    b0:48:37:7c:55:86:15:dc:4c:d0:73:59:e2:67:2f:
                    db:48:4e:6e:9b:7c:e1:59:cb:78:57:f5:9c:84:b0:
                    3e:63:42:f3:b5:6f:5e:dc:07:ee:a4:09:72:a6:91:
                    81:0f:b6:2f:20:77:2f:8d:f4:01:e2:e3:6c:8c:7e:
                    68:f2:6c:b6:fe:7c:9b:20:f5:49:38:4a:9f:f2:eb:
                    26:db:57:34:33:a9:bc:d5:80:99:4c:db:fd:64:5b:
                    9b:13:19:20:1d:f2:fd:a9:d3:df:7e:22:6f:0f:5c:
                    af:b8:73:8e:cf:4e:c2:c2:c3:94:c8:25:56:da:6a:
                    d9:92:4c:81:3b:f1:45:da:25:a9:39:5f:31:61:47:
                    b3:03:3b:eb:37:db:92:4b:5c:0a:cc:1b:42:41:50:
                    25:b7:cd:c7:ba:19:a6:34:f7:5e:c5:b8:6c:d7:25:
                    c5:af:99:3e:23:4f:ee:0a:76:f4:43:11:d1:80:6b:
                    76:06:01:f9:61:87:9d:1c:02:ab:71:cd:bb:e8:f9:
                    3b:09:0c:5f:a7:83:eb:7b:10:10:e6:ba:a7:41:01:
                    92:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F4:14:E0:92:C2:1A:7A:76:09:70:53:38:C1:6F:6B:B5:3F:99:6F
            X509v3 Authority Key Identifier:
                keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:ae:78:59:bf:ca:a4:77:15:3f:e9:6a:11:cd:47:59:bf:
         eb:7c:c9:65:f5:8a:ba:63:6f:92:35:a4:a9:81:ae:04:b0:40:
         9e:6b:06:c5:d2:37:b5:c4:ae:11:ba:14:0e:3c:60:fb:83:25:
         f1:65:ce:01:15:14:5c:e2:c4:a8:68:e5:37:9f:62:8d:61:df:
         c2:44:5b:81:96:7b:ad:54:27:6e:97:5f:9d:bb:b2:90:16:a4:
         00:aa:61:10:4f:6e:7a:8a:92:0e:2a:28:33:0a:60:c0:3c:48:
         33:6b:9c:6d:1e:fe:9f:09:6d:82:cb:98:48:13:a4:5b:c6:dd:
         0e:d4:f2:f7:d6:e9:69:8e:b8:c7:2f:9e:0e:23:8d:5b:f8:19:
         51:0b:e5:aa:27:b1:56:7a:cc:77:57:26:bb:71:c5:02:44:f3:
         02:d1:59:8a:09:15:30:aa:c8:ed:d8:8a:d5:f2:b5:2d:2c:b8:
         bb:db:1a:29:dd:1d:d3:d2:06:7e:11:32:0f:7d:c6:93:07:20:
         09:0e:dc:c0:12:fb:8b:ba:c4:61:dd:c8:be:29:96:9d:65:9a:
         c4:ab:62:81:a9:41:34:4d:af:de:a2:20:60:23:e0:bf:c4:cd:
         e6:93:da:c3:0d:fc:c5:d0:b3:8b:4c:ec:aa:31:c1:17:d5:fe:
         7f:da:22:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:07:25 2026 by rpki-client