Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
File:                     UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft (raw, json)
Hash identifier:          eSjwhYkjAym3pbjXN8X0ZQ+kKTmaTspJYksuhnB9rFI=
Subject key identifier:   08:B6:29:D5:8B:6A:02:1D:30:A9:27:B9:6E:23:18:A0:4A:4D:13:38
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Certificate issuer:       /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial:       019F9022FC5B4029FA5F82E73B4AE5B0E925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
Manifest number:          12
Signing time:             Thu 23 Jul 2026 18:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:39 +0000
Files and hashes:         1: EJ834orq5XxkS33xyiAVciNKYTA.roa (hash: tsKZbbD2a26s9kJQXaOMNeI95YAO2ar9y5cHWx269UQ=)
                          2: O1bRHs3xt5FsIbl_ziUUS70e2Oo.roa (hash: GDAX7A9G25jk6iCRuWUSO9OYN1CP4Rha8hkEH61irKE=)
                          3: TVciBvbG1XVG5ssHlr4AadQK2fk.roa (hash: QwF4SWXY6yBXWUo8zo5vTIE9qB3GoAOkQodC/dlqVwc=)
                          4: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl (hash: FXigJRnzlbelcOk/dp7DhlQIFSoxjKJtrsA9++QuO0g=)
                          5: hs3fngFJt1NiocNCIA7qGPYWsTU.roa (hash: ToEvpANK+Yu0KXslqAyftUZpThJvK58TLmLx0aI2m1A=)
                          6: slPI9aN-JbfbvX_GY814pCJ8UFA.roa (hash: EeGAyjsGw6lAKae9brKTE8ngKeD+Md25/vDKFnzwqig=)
                          7: tm-LFqSPmanwgI1syFmGkI6nKdc.roa (hash: lIW2bmaFFTJOzvB2HW/qgxs6vnJmoBOrm3elLnIZeZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:fc:5b:40:29:fa:5f:82:e7:3b:4a:e5:b0:e9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
        Validity
            Not Before: Jul 23 18:00:39 2026 GMT
            Not After : Jul 24 18:00:39 2026 GMT
        Subject: CN=08b629d58b6a021d30a927b96e2318a04a4d1338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:a7:3e:00:cb:b1:df:ac:d6:2a:7d:6e:1d:
                    b5:16:86:e1:5b:3a:50:12:0c:e4:9b:65:be:09:ce:
                    c3:1b:d3:e9:4b:35:2d:53:89:a4:05:00:5d:85:fe:
                    05:2a:37:b3:58:67:c0:49:59:ce:75:ef:09:f2:12:
                    c1:f4:ba:b9:7c:07:58:a7:c8:cf:09:39:80:5f:6b:
                    18:4e:13:10:b3:12:8a:92:f4:23:83:bd:dc:63:36:
                    28:f9:74:62:66:77:c4:17:8c:10:59:a1:aa:52:89:
                    65:43:77:3d:f0:a9:7b:b2:c8:f5:f2:e5:47:8c:b1:
                    5e:a3:d1:17:42:d7:04:25:00:52:96:17:21:94:08:
                    d4:03:9a:bb:ca:42:dd:14:e7:cf:e4:7f:1a:af:1d:
                    fa:14:fc:b2:ba:a5:24:89:3c:21:57:c7:f2:62:49:
                    b6:6f:1e:89:46:5a:60:b2:bf:64:06:f1:9d:eb:82:
                    ee:96:3a:18:1a:63:72:f7:ed:1e:de:82:4b:7c:72:
                    74:18:bf:0a:6f:eb:43:f3:2b:8f:27:db:f3:55:f7:
                    35:6f:48:3c:f8:0f:68:42:9a:62:ee:0e:b8:29:cf:
                    60:ad:fb:f5:cb:5b:bd:97:6b:96:6b:ef:6b:06:28:
                    ae:b0:f2:7a:ae:03:3f:28:d6:79:93:56:57:de:2f:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B6:29:D5:8B:6A:02:1D:30:A9:27:B9:6E:23:18:A0:4A:4D:13:38
            X509v3 Authority Key Identifier:
                keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:c5:61:4e:b7:5e:5f:34:6c:63:6e:b3:ef:8d:a6:15:ec:
         2d:ce:b3:8d:76:62:ca:c6:19:69:d0:63:07:6a:69:74:90:d8:
         e7:09:66:88:96:b6:1c:10:f6:e9:00:4c:de:2c:61:7c:8d:a9:
         3f:0a:4f:2a:8e:08:0f:e9:fc:b6:18:47:0d:19:52:9e:33:43:
         c6:d1:4f:43:ac:3b:3f:08:d5:49:95:d4:7e:80:2d:51:8e:ca:
         22:18:f2:b7:c1:33:75:d2:2b:ee:93:a9:ca:63:e8:85:fe:24:
         e0:3c:ac:85:6c:df:a2:02:39:90:6a:fb:c3:86:ec:40:4c:da:
         98:0b:d1:18:ce:ca:cb:cb:83:c6:3b:f7:4c:b1:f5:5a:34:19:
         40:ee:25:cf:55:26:15:b7:e4:2a:28:eb:48:5f:bc:35:b9:6b:
         04:f9:1a:38:17:20:a5:b9:98:ee:77:f4:d2:dd:8f:a5:2c:11:
         f5:ea:1b:31:fd:4b:c7:05:6e:74:2a:90:fc:70:ad:9e:d5:a8:
         0a:91:8f:d1:10:fd:11:6d:b1:0f:96:dc:66:33:ea:cf:2b:d9:
         b3:2b:d7:8c:ad:d3:2d:03:4b:2d:f4:22:e7:2f:eb:e1:38:b0:
         c5:08:1f:0e:b8:21:58:47:92:46:26:60:c4:f2:ed:8e:c8:25:
         f7:21:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:19 2026 by rpki-client