Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File:                     uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier:          YgoJ9nd3FShNY+FBQjQixrxcJ7oyX4Ppek22ELGjf2o=
Subject key identifier:   BA:6D:2E:79:AA:DD:C7:FC:20:99:C4:88:A3:34:5A:CB:73:7A:23:27
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer:       /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial:       019F9323E69C86AE06B0055494C4E9260D6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number:          0E40
Signing time:             Fri 24 Jul 2026 08:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:31 +0000
Files and hashes:         1: Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa (hash: DN4lDMoyde0MYsDKgYpzaGvP9YKbzDvp6j/0REyCcMs=)
                          2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: NBVAB8YmL6MtKDhGXQcDUrGQwv6Gi5h7xUvkzrAjQjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:e6:9c:86:ae:06:b0:05:54:94:c4:e9:26:0d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
        Validity
            Not Before: Jul 24 08:00:31 2026 GMT
            Not After : Jul 25 08:00:31 2026 GMT
        Subject: CN=ba6d2e79aaddc7fc2099c488a3345acb737a2327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:c5:f3:41:05:20:93:4f:c6:32:f7:13:e1:
                    d2:fe:59:75:da:57:44:20:2b:53:11:f0:cf:aa:c3:
                    07:1a:10:44:2b:9a:20:7f:e3:f8:20:ca:bb:3f:2b:
                    a2:40:21:2a:17:fe:ae:64:e2:71:1f:9a:6d:f0:6d:
                    20:f2:50:c8:8c:47:96:38:ab:51:63:aa:e2:38:1c:
                    04:c1:35:ec:00:48:00:c9:33:98:5d:ef:bd:d7:c2:
                    50:20:7a:65:4b:b2:5c:5c:dd:a4:f9:65:19:ac:55:
                    9b:6c:a3:3d:c6:e5:43:47:53:54:81:ff:a8:87:3b:
                    62:89:7b:90:b9:b0:71:77:77:97:0d:5d:ee:72:62:
                    70:ac:e3:36:18:0a:d0:57:12:35:fc:7f:8d:23:0a:
                    04:d7:3f:3b:dd:ae:b0:a4:2d:a2:15:22:1b:e2:dc:
                    94:1e:0c:38:74:a7:fa:df:da:7e:ca:6b:07:df:12:
                    08:52:12:dd:ec:43:74:fa:cf:54:00:35:28:30:b7:
                    47:8f:1a:e5:fa:c8:85:1d:62:2f:e0:3a:36:41:5a:
                    c6:c4:6a:f1:de:b1:06:5d:c7:73:6f:4f:c8:5c:c2:
                    2d:4d:a6:c2:68:8a:62:98:9d:ff:a0:ce:83:17:af:
                    9f:3e:bd:62:67:c8:cf:12:a5:f6:86:d5:99:64:ab:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6D:2E:79:AA:DD:C7:FC:20:99:C4:88:A3:34:5A:CB:73:7A:23:27
            X509v3 Authority Key Identifier:
                keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:7d:99:31:f1:96:8b:4c:c0:f6:b4:3e:2f:c5:32:22:5d:5e:
         fd:b6:b4:48:f1:57:96:02:3c:2e:04:66:2e:27:5d:4b:3e:0c:
         27:bb:6f:ba:e8:a1:94:ef:ca:5d:b7:e2:bd:1c:96:a7:41:bc:
         69:14:3b:13:48:3b:2e:e8:f9:b1:75:92:11:21:6e:dd:c2:43:
         6f:26:46:da:ae:3d:8e:96:ba:9d:05:16:8a:fc:f3:dd:57:45:
         e2:a9:64:35:8a:84:e9:80:e3:04:3f:e1:71:d6:12:da:ba:cb:
         9c:0e:28:f0:a5:82:6f:80:e4:83:16:5d:2c:ca:cd:76:35:b8:
         7c:f8:48:2e:fe:48:2e:b5:dd:f7:ba:2d:74:6b:3d:22:3b:b6:
         2f:22:19:14:23:bc:21:a4:6c:28:6f:5e:8a:91:3e:b2:35:59:
         80:e5:ab:ae:91:ae:6a:cc:c1:1c:7d:02:1a:c8:91:57:1c:a7:
         8e:6f:b6:ed:b3:72:23:39:ce:39:88:ef:d3:0d:df:49:8a:37:
         59:1c:6e:b7:9c:ab:72:b2:b0:06:4e:2f:bc:1a:5f:ba:a5:19:
         75:f4:76:e6:3c:2c:54:71:a6:6d:80:a8:eb:c3:58:de:85:3c:
         81:ee:aa:d2:d8:bd:1a:f7:a7:9a:1f:d1:3b:9c:9c:1e:4c:26:
         a0:d1:1f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:35 2026 by rpki-client