Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File:                     UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier:          kz7buRnYZbLyVtSk4j0D3PiTUY3D6TOgdxv6OZwg4yA=
Subject key identifier:   BE:3B:3C:1D:77:C9:10:2C:BB:92:DD:12:3D:E1:CF:0B:32:8E:1A:71
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer:       /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial:       019EE2548EE0CBCFF4BB21CA4383A8D93ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number:          089F
Signing time:             Sat 20 Jun 2026 00:00:52 +0000
Manifest this update:     Sat 20 Jun 2026 00:00:52 +0000
Manifest next update:     Sun 21 Jun 2026 00:00:52 +0000
Files and hashes:         1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
                          2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: EGkSNwqZEFQFuSLR+pWYIsXo3SjadK4TOcScGMYqfC0=)
                          3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e2:54:8e:e0:cb:cf:f4:bb:21:ca:43:83:a8:d9:3e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
        Validity
            Not Before: Jun 20 00:00:52 2026 GMT
            Not After : Jun 21 00:00:52 2026 GMT
        Subject: CN=be3b3c1d77c9102cbb92dd123de1cf0b328e1a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:27:93:13:84:7c:f1:be:56:31:87:ab:77:45:
                    34:65:63:f2:ff:ae:fd:ad:7c:a2:75:20:85:2b:0b:
                    95:c8:c9:2c:3b:11:e2:52:4b:93:86:73:9f:b5:4a:
                    90:51:af:fd:8c:f8:35:3e:39:a6:34:54:3c:49:f4:
                    9c:85:13:2b:6a:16:af:7f:cf:12:87:85:ee:ed:2f:
                    40:ad:93:73:6b:27:48:a2:42:af:35:5d:62:ab:a3:
                    c0:21:56:32:0d:27:23:be:c0:0f:0a:48:d7:0b:95:
                    0e:8f:ad:bc:66:14:28:e9:24:05:33:0e:78:25:43:
                    2c:6e:ea:d4:b2:b0:72:69:8c:34:19:98:e3:aa:30:
                    fe:48:93:50:8d:09:bb:9f:19:79:90:c1:98:e7:0c:
                    18:e4:4f:5a:ec:73:f6:d1:cb:f6:50:ab:27:8e:44:
                    5d:c6:9d:01:31:50:50:cd:1b:5a:43:5a:41:43:b0:
                    c1:28:de:96:b4:b3:23:4d:81:c4:18:ee:94:6c:05:
                    27:21:a7:4a:a2:18:f5:1a:37:c3:d4:c2:dc:79:1a:
                    c1:5e:97:31:5b:13:41:b4:c1:1b:79:18:a5:48:dc:
                    99:5c:3e:ee:5c:7c:b0:c7:0d:7d:e4:a9:72:3d:7d:
                    f3:44:fb:73:8c:90:33:83:89:73:bf:6d:ae:d2:48:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3B:3C:1D:77:C9:10:2C:BB:92:DD:12:3D:E1:CF:0B:32:8E:1A:71
            X509v3 Authority Key Identifier:
                keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:23:f6:1a:d9:7c:34:88:bd:d3:28:77:89:82:e5:1f:80:f3:
         d3:03:23:ad:25:9c:00:49:71:f9:19:8f:bf:46:34:fa:6f:0f:
         14:66:7d:1f:63:7b:80:40:18:88:a1:53:55:fd:e7:6e:2f:67:
         d8:08:52:31:fc:cb:5a:97:bf:13:79:6b:0e:a6:f6:40:2f:b8:
         37:c7:8e:cb:ef:d8:c8:f2:e1:19:5f:7b:c9:32:10:db:6d:7b:
         31:bd:bb:e3:27:6f:bd:07:fa:4a:49:8a:01:f0:d7:89:3c:1f:
         07:e6:10:e2:c3:f1:2b:03:87:e3:5c:d2:5b:5e:40:49:14:aa:
         6c:dd:e7:c8:1e:c7:ec:95:74:4f:fd:16:ca:d5:61:8a:c4:d3:
         5c:10:6e:85:6a:41:85:23:69:7e:b2:ac:17:1f:b6:26:e6:a5:
         08:6a:0f:75:fb:8a:36:89:6d:f0:34:2d:32:66:bd:75:fa:40:
         58:2d:09:af:68:45:49:3c:fc:58:c1:06:d9:7c:71:7a:9f:76:
         e9:d1:79:4d:bd:48:2e:68:5a:77:a1:81:f6:ce:3b:32:34:7b:
         48:fa:40:cf:65:fe:c6:2e:04:f9:54:66:5f:ce:ea:c6:14:30:
         41:ca:06:5b:66:99:d3:e4:a0:82:2c:06:d7:cc:c4:91:08:b3:
         09:33:e1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 07:31:01 2026 by rpki-client