Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
File:                     UHx3C7awjctNbqmwyWJyrzpvnHE.mft (raw, json)
Hash identifier:          tn7F57MJ8/TM3wDSDz873FkUBXQ0YhWAmgtib0ykVKI=
Subject key identifier:   63:79:62:8D:96:75:75:19:C2:EF:8F:C9:CB:2E:92:B7:09:5A:25:2B
Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Certificate issuer:       /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Certificate serial:       019F8EA268ED52BB1D1A398C91BE4D44A1C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
Manifest number:          0497
Signing time:             Thu 23 Jul 2026 11:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:36 +0000
Files and hashes:         1: 9DLIgBG0jvfuH8ou8TZjKoDe-ho.roa (hash: HpaZI7kuC6hl/mDsBhvQTtPfFBQMuUpypzbtW9UHoK0=)
                          2: UHx3C7awjctNbqmwyWJyrzpvnHE.crl (hash: dLRdmh2i6H+JaGvPTV9XsaIK7BvjncTyQ/U5+Kv+VL4=)
                          3: ZXBqmIJ8MCd2GLv-QmXQK6XxBmQ.asa (hash: HxQHQf0TZV7ddusSSpVB4Ixe3kKC7uFqkts0lnECfRk=)
                          4: _rTEx-t_NdmfT_FVcasSap5SuvE.roa (hash: ENf9Zsg8pxzpa14iNxpPB+x6wfIxOC0IvZvTlmEuMS0=)
                          5: wq3li6w9NTH9jEPkIkLQApS-GU8.asa (hash: eMway3dXNh4e7klu5wIDVFWQwP1S/HfrYkiqlIkRWwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:68:ed:52:bb:1d:1a:39:8c:91:be:4d:44:a1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
        Validity
            Not Before: Jul 23 11:00:36 2026 GMT
            Not After : Jul 24 11:00:36 2026 GMT
        Subject: CN=6379628d96757519c2ef8fc9cb2e92b7095a252b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:92:68:8e:b7:cc:b2:28:29:17:f2:1b:97:
                    12:44:1f:9c:ff:e4:ba:70:28:71:35:43:1e:c2:28:
                    42:a5:09:3e:98:6a:12:2a:6e:af:c0:90:e8:51:8c:
                    f9:9b:d8:ec:4d:07:af:1d:7c:3e:6d:1d:23:42:92:
                    31:57:87:17:6b:ae:97:c5:17:29:0e:a7:a5:78:2c:
                    08:02:ae:3d:ab:80:50:75:49:fd:86:1c:02:57:ff:
                    7e:4a:8a:4a:c7:b0:2f:aa:de:3b:bc:a5:0e:df:32:
                    e5:74:76:19:ef:64:d9:41:de:a6:4a:fb:f3:81:91:
                    47:28:bf:6a:9f:28:de:70:78:0a:81:f0:78:d7:32:
                    10:b5:b6:db:c4:b2:0a:46:2d:13:d2:75:19:c0:92:
                    51:4c:2c:ff:00:39:36:ad:13:c2:55:7d:c1:52:05:
                    ae:09:1e:c3:5b:da:be:27:80:98:ba:34:6e:e5:be:
                    a2:d6:ad:f3:b4:14:6b:8a:5b:ce:b3:23:00:2f:cf:
                    ed:f6:28:fa:01:51:04:4d:00:44:67:b3:13:8c:fc:
                    23:41:96:9a:2f:3d:be:a5:96:48:66:2e:ed:45:fb:
                    29:17:f4:b7:bb:dc:50:8f:33:f6:f2:3f:de:05:f2:
                    83:1c:d1:f5:02:d7:8e:5f:5c:f3:24:d1:c3:35:19:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:79:62:8D:96:75:75:19:C2:EF:8F:C9:CB:2E:92:B7:09:5A:25:2B
            X509v3 Authority Key Identifier:
                keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b9:46:86:1b:1f:20:65:d2:c8:bf:79:a3:17:ee:6c:01:a2:
         b4:07:0a:0d:0b:d8:ae:d6:2f:c2:b1:76:eb:6b:3a:74:1e:b6:
         83:38:52:19:aa:7b:f7:cd:9d:5b:92:ab:5c:28:cf:f9:3b:34:
         73:30:17:12:e1:90:89:9d:74:f2:34:08:57:3c:50:2b:bc:68:
         15:54:88:d5:50:63:c2:21:66:da:f8:58:dc:d6:84:b0:2d:6f:
         40:57:42:c0:4d:1f:4a:e9:c8:d4:35:1b:dd:a7:f1:87:55:bb:
         55:5e:be:7e:f4:d2:5d:83:00:b2:75:4a:5c:a3:87:d7:5e:26:
         1a:77:ad:8f:9e:d5:01:a9:b9:ca:17:fb:c8:de:35:16:c9:c1:
         01:5b:8e:c6:3c:11:19:9f:40:ad:77:38:e6:d2:a1:3c:06:98:
         a1:98:a0:f7:7e:1a:cf:86:be:7e:6d:b4:45:b0:99:6b:78:91:
         4b:b5:3c:f6:1d:e6:38:e0:3d:5c:b3:44:b7:c5:eb:c0:bc:56:
         d0:eb:c0:1d:4f:dd:f7:c8:4a:ab:65:8f:95:44:5f:27:df:dc:
         14:00:af:59:f0:e3:be:d2:bd:d6:45:fc:f0:9f:a3:1a:6e:08:
         ff:b1:e1:09:90:ce:a3:fc:86:2e:87:29:47:2e:02:d9:0a:f5:
         bd:b0:ba:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:32 2026 by rpki-client