Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File:                     UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier:          UJMrRegms7jbdBzZ2+JBnP42jbzihn+0FibWm2c3uo8=
Subject key identifier:   B9:41:CE:E7:52:1A:A8:6C:C5:C7:FB:BB:82:53:57:5D:F0:A0:15:7F
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer:       /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial:       019F90233830323D63CB684F98FF1080248E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number:          19C5
Signing time:             Thu 23 Jul 2026 18:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:54 +0000
Files and hashes:         1: 3pROUsGuo7256asAZirwtFY6aCY.roa (hash: ceI+qtS5lvi6YoUYDhE0QVXLVsFmdB8++Mmxjm4VsCg=)
                          2: 4MWEzdPSupDJZ_Gz5zFt8fSfRP8.roa (hash: fzAcdI2YeHgptFoCa+cHCUdnXZqAYdQFW10Ox2+xnFU=)
                          3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: SKfxAvh+KB4KOIwG3cODhVkKyh4JCaITCDO1Fq31bxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:38:30:32:3d:63:cb:68:4f:98:ff:10:80:24:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
        Validity
            Not Before: Jul 23 18:00:54 2026 GMT
            Not After : Jul 24 18:00:54 2026 GMT
        Subject: CN=b941cee7521aa86cc5c7fbbb8253575df0a0157f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:b4:cc:dd:6d:0c:a1:0f:0c:fe:f7:aa:4d:
                    c0:2d:4d:16:81:26:2a:b6:62:72:4d:fe:7d:c5:99:
                    7d:58:65:b0:60:01:92:ba:1b:62:d1:23:fd:99:c2:
                    e4:c9:c5:9d:4c:20:c8:25:57:a2:23:22:78:97:b4:
                    dc:d2:64:1e:5d:84:15:1b:d5:98:25:43:7f:ba:7a:
                    58:12:93:3c:e6:bd:c9:76:21:fb:07:0d:64:ac:ce:
                    c3:58:c4:4e:f7:0a:58:9b:4a:7d:fb:e6:78:72:d6:
                    90:73:4b:a5:c6:83:70:3c:de:32:d5:1c:99:1d:23:
                    52:84:6b:01:53:71:65:6a:78:ec:80:30:21:33:2c:
                    19:66:35:06:54:27:31:cb:cd:66:ae:fd:a5:2f:1f:
                    6c:51:10:8e:e1:db:15:a6:32:a4:97:c2:26:b8:e0:
                    97:0d:00:b5:92:04:4d:2d:c8:85:7e:4f:25:9d:45:
                    37:40:eb:a9:ab:8b:8d:a3:24:4b:83:e6:75:fa:4b:
                    bd:84:07:2c:da:97:15:94:07:8c:7f:68:f2:c3:9a:
                    48:59:d5:31:11:9e:ae:a8:db:08:45:b5:1b:17:b4:
                    04:2d:e2:fd:3d:2d:4d:aa:c1:01:ad:ed:de:4b:87:
                    12:ea:08:3d:97:d5:5d:32:11:6e:35:0d:4f:1f:e7:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:41:CE:E7:52:1A:A8:6C:C5:C7:FB:BB:82:53:57:5D:F0:A0:15:7F
            X509v3 Authority Key Identifier:
                keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6a:b9:f2:ab:e0:fb:ad:7f:b6:58:54:c6:16:2c:e9:de:2d:
         1f:5a:12:38:9e:ca:8b:6c:39:9b:36:4c:40:bc:ed:41:0f:03:
         bc:eb:5a:f5:6e:10:48:7d:ef:3b:ef:5c:60:d4:11:81:a6:03:
         da:86:2a:79:c5:cf:19:ca:9b:7f:57:af:e5:96:fe:0f:6a:93:
         75:96:38:6f:09:71:25:f5:e1:b0:cb:03:fd:53:70:88:11:2f:
         4d:ff:a9:4c:45:07:4e:3a:4f:20:bf:09:f6:5b:7a:2b:2c:ac:
         df:f4:c0:67:b3:b5:63:fb:3c:06:db:0e:5d:0e:aa:8d:64:51:
         b8:d6:92:02:2e:d7:11:8b:03:86:02:9c:33:0a:f8:64:84:8a:
         1a:30:fd:8c:70:cf:f0:fc:d0:52:3c:b1:62:7e:cd:40:7b:c8:
         88:4b:45:52:64:2d:a0:3c:2c:8a:46:dd:ae:9e:cf:10:ca:e6:
         74:7f:75:df:51:99:71:78:b0:55:68:70:24:fa:60:ec:ef:bc:
         91:a6:01:02:f5:c7:16:17:b6:d0:c1:dd:6b:bf:ec:6a:ba:21:
         71:c6:9b:9c:70:b6:23:a0:71:86:7a:4f:ef:0e:8a:58:a0:19:
         67:d3:c4:7c:14:e0:1a:ab:54:18:b8:a0:ee:1a:e4:19:f9:17:
         6e:ea:9f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:11 2026 by rpki-client