Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File:                     UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier:          h8R57rwxYrlBYWJSOj0ebAMisrlGk9bTAVLWh3rW+zY=
Subject key identifier:   26:20:D1:F5:33:27:96:08:D3:9A:87:65:63:CC:64:39:94:59:58:5D
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer:       /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial:       019F92B5F7305E0F80ED257FE55A718FD641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number:          12CE
Signing time:             Fri 24 Jul 2026 06:00:26 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:26 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:26 +0000
Files and hashes:         1: 6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (hash: KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=)
                          2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: 58HMZuojbqLcqcZa2n2AsrB2Js007ZVuPGyZ3stUkRg=)
                          3: vFIy0amMxxYp6t0XVtNNLn2R_I8.roa (hash: vax2PUgWucdwxjsswO26V1j+tAN7zRvvsr/R7FSg7S0=)
                          4: zr2faZR5YeSQwhfP1BestpJXC-c.roa (hash: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:f7:30:5e:0f:80:ed:25:7f:e5:5a:71:8f:d6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
        Validity
            Not Before: Jul 24 06:00:26 2026 GMT
            Not After : Jul 25 06:00:26 2026 GMT
        Subject: CN=2620d1f533279608d39a876563cc64399459585d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:43:3b:c6:c7:aa:79:87:36:c3:e2:88:3b:
                    7c:cb:f8:27:a8:8c:c3:2f:a1:d9:10:7a:8e:70:bf:
                    dd:fd:9a:d8:09:78:ee:80:c4:69:7f:25:c8:2f:3a:
                    cb:a7:b3:3c:60:61:23:8c:aa:d1:76:00:07:36:56:
                    2f:50:be:e7:e1:56:f4:a9:75:50:b4:d3:5e:6e:56:
                    55:2b:70:e7:f5:55:f9:9d:ed:c8:b1:1f:2d:3e:62:
                    d6:e9:9b:f1:13:81:3b:4a:39:e6:e4:42:0b:0e:a4:
                    c0:e5:fb:3f:42:cf:11:8c:10:ae:c1:c3:34:87:ce:
                    38:4c:4f:30:55:30:31:85:b3:18:27:7c:83:ea:e9:
                    ad:03:0d:59:ff:8d:fd:82:12:8f:e6:58:e8:3e:6b:
                    46:82:39:9b:57:9b:fd:4e:ba:62:d2:b8:47:24:31:
                    03:58:3e:91:12:61:1e:76:ee:9d:40:76:8a:fb:14:
                    8f:e5:d9:a3:4d:45:93:3b:6d:b4:e0:e9:c9:91:8d:
                    f7:6b:8e:01:5a:08:ae:20:b2:66:6e:95:45:ad:d2:
                    bd:c4:90:bf:4e:f4:44:22:3d:8f:dd:b8:9d:74:b9:
                    24:32:89:40:2a:90:7a:a7:54:36:c8:bf:f6:d7:68:
                    de:76:6b:f8:73:6f:98:07:26:43:fe:ff:6f:5c:7d:
                    79:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:20:D1:F5:33:27:96:08:D3:9A:87:65:63:CC:64:39:94:59:58:5D
            X509v3 Authority Key Identifier:
                keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1c:8b:b8:d5:b0:02:16:04:dd:c5:e8:ec:08:62:40:9e:35:
         e5:cb:72:51:64:e2:52:6b:5c:11:b6:ae:81:cb:b2:1f:2e:5a:
         75:a4:da:26:11:60:42:cd:d2:62:89:f8:d6:ef:37:fb:d2:1f:
         80:08:ab:39:8e:08:cc:1e:bd:64:b4:96:7e:e4:7e:e4:5c:cd:
         e8:05:7f:94:23:4b:df:c5:2e:38:a4:d6:9d:af:15:57:77:11:
         a5:27:e5:fb:fc:a8:05:d2:db:6a:db:ca:90:8f:23:4d:5e:bf:
         0e:5c:bf:7e:f1:ed:87:a7:90:2e:67:a4:1a:aa:94:da:1d:4b:
         66:78:71:9c:d9:db:1f:af:cb:ce:49:63:69:9f:23:2f:a8:f7:
         0a:3d:c0:58:ad:b2:b2:6e:3c:d6:03:90:0b:8a:48:67:3e:68:
         5d:c5:39:7e:d7:c4:f4:71:60:10:13:5a:99:ad:fb:6e:ae:79:
         0d:e2:63:b7:31:0f:88:97:19:67:45:f1:26:d4:94:b6:32:86:
         2d:cc:4b:c9:0e:ce:2d:37:4f:af:d0:03:38:ab:f1:8e:ad:29:
         e8:68:d3:12:48:f3:1e:1e:3f:45:44:dc:30:11:df:21:96:a2:
         5c:b2:9f:3d:65:58:57:46:47:aa:db:dd:e9:1f:f8:37:02:f1:
         db:2e:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:06 2026 by rpki-client