Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File:                     ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier:          jWE6GpZkdF5d3Yn+OQYpzzwBOEryUAC160XgnYtwp+c=
Subject key identifier:   56:69:F1:95:A0:CE:E5:E0:90:C0:04:43:E0:36:0D:B6:EE:18:92:06
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer:       /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial:       019F96C9D8709675F521A018B20398969EB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number:          19CB
Signing time:             Sat 25 Jul 2026 01:00:38 +0000
Manifest this update:     Sat 25 Jul 2026 01:00:38 +0000
Manifest next update:     Sun 26 Jul 2026 01:00:38 +0000
Files and hashes:         1: AlKyY1UFKLIiSwkNxpsgmdrM60E.roa (hash: RVsM/xgSLkhzfMVV3ZGsMCowRm3BI62GEPj6ptHzyso=)
                          2: FG47vsukPFFVqGR7bOnjAT2rp7w.roa (hash: awpRf5Q5mKob7svn8oYO+jlkoCbAPExf5Adoe8FOrnc=)
                          3: G6A1KhUGyTv_ayk63fXoZcf-2FU.roa (hash: FvWxPy4xmiHLhgfYS33DaG1bqGpWvGhVoY87fJXbboE=)
                          4: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: 83Ka/zAivL4z3vYcm53AHl86FMhyGsF+q5TJtw/Ptnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:c9:d8:70:96:75:f5:21:a0:18:b2:03:98:96:9e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
        Validity
            Not Before: Jul 25 01:00:38 2026 GMT
            Not After : Jul 26 01:00:38 2026 GMT
        Subject: CN=5669f195a0cee5e090c00443e0360db6ee189206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:b7:af:e4:53:07:0c:36:59:03:9c:6e:3c:
                    42:b7:fe:87:05:8b:ad:16:19:d9:22:4d:a9:d2:3a:
                    43:e4:ac:d0:5f:95:46:84:17:c7:b8:a8:68:b8:75:
                    68:27:00:11:2c:38:4b:15:87:13:a2:da:3a:5d:a5:
                    88:5d:5d:d1:9f:be:4e:68:b5:7d:a0:64:d5:92:ab:
                    1c:85:91:2f:8e:b3:41:65:04:5e:74:83:50:39:65:
                    6e:6a:7b:09:99:c2:f0:38:67:80:07:33:0a:f2:12:
                    39:14:82:12:a3:e9:2d:94:5d:cf:47:85:d0:8c:59:
                    3d:d1:c2:61:f7:a3:5a:aa:1e:4b:c1:bb:3e:e1:9c:
                    05:4b:a3:2b:3e:28:dc:44:d8:1c:42:50:85:69:a4:
                    b1:26:18:a5:62:65:c6:98:15:5c:db:c6:5a:2b:3b:
                    42:88:e4:94:bc:7a:0c:1d:8c:90:51:0b:ff:a8:81:
                    d2:93:d4:f9:a6:3e:12:7e:4f:b9:f8:f8:31:e6:0d:
                    7d:25:a2:6d:33:9c:9a:5e:07:06:ec:1b:d4:78:d7:
                    20:3e:00:69:df:9c:0b:8c:8f:a2:41:3d:68:c2:0c:
                    12:44:04:37:f0:94:17:d6:98:5c:9d:1e:b1:8a:21:
                    e5:83:dd:5c:47:63:f4:f7:d9:fa:21:45:ea:26:69:
                    e9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:69:F1:95:A0:CE:E5:E0:90:C0:04:43:E0:36:0D:B6:EE:18:92:06
            X509v3 Authority Key Identifier:
                keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:64:ed:ce:d0:92:fa:2d:04:e6:2f:d8:fa:51:34:1e:9e:45:
         1d:4f:92:40:63:20:08:88:d0:c7:05:a8:a9:eb:3f:02:e4:3e:
         93:3f:cb:ef:8c:7b:8d:6e:d5:24:3f:8b:f4:fd:cd:e6:8a:1d:
         ce:70:76:cf:50:3f:32:d7:16:ae:b2:c0:41:30:94:fb:34:7a:
         1d:3c:4c:5d:c8:59:92:3b:4c:1c:8d:8b:1f:07:00:32:7f:c2:
         a1:25:34:df:52:c0:b0:59:29:70:8e:05:ab:32:3c:94:a8:2c:
         90:70:33:46:93:a9:6d:ef:e8:f6:c6:04:d8:d6:a5:61:57:8f:
         1d:42:6a:b5:fe:fd:0e:ae:00:00:28:d8:06:18:14:fb:59:04:
         7d:01:60:96:af:06:6f:b1:e9:1a:23:28:f8:5b:98:62:8e:56:
         1b:04:3b:55:3d:b6:dc:f6:00:70:8a:88:a0:27:1d:ab:73:01:
         37:89:27:89:1b:1a:1b:3d:b6:25:89:44:87:3b:f7:5f:4c:23:
         8e:52:af:5f:90:2f:79:c0:df:9c:1d:6f:8c:e2:cc:4c:37:a3:
         f1:96:be:a5:57:b9:56:f3:7e:6f:a6:70:75:d1:c5:53:03:67:
         7b:19:9d:2c:fc:12:65:4f:c8:fd:10:28:47:c3:27:1d:32:97:
         73:f5:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:12:23 2026 by rpki-client