Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
File:                     UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json)
Hash identifier:          7vs4MtqAoygV7A6SWV165IK/lJTLpNNusUBD4rFZT0w=
Subject key identifier:   17:B5:E9:4F:63:A7:80:77:1B:94:7D:45:54:07:88:03:05:78:F7:62
Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
Certificate issuer:       /CN=530841e82aa46d9959fc7811b25795c56cd50608
Certificate serial:       019F93FF98C6A7B793BCDAB801104F15E27C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
Manifest number:          19AB
Signing time:             Fri 24 Jul 2026 12:00:28 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:28 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:28 +0000
Files and hashes:         1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: uFz0Rj6NIRxR3kek+AXe4UFG9zVya0DdKMwvGf9cWUw=)
                          2: V-wJc1_T9ZdDaXQ8Bjgp6ZwH7Ko.roa (hash: 5Q51/s2uhZseLvK62BKwJY/vcbWTvSMuqDjEqNx+KWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:98:c6:a7:b7:93:bc:da:b8:01:10:4f:15:e2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608
        Validity
            Not Before: Jul 24 12:00:28 2026 GMT
            Not After : Jul 25 12:00:28 2026 GMT
        Subject: CN=17b5e94f63a780771b947d45540788030578f762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:da:74:f8:54:20:ce:e2:12:57:8a:76:63:05:
                    db:30:bc:93:cd:db:4a:06:b3:fd:48:90:48:ae:51:
                    02:7d:30:4e:5c:2e:0a:65:a9:62:54:f9:48:43:ca:
                    f9:6f:aa:06:b8:81:66:d6:7e:c3:a6:a6:48:0b:0c:
                    09:b6:05:09:0c:7f:9d:20:4a:3d:ce:29:6e:dc:10:
                    f4:da:02:fe:3e:8b:bf:58:f4:08:08:7d:25:40:6c:
                    c9:40:f5:00:01:55:c6:6c:92:7e:46:1f:94:d1:16:
                    23:55:fb:5f:d2:d6:32:82:fe:58:57:1c:32:b2:d5:
                    b9:69:57:66:81:a5:67:aa:58:5c:55:8d:8f:87:f9:
                    08:53:b7:a5:53:56:83:4f:a9:d4:0b:55:03:ff:a1:
                    d9:e0:77:04:ac:34:72:c7:ce:bf:32:7c:64:56:70:
                    0a:74:3a:4a:85:42:f9:9c:3b:d3:18:5c:f4:bf:8d:
                    e3:93:e5:07:71:c6:bd:72:40:c2:d5:fa:08:51:e7:
                    9a:27:69:4b:b1:0e:9c:b0:99:32:ce:22:7c:f1:ca:
                    42:e1:45:01:ce:7c:53:10:e3:03:d5:7f:4e:cc:ca:
                    8f:36:bd:a4:9b:33:e6:f8:84:b5:b9:0d:b5:b1:e4:
                    97:06:71:3f:40:b5:52:08:08:74:ff:1e:c3:e1:ce:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B5:E9:4F:63:A7:80:77:1B:94:7D:45:54:07:88:03:05:78:F7:62
            X509v3 Authority Key Identifier:
                keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:fe:de:e8:2e:a6:56:69:1b:1d:67:b6:04:82:e6:0a:4a:7c:
         4b:a3:12:7b:65:86:d0:f6:7c:dc:5b:24:ec:f8:b3:cd:3e:85:
         a5:ab:57:a2:eb:4a:d4:48:06:4f:d2:ca:7d:d2:b6:f2:19:79:
         93:77:a0:50:d6:20:84:e0:f2:46:54:f2:6c:bc:c4:6a:63:c0:
         fd:ef:da:3a:3a:ac:0b:00:ad:05:d0:7f:12:fe:90:13:41:1f:
         5b:4f:6c:6f:fc:3f:cc:a8:58:b1:f8:1a:5d:14:ce:ad:82:d4:
         b5:de:17:1b:08:0c:7a:cf:10:10:e7:f3:c6:ff:c3:9d:99:e4:
         31:6b:ad:76:14:06:b6:83:f8:5f:bf:09:ee:18:18:b2:53:10:
         80:ab:c4:87:00:84:76:d4:1d:14:70:1b:c4:db:7d:ec:cb:4c:
         e8:0e:bc:80:b8:dc:a3:fd:74:92:5d:a6:0e:95:a7:53:31:e8:
         31:ed:2f:0c:0a:e1:d5:16:d6:34:7f:44:72:86:22:71:0a:56:
         17:52:6c:4a:10:af:e7:3d:bd:37:c8:1e:94:18:09:09:07:e8:
         00:3e:6e:0d:0d:ce:f6:eb:08:14:98:69:2e:96:c7:6f:76:96:
         02:4e:d3:4c:c8:74:9c:bc:1e:3a:a5:e1:d0:a1:2c:11:b5:ea:
         39:85:eb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:39 2026 by rpki-client