Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
File:                     sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json)
Hash identifier:          KPRxOHxwCAwp9FfWr3HashjqSYArQSSMio6+yHY9Dow=
Subject key identifier:   16:F8:91:30:A8:C5:37:DE:5E:D5:03:7C:41:F7:04:D4:DC:7F:86:75
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Certificate issuer:       /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial:       019F93C875F2DD73EF48870F4F37A137308D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 11:00:15 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:15 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:15 +0000
Files and hashes:         1: UPKKwW9VJYZFBiA_WvIaqWPdF7s.roa (hash: K2pc24cJyQQfvnYYt5miofrs9P0Hxb8DyAeGlZ+9xFY=)
                          2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: mN4wF4sy/R8KOG8Y/l34qHjvd+0517KAP8mYgQQInlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:75:f2:dd:73:ef:48:87:0f:4f:37:a1:37:30:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
        Validity
            Not Before: Jul 24 11:00:15 2026 GMT
            Not After : Jul 25 11:00:15 2026 GMT
        Subject: CN=16f89130a8c537de5ed5037c41f704d4dc7f8675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:6e:f9:2d:f1:ea:23:12:2b:20:8f:62:ce:
                    7b:5d:07:97:3d:24:ad:cc:1e:0e:a9:0c:3a:60:4f:
                    88:97:7f:1b:a2:b9:20:6a:71:00:bf:d0:be:ac:71:
                    a7:c3:b7:1c:cb:05:fd:2f:a4:77:9c:9b:ff:b2:41:
                    22:31:c5:d3:eb:12:fa:c8:e2:ca:56:c6:ef:51:ff:
                    f9:e8:b3:19:d2:fb:e6:d3:8e:15:ce:af:81:b6:6b:
                    2c:a8:88:c9:d3:b7:ef:ad:4e:38:ea:76:ae:57:a4:
                    0e:7a:8c:0e:07:3d:ee:ab:d8:5a:2e:ed:4f:63:84:
                    ee:a3:f2:b8:18:98:ef:f0:b5:40:28:cc:e2:37:82:
                    f6:b9:15:40:13:3e:05:ab:26:ab:6f:1b:59:31:14:
                    33:a0:d9:17:54:9f:71:e2:cf:52:56:1a:7d:aa:b6:
                    6d:29:c4:c1:65:e7:3b:63:71:73:19:ab:60:de:bc:
                    c8:08:36:92:e9:b4:f0:bc:55:5e:7b:f5:f0:71:74:
                    75:e7:5c:87:8f:84:54:12:73:da:e1:60:b8:db:ba:
                    0a:08:54:5f:36:5e:3a:3e:e1:d8:d9:6e:09:35:00:
                    f1:f4:a9:4e:1d:83:32:83:df:db:73:d8:6c:60:af:
                    46:82:fe:62:60:31:c4:03:f3:42:3d:b7:10:12:c9:
                    9c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F8:91:30:A8:C5:37:DE:5E:D5:03:7C:41:F7:04:D4:DC:7F:86:75
            X509v3 Authority Key Identifier:
                keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:cc:ea:88:7c:44:4d:b5:6f:a8:a0:9e:c6:2a:83:42:2c:b8:
         d8:62:79:23:e9:da:19:55:c2:39:49:b0:92:df:35:9d:f0:8e:
         cb:84:b0:55:5e:2f:40:3b:3d:e3:ba:08:7a:d3:52:0c:7f:d9:
         0c:10:50:26:55:ef:2a:32:72:38:ee:b0:74:0a:2c:cb:71:ef:
         19:62:1b:2a:95:db:d8:f8:90:2d:d3:c1:8b:cf:8c:ff:4e:b8:
         52:d0:75:60:83:55:5f:12:29:8c:ed:46:7e:1f:3f:4a:2b:44:
         73:a3:55:ae:de:a2:26:bb:71:48:e6:a6:81:e7:fa:12:81:a2:
         75:14:c6:39:f0:c1:fa:28:19:b4:fb:7e:e3:68:a8:c9:fc:59:
         f7:95:3b:58:71:76:a3:a1:09:cc:e1:75:04:aa:df:20:09:53:
         e2:60:46:f3:c8:5f:d5:10:73:94:a3:9a:ab:82:dd:71:7b:0e:
         0a:98:db:a1:11:62:c1:95:5d:8d:9b:87:71:b4:01:4f:bd:d9:
         c5:aa:6d:10:7d:b1:d6:a7:5a:7b:1b:8a:c6:54:b5:2a:f0:37:
         bc:38:e5:d7:65:bb:59:51:0e:83:ce:ba:45:e0:a3:11:a8:ea:
         50:31:22:9b:3a:69:78:a3:6b:78:01:44:d8:df:16:4f:2e:59:
         72:69:a3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:22:22 2026 by rpki-client