Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
File:                     UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json)
Hash identifier:          ylOS7qIfOTS1jgVM5QFhBuzaWfv9mdINIvP7fpNHfxc=
Subject key identifier:   C1:9A:FC:B8:DC:DD:05:F8:72:3F:21:43:ED:D8:84:29:48:F5:08:DF
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Certificate issuer:       /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial:       019F9436812D2D3AEEBFC2ED06EBED399F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 13:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:27 +0000
Files and hashes:         1: Qjcz_PS0tGHgVp4sFdHi9YmmanQ.roa (hash: bNCXCGEDvdLCDKAMMYQGu7EJRHAHnyr4sSGJfowyZWg=)
                          2: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: 79oEbgS0oiY5iXU9A6wk5LgpsduXT1F+z7yKiv47KWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:81:2d:2d:3a:ee:bf:c2:ed:06:eb:ed:39:9f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
        Validity
            Not Before: Jul 24 13:00:27 2026 GMT
            Not After : Jul 25 13:00:27 2026 GMT
        Subject: CN=c19afcb8dcdd05f8723f2143edd8842948f508df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:1d:f3:f8:d7:c9:81:4c:ab:e4:90:a6:ce:
                    98:f2:7c:a3:b9:99:5e:ae:82:66:a7:6f:d7:27:7a:
                    1d:e9:4e:f8:b4:46:7a:14:0f:5b:aa:0c:cd:bb:f6:
                    28:c1:8d:51:e6:c4:5a:33:d2:8f:91:22:f0:d5:d6:
                    d2:73:6a:e9:a2:b1:8c:9f:8b:5f:04:c3:e5:17:8d:
                    01:73:36:e4:1f:63:0f:1a:9a:c8:95:2c:4d:a1:01:
                    ae:ea:15:5f:aa:3f:0a:fb:74:fc:1e:05:97:33:91:
                    3d:d4:b7:f8:ef:dc:52:b0:85:9f:27:d4:73:77:64:
                    f0:9d:aa:7f:ea:6e:d5:49:f5:c2:3a:03:b0:f1:bd:
                    07:fe:83:26:bd:e3:f4:7b:5b:af:60:9e:cb:9d:df:
                    95:c1:d5:ce:00:ee:80:62:3a:32:e9:97:66:12:63:
                    30:5d:51:9c:8b:ac:ca:e8:76:8d:7e:55:2b:29:18:
                    9a:db:8e:61:4a:70:95:94:f2:a3:be:4c:52:d1:b0:
                    f6:a1:a7:99:de:3d:c6:fb:a1:19:bb:58:5b:6a:5d:
                    b6:af:de:ae:4b:22:f8:e4:d2:34:22:d0:85:66:3a:
                    f7:a1:62:49:31:26:a6:73:6b:16:b5:85:2c:19:2a:
                    09:e5:7c:f9:d9:d3:af:1b:fd:28:a7:b6:cf:04:87:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9A:FC:B8:DC:DD:05:F8:72:3F:21:43:ED:D8:84:29:48:F5:08:DF
            X509v3 Authority Key Identifier:
                keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4d:41:0a:43:41:7d:89:d4:04:42:d9:93:7a:71:d4:09:9c:
         9b:ec:a6:dd:c2:a1:27:24:8e:1a:d7:d7:14:74:58:61:0f:d2:
         83:e3:dc:ce:9f:ab:2d:b6:bd:4d:8b:80:ee:6c:e6:36:4b:c1:
         4e:2a:9a:cc:f4:e9:41:7f:c0:26:49:52:26:b8:00:35:f0:5b:
         27:56:bc:78:66:9e:94:be:19:43:00:5b:0c:a7:7a:e8:91:2b:
         94:d7:a8:66:80:3c:61:d8:a7:6b:9e:a2:ae:04:29:fa:4e:3e:
         0d:c9:05:8d:99:b0:10:a4:57:12:c9:cb:73:82:0a:ae:6e:5d:
         b2:d5:f6:aa:88:77:f9:9d:b0:b4:5e:7a:cd:6b:3d:b9:63:07:
         ad:f0:f6:35:5c:dc:59:0c:4f:65:02:03:bc:a1:9e:fc:50:b9:
         1e:ff:6e:d8:e0:b3:f5:2f:b8:86:9e:bf:60:b9:e7:38:6e:40:
         04:e8:94:33:dd:b7:9f:83:95:61:4f:28:be:d2:47:f5:dc:d8:
         01:b9:af:25:ec:1c:9c:b4:89:a4:bc:31:35:1b:58:7b:d2:cc:
         60:8d:6d:ab:06:97:0a:8d:36:9d:54:a1:91:aa:05:0d:d6:8d:
         ab:13:0b:22:eb:6f:92:47:4d:d6:19:ac:70:71:10:d7:af:4b:
         1f:8b:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:28:02 2026 by rpki-client