Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
File:                     uW6LbXPy84VImW9mYhMwqNcQhSk.mft (raw, json)
Hash identifier:          yvrQu7J4yGPtBrelSP8A4M4I+F4THBVu/w1kswzrEAY=
Subject key identifier:   1A:47:21:D0:F6:B6:E2:08:4E:AE:7A:6A:D8:4D:11:E7:C0:BC:6D:0B
Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
Certificate issuer:       /CN=b96e8b6d73f2f38548996f66621330a8d7108529
Certificate serial:       019F92ECEA789BCE5D7361FAAC87B970989E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
Manifest number:          19CE
Signing time:             Fri 24 Jul 2026 07:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:27 +0000
Files and hashes:         1: G4rPRPH0TevWDN4JhwggPa4i_ew.roa (hash: vucNfqDoD46iq3ADWrbmOLpg+GWhl8NHwQXonzDbGUE=)
                          2: JHMmDbVRrRsKn48GITbyHSYvb4k.roa (hash: JTG+SkQZDZHDvGwrOeoKbRRR7PNa8rHubeMF5VYtzkQ=)
                          3: ZnUp6stV5socGkmCtp3XXdwZNt4.roa (hash: pcLU5hRWx9tbU/nzWNHzQ9gO7KrRDtWeT3kX5BEAeI0=)
                          4: mxGPtlml0cC3fgCiKtLv-Fjx0tg.roa (hash: BPcVgU4gGWv1T2VHL8hZhWOkWk8wdsCpDTIDhtWwrK4=)
                          5: uW6LbXPy84VImW9mYhMwqNcQhSk.crl (hash: OMQdLmli6HCiZMz3wTxgIPrI/ztmYuTMkQmItGgNp9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ec:ea:78:9b:ce:5d:73:61:fa:ac:87:b9:70:98:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529
        Validity
            Not Before: Jul 24 07:00:27 2026 GMT
            Not After : Jul 25 07:00:27 2026 GMT
        Subject: CN=1a4721d0f6b6e2084eae7a6ad84d11e7c0bc6d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:93:04:3a:01:c2:eb:10:b5:f2:28:37:bc:9d:
                    72:52:05:a5:ef:e0:d0:e0:33:9c:f0:42:b9:87:a1:
                    d6:61:9e:62:9b:6a:a2:14:ca:92:7a:a8:ed:19:8d:
                    2e:f7:53:89:40:30:5e:19:3b:c8:78:e3:b0:d4:c1:
                    47:2a:93:8d:21:b0:76:0a:64:68:56:16:eb:7c:34:
                    7e:f1:8d:ad:81:92:36:22:5d:3a:78:46:5a:b9:e9:
                    c4:b0:a6:bd:1d:4e:72:15:bb:ff:02:63:62:c5:e5:
                    b4:f2:ca:dc:b5:d9:5a:e3:b7:07:2f:29:7f:86:9f:
                    c0:d8:3f:82:eb:c3:96:76:b5:bf:25:1c:aa:e3:63:
                    2a:24:6d:7c:bd:5b:2f:9d:8a:d8:f9:10:8c:6d:c0:
                    35:ff:fb:72:df:09:c0:2b:fd:33:82:05:73:dc:f0:
                    b3:26:77:06:e3:61:54:0f:4e:0e:24:5c:94:95:eb:
                    d8:07:30:3e:69:a5:fe:72:f4:fc:f6:cb:74:92:7d:
                    1d:02:02:5b:6e:10:29:b1:07:aa:23:07:34:fa:d5:
                    74:4d:9b:24:f9:f7:48:0d:45:df:34:29:50:6a:02:
                    f0:05:f2:61:44:af:f8:7b:6e:df:f9:21:21:6e:e8:
                    42:b5:b6:fd:64:b1:a4:08:86:58:8a:2e:0d:e7:71:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:47:21:D0:F6:B6:E2:08:4E:AE:7A:6A:D8:4D:11:E7:C0:BC:6D:0B
            X509v3 Authority Key Identifier:
                keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a2:db:b3:91:ef:09:e3:3d:e9:26:1d:69:74:57:72:da:f6:
         1d:44:7b:ab:a7:48:80:0f:37:cb:84:7b:b1:a6:32:04:1f:88:
         20:35:c6:80:58:7f:0f:a2:26:af:cc:76:ed:af:8f:0d:0d:bf:
         0a:9e:18:0c:95:ca:02:c8:d5:97:8d:17:54:20:3a:85:6f:dc:
         dd:72:3e:16:cb:a6:09:d7:da:db:5b:33:ee:93:30:23:2b:57:
         44:c8:fd:63:7f:b5:d7:c3:3d:86:98:fe:7b:ea:c7:41:13:58:
         8b:3f:ce:4f:17:d0:aa:10:4a:d8:12:d6:a4:a3:d5:d5:26:3f:
         60:5b:f8:4d:fb:03:bd:a1:0a:00:32:15:8c:7a:9a:72:21:6c:
         31:51:e5:bf:88:28:01:84:8a:d7:e2:80:83:01:af:e7:c9:18:
         b1:bc:1a:a8:ea:fb:d0:e6:6f:ee:ab:1c:a5:59:8e:8d:72:0c:
         9e:e0:d8:f1:76:75:29:9b:8c:28:5a:ee:7d:8d:c8:a3:01:65:
         61:22:d1:a9:66:43:30:26:c1:3a:b3:a5:07:ac:2d:71:fe:4b:
         a7:e5:5c:54:1e:7a:4b:c0:b2:8d:bb:d7:d7:2d:89:b4:e5:58:
         99:90:53:05:99:ad:5c:8a:ba:51:24:de:1b:06:85:08:64:6d:
         b4:42:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:59:49 2026 by rpki-client