Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          53XccIEol8Pz0BvjpPHBKjT8H2rHJO/vnTa7Nszt4ZQ=
Subject key identifier:   9C:FC:EE:3F:4E:DA:10:66:7C:7E:C4:EE:15:A0:18:84:4A:D5:67:B7
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       019F93C907AABF07FF8B1DB63C665E4B984B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          1663
Signing time:             Fri 24 Jul 2026 11:00:53 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:53 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:53 +0000
Files and hashes:         1: D9vGSctTQ6G39-Tj1KvzWEev7A0.roa (hash: dCtLdzE8AAyiXqvWxFMu+nXlWgdt/7ZcgVwWdiQ4TE4=)
                          2: J85fjuSQxz3wg1fx9HApSpky-cc.roa (hash: UxFrHM/u1QxNZlVa/F5dPFto/GBnUH2xgwkXvxIONS8=)
                          3: JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa (hash: zf3sZG8UyEv9zaK8C2m/Vb5bOTa/zuVQAu3HlY+cXHI=)
                          4: PGDw99LFu8cUJWnydQ7BWcOhXTI.roa (hash: x69/sh35YI+yTa5z+lbFr8Vns/76h1dYMvcCscIlmMQ=)
                          5: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: oEY6IOLTAM/q8Hd8L38RCSvVI5YLKRuAQK3PnvV1XZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:07:aa:bf:07:ff:8b:1d:b6:3c:66:5e:4b:98:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Jul 24 11:00:53 2026 GMT
            Not After : Jul 25 11:00:53 2026 GMT
        Subject: CN=9cfcee3f4eda10667c7ec4ee15a018844ad567b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ad:ea:2f:8b:83:52:3f:34:aa:39:3f:f9:16:
                    79:d8:e7:ed:89:89:b5:b2:a1:12:4e:24:15:6f:67:
                    d1:59:fd:df:c0:33:8b:89:c5:2a:07:56:51:26:7e:
                    c4:b4:42:ec:33:73:96:2e:41:d5:6c:97:10:90:dd:
                    94:d8:49:a3:83:6f:40:bb:90:11:b8:f6:8a:a8:3a:
                    92:23:46:e5:17:bf:67:b3:6b:38:ea:53:4f:9d:87:
                    b6:b1:1b:1d:da:e2:2e:44:9f:d3:57:16:54:21:87:
                    aa:03:d8:cf:82:54:9c:4f:e7:da:ae:4b:3f:cf:34:
                    57:9a:6c:55:58:b1:7c:5d:94:06:e5:4e:94:4f:84:
                    f6:46:ba:c0:f8:a8:62:f4:90:95:8d:8e:d9:85:70:
                    56:1b:3d:99:69:2a:2a:0e:9f:c4:d8:ad:48:f8:68:
                    8b:98:7a:4c:ec:1d:dd:a3:b8:ca:d0:c2:e6:61:37:
                    ce:f5:c0:5b:a5:5d:cd:86:da:6a:92:53:88:bf:7c:
                    5b:2d:7a:89:03:b1:55:ff:f2:4d:72:03:7b:f6:92:
                    30:30:26:bb:60:c5:a6:93:f3:16:72:e6:a1:ca:76:
                    87:19:bf:52:63:c8:d1:f6:67:2c:8f:ef:24:c6:76:
                    9b:c4:b7:5a:51:c8:5e:ed:f5:ce:cb:96:aa:b4:0c:
                    c8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FC:EE:3F:4E:DA:10:66:7C:7E:C4:EE:15:A0:18:84:4A:D5:67:B7
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:ba:6c:5d:a4:d8:6a:53:00:e5:9b:f6:82:e0:67:fd:7d:
         00:6e:7d:a5:f3:71:26:9e:01:4d:71:2a:8b:5c:4d:ce:e5:c6:
         c4:c6:76:19:2f:d9:97:32:e0:e3:d0:6e:28:49:18:b8:c8:83:
         33:e3:55:96:ee:f9:29:ba:46:51:38:a9:21:d2:78:d9:43:86:
         72:ac:27:65:e9:4f:78:f8:8e:22:33:28:4b:b0:ee:54:32:e2:
         a9:e9:db:7a:04:2e:90:b3:22:d1:47:ee:88:de:0d:97:61:b7:
         d0:28:31:ef:4e:db:55:4b:8e:af:07:37:03:9a:80:25:0e:6a:
         27:75:a1:e0:8c:f5:7c:2f:e5:d9:5f:55:9e:d1:72:a6:61:a8:
         e7:c5:d3:e0:b6:66:76:8d:7b:c2:8b:10:7e:08:6c:25:91:7d:
         cc:51:03:75:f2:2e:fc:dc:5c:73:14:90:5b:09:3e:d3:80:b4:
         78:3d:ff:6a:15:da:22:0c:b3:ae:cc:40:e1:85:1b:c1:e8:a1:
         e0:d2:d2:05:fb:76:e3:88:24:af:bb:86:5a:ac:ec:8c:ae:1e:
         e8:9c:0a:2a:65:85:b5:d0:f8:66:e9:a5:5d:20:87:c1:55:0d:
         1f:d1:9e:06:94:64:01:d7:a4:7a:a1:13:30:c4:71:de:ef:d9:
         6f:cf:d2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:11 2026 by rpki-client