Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File:                     UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier:          /cJkS2ps48AkGu503RR81Q9jczwbOflv3OrNvhOCyt8=
Subject key identifier:   65:1C:74:F9:5D:ED:18:1C:EA:EF:82:3F:F4:21:89:F7:20:EE:B3:AD
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer:       /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial:       019F1A55F4689B50DC7915284E0CADF65120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number:          072E
Signing time:             Tue 30 Jun 2026 21:01:08 +0000
Manifest this update:     Tue 30 Jun 2026 21:01:08 +0000
Manifest next update:     Wed 01 Jul 2026 21:01:08 +0000
Files and hashes:         1: 84SPRa3_ewxAnHZXEwBV1kLi3VM.roa (hash: xgIumFcFLchK1z/1Csr0/oD3z8aKLtyk1tFqPTQqxyc=)
                          2: B27nWL7f9vpF233InTtbaWdT1gY.roa (hash: K0asGHISIlJb0z9vg2XL1HxPcsZDl9Isvqzrusz0DAM=)
                          3: HdV5DSl350h-lbh-TN4zh4FfqZg.roa (hash: Tf/ZSSv57NTvJyODzYy+ZLfHUFt2upVkz6yStWywhz8=)
                          4: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: cQ15Jn4Yi1xD/EdiBhpileUMkFB/ryHcR2a0vwshUlM=)
                          5: _pMAzQKRKR13xl3uGDGCl2hCPIo.roa (hash: 5qQNZWBbvk2jxeJhrao+q24FJuEwboPGan3bLmujgOM=)
                          6: hCxkK3tHuqUrY0c51_Pu1X-lD1E.roa (hash: 2q6gI5yUFT+GtMB/2xyZdJMaVjKX7qKHcOOGGZrqRFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:55:f4:68:9b:50:dc:79:15:28:4e:0c:ad:f6:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
        Validity
            Not Before: Jun 30 21:01:08 2026 GMT
            Not After : Jul  1 21:01:08 2026 GMT
        Subject: CN=651c74f95ded181ceaef823ff42189f720eeb3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:db:3c:bc:a9:02:95:49:8c:1f:e4:7a:7a:
                    db:c0:27:1a:24:1a:08:bf:fa:10:0e:22:7f:b9:fc:
                    f6:81:5f:bf:4a:3a:d9:ae:f7:84:12:e4:b9:fe:43:
                    2d:3f:b1:6f:58:36:f5:5f:28:31:a7:64:19:c5:f3:
                    ba:4c:06:b5:0c:2a:71:0d:ac:99:e7:7e:d0:cb:50:
                    ff:5c:a2:1e:28:7d:b9:82:60:df:75:3b:23:14:2f:
                    18:fc:44:37:52:ae:d0:5e:eb:3c:5b:aa:1d:4d:71:
                    39:84:ad:fc:17:3b:d8:0e:0b:61:49:67:78:fa:a2:
                    2d:e2:6b:01:4e:b2:93:71:34:84:79:f8:fd:42:cf:
                    63:bb:a2:63:84:da:46:ed:02:c8:6e:b9:b8:9c:92:
                    66:5c:a5:b7:60:94:56:75:e1:ab:dc:e0:e3:2d:b4:
                    17:d4:0d:62:76:7c:09:b5:d9:04:5f:46:1c:f1:3a:
                    aa:6f:6a:4f:b0:40:be:cc:03:40:c6:06:b7:98:39:
                    b0:6f:c2:76:26:d5:86:a9:d2:2a:fc:4a:f3:9a:07:
                    19:26:99:64:bb:58:07:96:e1:23:24:31:54:0e:94:
                    6c:67:6c:36:12:6e:d1:6a:8f:7f:ac:e5:54:f8:90:
                    18:74:bf:06:29:0a:26:d0:7f:f9:93:21:e6:48:bb:
                    8f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1C:74:F9:5D:ED:18:1C:EA:EF:82:3F:F4:21:89:F7:20:EE:B3:AD
            X509v3 Authority Key Identifier:
                keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:63:21:92:de:0c:c2:01:43:e3:fe:bd:9d:75:7b:ef:42:4f:
         ee:c7:2f:70:30:e5:a8:96:ef:e0:b9:d7:37:59:1b:78:29:1a:
         7c:24:2c:cd:3b:55:d1:1e:28:0a:64:62:6d:fe:05:c6:50:72:
         10:24:3b:0e:27:19:05:7f:03:a9:69:3f:0e:4a:54:88:77:fc:
         aa:d4:00:f7:23:47:df:d1:7a:5a:d5:6d:62:fc:9b:48:e2:fb:
         a0:e7:70:0e:b5:79:7d:f5:3f:18:d2:1b:d1:1a:27:c7:19:76:
         ae:49:33:69:bb:40:a5:f0:8b:5b:ed:18:14:96:23:16:6b:6f:
         ee:df:81:2e:00:25:ee:7b:0c:e6:3b:36:d6:9f:33:95:7e:c9:
         4f:04:78:99:b8:f9:03:9e:f0:9f:b0:2e:95:0a:85:83:7a:16:
         b1:e3:c2:c6:1e:3f:bb:17:c4:6d:1e:ad:00:c3:a2:35:92:85:
         4a:7e:ef:1f:c7:7f:fa:83:8c:07:37:75:94:35:92:57:1f:34:
         20:36:df:a5:53:07:50:8a:df:37:65:8f:d6:a1:e0:60:26:fe:
         a1:84:1e:16:c8:e4:56:73:64:b3:c3:e4:b7:53:1e:0b:f8:43:
         5d:77:8f:b9:1e:df:da:43:d8:08:84:c0:6c:e3:82:0a:b3:b0:
         af:9e:da:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:17:45 2026 by rpki-client