Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
File:                     uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft (raw, json)
Hash identifier:          t/0MW4B+KFL1/16QbAJGO4PD5FUTvX/QozxzJXOmLZQ=
Subject key identifier:   85:9B:88:55:5F:17:5C:26:56:D9:9A:85:C7:71:F9:5F:64:78:9F:B4
Authority key identifier: B9:34:B6:16:F5:6B:BF:D0:5D:0B:D4:9C:66:30:6F:4D:90:82:66:1B
Certificate issuer:       /CN=b934b616f56bbfd05d0bd49c66306f4d9082661b
Certificate serial:       019F935AF4F071498F555586D0FCFF1B22CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:39 +0000
Files and hashes:         1: uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl (hash: 8ecpCmhBzE7rRs6nn0k0AFjDGOy8v9dAdnTRscGSNcs=)
                          2: wEJikxHblT6L9s-bWi71LrsBZRI.roa (hash: bunPLGyVfPKxwGeY/HVdEI1aNYchPYcPFBV30VR16pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:f4:f0:71:49:8f:55:55:86:d0:fc:ff:1b:22:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b934b616f56bbfd05d0bd49c66306f4d9082661b
        Validity
            Not Before: Jul 24 09:00:39 2026 GMT
            Not After : Jul 25 09:00:39 2026 GMT
        Subject: CN=859b88555f175c2656d99a85c771f95f64789fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:b7:78:d4:9c:34:8e:e8:35:86:e7:62:30:
                    81:b3:e6:56:70:a4:09:e9:a6:8c:0f:ec:d2:4c:22:
                    f2:6e:55:11:13:6c:62:63:35:67:49:2a:76:8b:ba:
                    bd:b1:e6:88:6c:82:9a:31:75:9d:df:95:53:0e:3b:
                    d3:49:88:c1:cd:83:5b:2a:0b:0d:4f:39:58:ef:36:
                    8f:86:95:a6:8d:8e:54:03:2b:15:2e:65:cc:94:bb:
                    95:c1:23:08:aa:15:7c:ce:5e:d1:76:81:b4:67:93:
                    05:44:d6:77:3a:55:88:ff:c9:8d:93:79:e5:87:10:
                    23:09:08:72:2c:f0:ad:32:eb:e1:3b:48:6d:f6:fe:
                    34:2d:30:b6:b5:5b:59:28:5e:49:e7:0a:fb:62:b8:
                    7e:a6:fe:a4:18:f4:42:de:58:38:83:9f:10:a3:da:
                    ee:e8:06:98:09:a7:a2:eb:cb:86:22:b8:09:57:9d:
                    6a:43:9d:ba:61:9f:64:09:02:a0:1a:78:89:f0:eb:
                    50:2f:9f:28:2f:e7:1a:9b:25:41:7c:e0:ea:27:58:
                    64:6b:0d:e0:dc:a4:48:97:ca:cf:de:21:8e:d2:61:
                    ba:c5:11:ea:b0:78:68:ef:25:6d:b3:7d:ab:c8:a5:
                    ca:b7:c4:05:b2:20:24:85:37:a6:cc:53:35:a6:62:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9B:88:55:5F:17:5C:26:56:D9:9A:85:C7:71:F9:5F:64:78:9F:B4
            X509v3 Authority Key Identifier:
                keyid:B9:34:B6:16:F5:6B:BF:D0:5D:0B:D4:9C:66:30:6F:4D:90:82:66:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:33:5c:e8:0a:b0:a7:c9:85:f3:c3:83:b0:32:b7:99:3a:27:
         ef:71:b1:f4:bf:4f:57:e8:d1:6b:ab:60:32:9d:70:f0:e9:75:
         25:2d:45:dc:36:5d:d8:9a:1b:37:88:62:4d:ce:77:34:13:7d:
         d0:19:b1:29:4c:e8:cf:ac:76:53:ac:fb:05:6e:e0:5b:0f:6c:
         c6:14:20:d1:94:f0:f7:b7:73:d3:67:fa:64:2f:6d:2a:eb:4b:
         36:65:70:87:ea:69:5f:95:ca:47:22:71:60:71:16:5a:4a:e9:
         de:54:cd:1c:da:5c:c8:39:56:e7:bd:5e:71:b6:43:41:c1:58:
         1a:7c:86:50:0e:88:75:25:f8:09:ed:3d:05:e9:5e:9b:f6:58:
         80:7d:56:de:f6:ef:37:af:a3:74:a2:57:37:52:56:0c:b6:4d:
         c4:fc:ed:e5:9b:8d:80:44:9c:5e:8e:1a:5e:cb:6b:9e:52:1f:
         a9:09:e7:13:fe:06:fd:61:49:e9:c8:36:01:e2:6a:41:72:25:
         91:c4:5e:e2:2e:a9:3c:ec:e2:c1:47:77:c7:06:23:00:3e:9a:
         7a:5a:6c:49:52:14:03:02:a4:93:55:c7:1d:c6:b5:b4:c9:61:
         1f:31:fe:46:a7:70:b8:ea:d0:60:82:b5:a8:93:7e:1a:ea:dc:
         a2:9d:22:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:21 2026 by rpki-client