Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File:                     um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier:          GIi6tniF7o0qSPo0QFSL7OGjzGLKIeRPK3fARkRmKCQ=
Subject key identifier:   41:A7:F6:13:82:17:F3:B7:EB:3E:F7:8C:ED:51:30:92:B0:57:41:18
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer:       /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial:       019F916C74712BD48AE3A1DB0F58FB60FA57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 00:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:31 +0000
Files and hashes:         1: Bm7KXTZG-GzrmHMle85VbaK0lEc.roa (hash: eP4Z4Xyrl9duYpmeFr1kOXcCCxjk6AkZ57/buELWekE=)
                          2: YkorEnKm6LzRmwWsxcFNFH1cULo.roa (hash: r2RXMf3T6ozI4KhQ/ydf8YGQ149Sw8bA5XoNMW2hS0A=)
                          3: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (hash: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ=)
                          4: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (hash: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0=)
                          5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: Fme6hs9JnCdHqgCnc59APxKmcK/xEiVXpd3sWkvn6Rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:74:71:2b:d4:8a:e3:a1:db:0f:58:fb:60:fa:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
        Validity
            Not Before: Jul 24 00:00:31 2026 GMT
            Not After : Jul 25 00:00:31 2026 GMT
        Subject: CN=41a7f6138217f3b7eb3ef78ced513092b0574118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:97:17:24:a1:4e:d5:6d:11:cf:bd:a7:d8:
                    32:b0:83:ed:8f:b0:da:a7:37:9a:ec:39:8d:3d:ba:
                    52:22:2e:69:b0:af:8f:00:2a:51:b9:f2:10:cb:17:
                    97:4d:99:c6:63:d4:05:e8:ec:f7:79:1a:a1:4f:7c:
                    f3:7b:9e:a0:be:00:5b:74:1b:1d:0c:05:a8:f9:bb:
                    34:21:e6:76:7b:bc:1e:7d:4d:20:e8:5e:60:f2:75:
                    1e:c1:61:1a:61:a9:14:8e:9d:4d:12:67:93:0d:81:
                    35:54:a4:e9:2e:8d:93:c5:37:96:f2:db:04:dd:73:
                    8f:db:db:9f:91:84:92:98:f3:e9:87:e9:fe:06:0f:
                    f4:0c:bc:ea:a2:5c:d4:bd:e6:e3:27:b4:92:ce:ee:
                    be:d5:ee:eb:b1:80:71:17:71:88:2f:ca:b6:6d:64:
                    70:e8:36:75:9b:ab:66:b1:48:34:32:bd:e1:67:a3:
                    0b:9a:57:c0:73:f1:5d:b8:a4:b7:96:80:16:99:a4:
                    cd:e2:15:84:2e:cc:29:aa:36:99:57:78:31:20:66:
                    79:3a:dd:d7:64:16:b8:31:87:5f:48:81:72:ce:80:
                    57:48:42:4e:6b:99:39:a3:88:8e:b8:ef:05:fe:1f:
                    20:63:62:4e:44:df:e6:40:70:4a:ab:e2:5b:6c:23:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A7:F6:13:82:17:F3:B7:EB:3E:F7:8C:ED:51:30:92:B0:57:41:18
            X509v3 Authority Key Identifier:
                keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:03:04:d0:8c:91:2b:f8:ae:1b:a0:04:6c:55:0f:4e:75:50:
         70:c3:6b:f1:48:b3:5d:31:93:ee:16:49:58:f7:22:69:54:e7:
         1b:16:29:33:fb:25:51:4f:4b:71:31:55:42:1d:e2:2e:70:91:
         16:f2:7d:c5:79:ea:8f:b0:27:72:45:f5:80:12:d0:4e:89:76:
         08:24:ec:b6:7d:d8:2e:f3:95:30:73:30:37:bc:6b:e0:4b:b3:
         4a:b2:89:27:d0:dd:46:99:67:ba:c6:88:3a:6d:e5:ca:06:6c:
         7c:b3:cb:98:3f:16:73:4c:34:8d:b1:1b:32:c6:05:bf:3d:99:
         37:60:c5:4f:69:4b:04:f5:d2:1b:4e:72:69:95:65:57:0c:13:
         df:e0:dd:f3:4a:24:58:05:5a:9e:80:45:2e:bc:2b:8a:17:75:
         d6:ee:df:3f:e8:53:0a:3e:e1:f7:36:c4:50:2e:d5:65:c8:ac:
         98:35:55:23:85:2f:a0:84:a8:10:b5:c6:fa:c7:1b:6f:db:a3:
         8e:81:b5:6e:65:87:e3:f5:aa:cf:40:99:d4:a6:ee:c0:d1:bf:
         7a:65:c2:c7:e4:96:f1:20:f8:8e:0b:69:a4:ba:22:42:8f:e9:
         7d:44:06:82:50:06:2e:b0:89:39:fc:92:62:06:b6:f4:c3:a6:
         66:2b:2b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:01 2026 by rpki-client