Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
File:                     UAqdaSWQfcZs55keuULmgLE5E6k.mft (raw, json)
Hash identifier:          vQ3nx2QdfM8lwcWDgp8i3ALKjICM6fmAvJmoFnQz928=
Subject key identifier:   8A:6C:BD:13:B2:49:91:BD:DA:46:BF:2B:7E:E0:18:FD:65:E7:F8:29
Authority key identifier: 50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
Certificate issuer:       /CN=500a9d6925907dc66ce7991eb942e680b13913a9
Certificate serial:       019F93240B02B31D9FE60176BA94A9962A6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
Manifest number:          010D
Signing time:             Fri 24 Jul 2026 08:00:40 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:40 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:40 +0000
Files and hashes:         1: UAqdaSWQfcZs55keuULmgLE5E6k.crl (hash: UYpb8YUP9/oS+DFTQH2+IHfN6OPnvoHJ3MIrSIULgVk=)
                          2: XTRFNK15Srj4Dxkx9BJpGhvon9c.roa (hash: 2JtlFPv4dLd8U4gLpBv5lJb7jlDjsUb3MwUWDpaLfmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:0b:02:b3:1d:9f:e6:01:76:ba:94:a9:96:2a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500a9d6925907dc66ce7991eb942e680b13913a9
        Validity
            Not Before: Jul 24 08:00:40 2026 GMT
            Not After : Jul 25 08:00:40 2026 GMT
        Subject: CN=8a6cbd13b24991bdda46bf2b7ee018fd65e7f829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:2b:3b:ca:ca:3f:8e:92:78:64:17:24:e9:
                    8e:d2:d0:05:77:58:e6:28:97:ed:49:18:76:9f:9b:
                    85:d2:17:95:19:9b:da:e7:ed:e5:83:19:ab:f8:40:
                    ed:a8:f7:d0:d5:c4:1a:f6:f8:8d:cc:fb:7f:29:84:
                    20:60:39:24:01:fa:e4:ba:c8:6b:14:1b:a9:05:37:
                    4a:27:d1:1f:fd:82:53:02:c9:44:da:87:9a:e8:b6:
                    df:32:08:ad:9e:cc:f9:f1:1d:bc:18:5f:6c:44:e8:
                    8d:e9:f0:87:f4:3a:c4:aa:f8:b2:5b:f8:8f:2a:d5:
                    5e:78:e5:9c:b9:da:32:78:19:8b:6c:51:4b:aa:81:
                    85:63:df:aa:c4:df:ec:d4:3f:49:0a:69:3d:cb:d9:
                    25:d0:e6:48:dc:0f:f0:0d:57:db:86:75:9a:9e:ac:
                    04:56:15:ca:97:47:3c:3a:26:c7:80:56:f5:35:54:
                    9f:8f:55:c6:0f:b1:14:ba:72:d3:5c:08:52:9e:33:
                    11:d3:17:36:9e:c0:58:3a:4a:b2:c2:81:c2:de:79:
                    88:1d:c3:68:cb:81:a1:a2:e2:06:58:98:23:1e:b2:
                    fe:0c:2c:d0:10:03:1e:bd:fd:c4:ef:fa:7e:e5:5b:
                    05:02:47:4f:8c:4f:19:27:72:bc:7c:78:b6:c2:2c:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6C:BD:13:B2:49:91:BD:DA:46:BF:2B:7E:E0:18:FD:65:E7:F8:29
            X509v3 Authority Key Identifier:
                keyid:50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d5:13:d4:c0:71:17:32:e4:ad:81:14:a7:6e:ab:15:3e:b4:
         8b:90:58:7d:dc:77:e7:2b:d0:ce:8f:b5:2f:0f:a1:3c:86:bc:
         c5:30:19:60:22:a1:86:f4:97:c9:ca:9b:b1:19:b1:e6:64:95:
         3e:32:d5:42:f4:5d:dc:a9:b3:a6:cb:40:e9:52:a9:3f:df:e5:
         93:cd:dd:da:21:18:f2:c6:aa:ec:fa:d9:cd:75:5c:15:c6:8b:
         7c:87:93:70:11:d7:b9:96:4b:02:da:c6:58:03:fe:41:ad:73:
         29:82:3e:b7:d6:f7:8c:58:47:6c:65:41:99:8e:c7:66:2c:a3:
         64:1b:45:51:85:ae:80:60:8b:65:1c:e0:11:6c:fd:ff:a5:4a:
         26:2c:11:77:5d:80:93:bb:6e:db:31:a1:2f:ad:02:b2:65:a5:
         15:69:95:8a:5e:61:93:cc:34:7d:3d:4b:c9:70:2b:75:b2:16:
         0b:ce:e7:95:bc:8e:f5:3d:bc:c5:7f:b8:f5:9e:ec:42:c5:e0:
         27:c1:6f:1c:8a:ee:91:f0:ce:63:f5:c0:24:e1:3b:a0:00:94:
         05:56:c8:79:8a:ff:51:c0:c5:06:66:46:61:30:45:57:99:94:
         4b:82:58:1e:5a:0b:21:fd:98:76:86:e6:a5:76:53:b5:30:cf:
         db:cf:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:27 2026 by rpki-client