Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File:                     uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier:          EKwHg14opxRU5jgw69DdZnK9MTnecordZqIcCgRdPmU=
Subject key identifier:   AF:67:33:4B:EE:0B:09:01:17:49:EF:63:90:D8:65:AF:BC:B6:43:EA
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer:       /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial:       019F8EA26CFD767DFBF4C600596F59245B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number:          0978
Signing time:             Thu 23 Jul 2026 11:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:37 +0000
Files and hashes:         1: X01ZcYFwf7_4PflWuYe0HSJ1B7E.asa (hash: /ioRvSO/smZJePMAdHqGPLRi3QTdChFlRiDXfhCxQIQ=)
                          2: cYSlOixvw1IRH_A6U1PmGBfOnLc.roa (hash: ObOoQktNn2mk1CLRsAqDNu4BrgB8VABVPaTI7wXzkNQ=)
                          3: cfljug29MBdwZ2IRskxqcwdwGN0.roa (hash: RSO1UVd7bjnpUDUf4c2ob5lCf11GhEF8w59+h0O9Z8s=)
                          4: sPDYGaB0jdjNmv_RI00LaumXHZM.roa (hash: cR+r+JhOtPPtk4/8vr8rgMsCxMQVubUz6os2NddknO4=)
                          5: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: n5Tcqf4glrNPy96eCBFN5/Cpgnzzqw+VrLAtuVY8Vzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:6c:fd:76:7d:fb:f4:c6:00:59:6f:59:24:5b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
        Validity
            Not Before: Jul 23 11:00:37 2026 GMT
            Not After : Jul 24 11:00:37 2026 GMT
        Subject: CN=af67334bee0b09011749ef6390d865afbcb643ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:17:e8:76:c9:ad:09:6a:67:00:a3:9f:bc:
                    28:fa:48:a5:f6:8d:b0:68:56:52:3d:08:be:ce:5c:
                    89:8b:12:b1:fd:9f:d2:42:b7:4f:84:85:1c:1c:fa:
                    04:e1:35:38:f4:b1:9d:dc:5f:f3:70:62:d3:93:8a:
                    3c:fd:45:92:21:0b:6f:03:aa:e1:04:66:39:5d:ab:
                    f3:4b:b4:39:fd:b8:ad:7b:ea:93:b4:3f:3f:6b:03:
                    3e:58:eb:cc:81:af:d0:a1:d6:94:7f:02:e6:c5:9a:
                    01:49:60:ff:a6:18:d2:5f:1a:31:0e:a0:4e:58:df:
                    d3:f2:7c:53:af:02:ce:53:cc:20:cd:93:fb:73:07:
                    d9:6c:89:6c:c6:89:ba:9d:c1:63:52:98:e7:ff:70:
                    a0:49:6f:02:f5:bc:66:22:d1:ac:3b:5d:74:84:9e:
                    0f:57:3c:90:5f:a3:5e:3d:b6:7e:8a:88:ab:9a:73:
                    a9:d1:b3:28:d4:5a:e0:10:3b:8b:84:f2:2c:f5:f8:
                    33:be:79:19:0f:b5:b0:19:ac:16:50:5c:0c:20:0f:
                    c8:82:cd:b8:e6:42:d0:a8:05:0c:7a:d5:b4:a7:25:
                    4b:bc:97:f1:53:a8:92:5e:3a:68:b0:6f:d1:5a:ef:
                    4e:92:ff:7b:48:b4:d9:fd:35:e1:07:76:ca:25:20:
                    c5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:67:33:4B:EE:0B:09:01:17:49:EF:63:90:D8:65:AF:BC:B6:43:EA
            X509v3 Authority Key Identifier:
                keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:cb:ca:b1:ca:bf:68:d8:67:ac:9a:e8:63:74:b3:d5:d0:6b:
         b1:67:b6:7f:ac:3b:28:36:05:01:e0:b3:f4:9d:a2:4b:7c:86:
         5b:08:94:3b:14:4e:d2:c3:f1:bb:cb:da:b2:28:00:45:c7:02:
         94:95:c2:1a:58:6c:cd:5e:f1:ed:5d:4a:37:f2:86:10:f0:eb:
         6c:83:10:00:dd:72:0d:f8:07:dd:81:94:1b:10:ba:35:9d:13:
         bd:8d:91:74:f4:ac:9d:68:45:e0:05:71:bb:5e:51:2e:8e:23:
         e9:b8:b2:d6:ad:a3:a1:61:e7:27:79:d7:06:9b:85:43:73:40:
         9e:62:3b:71:64:98:5a:09:f3:18:a6:d1:4b:50:c6:b5:00:58:
         25:4a:ec:d4:3b:02:6e:a2:33:30:16:df:78:6b:50:90:21:7a:
         4c:1e:80:46:d2:76:81:bd:4c:a7:74:e7:ff:17:de:1c:d8:88:
         21:a9:3b:43:03:47:5d:ef:ec:80:fc:19:fc:a6:f9:c7:5c:ac:
         f4:fe:ce:fe:fe:86:7b:dd:25:6c:5f:f6:87:eb:16:3e:59:12:
         54:02:14:24:be:f7:42:7b:04:97:4c:b9:01:8f:7b:df:d6:73:
         f9:44:fd:8d:08:24:0a:a5:67:9b:6c:74:67:e9:a3:9b:51:b5:
         39:b2:10:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:16 2026 by rpki-client