Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
File:                     UWGN8AbVSNHYftZBlVBmLbb8BgY.mft (raw, json)
Hash identifier:          hqfqpgIyXmmxvLvcuSOv4uJkceav7pj5ygAX8d53BFo=
Subject key identifier:   B6:70:67:CE:63:38:23:55:18:0B:96:19:01:C7:DD:22:ED:55:F7:AC
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Certificate issuer:       /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial:       019F8E6B7314A0929AF0A2D7FEB8345FE61A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
Manifest number:          19CE
Signing time:             Thu 23 Jul 2026 10:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 10:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 10:00:34 +0000
Files and hashes:         1: DeVxF-ajyv69tQ1jWZaFly-h3_M.asa (hash: s3uI2uzcUVAP2Ke0qq2OsJ0Qz8VUvl1F8D3nklCzw3w=)
                          2: Nr34upPMc1itfVkdnNNT1AsCW_w.roa (hash: FFJtZD22Fu2rvHlrFEbupNfTchtF8nOl9Mph7JlreGw=)
                          3: UWGN8AbVSNHYftZBlVBmLbb8BgY.crl (hash: Mr4RIngoLjmfQxvFewWgbp2+Ae7Cn8qnxXpq4WFOcyY=)
                          4: YbuC1bNZXVvgL4FjcHE-Hxau0bI.roa (hash: VMAWXxm8m+lr90Os4J8wdRHpKQb82mpCrK1hI4HDfj4=)
                          5: jR6smR259DLDFgyK1zIk0sEQi6M.roa (hash: e6/RLtoVyyyv2YlCw0lcJ5Nkg+16H+58XOUnr+NRnzU=)
                          6: p4lMHdo4l30tBAk1ODxehJl7wWg.roa (hash: GFcdFC6qL34sruvTk9IJu2tkqlWw6IlfX6Zy2WNxmQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6b:73:14:a0:92:9a:f0:a2:d7:fe:b8:34:5f:e6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
        Validity
            Not Before: Jul 23 10:00:34 2026 GMT
            Not After : Jul 24 10:00:34 2026 GMT
        Subject: CN=b67067ce63382355180b961901c7dd22ed55f7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:f3:00:62:16:87:ab:d4:62:55:9a:46:f0:
                    35:f0:98:21:6b:e1:e5:2b:b9:86:d5:d2:db:a6:67:
                    e2:46:ce:f4:91:3a:ab:67:3f:de:55:f5:14:a2:6d:
                    30:33:8b:aa:7d:67:04:90:9f:86:52:8b:e4:6c:44:
                    08:ed:88:28:c8:38:00:46:c0:b2:93:c2:18:5e:f8:
                    83:87:6c:6b:c9:97:a8:91:e0:3e:2a:22:ea:fd:15:
                    56:43:4c:01:f4:c5:11:4c:e3:83:9f:af:7c:53:33:
                    6a:53:2d:aa:93:f8:d8:8d:2a:37:53:6d:e6:b7:f4:
                    5e:f4:9e:c9:dc:f0:7c:e0:e1:ca:20:e6:5d:c3:f7:
                    25:ab:d6:37:d2:9d:7d:04:8b:cc:f3:ab:6d:d3:d3:
                    89:af:9e:d3:f1:02:af:ab:ac:12:bd:89:da:c0:57:
                    6e:83:c3:88:4d:db:71:ac:26:5f:c2:11:d4:ae:90:
                    1b:d9:06:cc:a2:00:3a:6e:ac:4d:05:10:f9:d5:51:
                    2e:58:35:51:96:68:d3:c3:26:20:b1:e9:ea:f0:bb:
                    fb:48:fd:2f:a3:35:0d:0c:00:95:dd:09:68:26:8a:
                    44:3d:8e:cf:80:75:ae:f2:86:e1:9c:53:b5:7d:45:
                    ea:83:b6:e0:2b:d4:8e:cb:82:f0:74:a2:13:15:1c:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:70:67:CE:63:38:23:55:18:0B:96:19:01:C7:DD:22:ED:55:F7:AC
            X509v3 Authority Key Identifier:
                keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:bf:6e:97:42:2a:9b:4c:7b:e4:eb:13:ce:64:7f:ed:50:7a:
         7a:69:af:9f:46:66:d0:29:bf:97:1f:99:cc:2b:b6:a9:98:aa:
         47:33:75:52:94:ba:72:2c:bc:b8:59:1d:a3:9c:f5:d4:fa:ab:
         72:8f:13:c9:5d:8d:a3:35:38:72:5f:94:14:2e:2b:4b:d9:2c:
         98:28:cd:0a:d0:24:5f:9f:87:cd:80:b7:ad:52:54:65:58:5a:
         71:ca:c6:8a:43:25:8b:d7:6a:58:5b:f3:d4:f9:21:ee:d3:5d:
         05:13:b3:59:42:30:b3:e0:a4:e9:7c:d2:e5:05:79:fd:13:0a:
         40:d5:e3:a3:09:d7:0c:52:91:32:f4:b9:75:e1:06:68:b4:29:
         75:de:be:8f:58:2c:13:86:77:40:d6:56:91:6f:6c:9b:c0:10:
         57:7c:a9:a7:70:d9:e7:ee:19:a1:2a:3f:6f:9b:7e:a9:83:8c:
         ec:97:bc:1c:ee:d7:43:81:d3:03:01:45:ba:d6:cc:8e:5c:c3:
         3c:22:23:19:21:d4:96:c5:60:9e:0b:37:b2:2d:84:68:46:bd:
         7f:87:79:c0:f9:73:9c:b1:09:01:8f:0f:64:c8:28:81:9c:a0:
         79:4c:9a:f7:25:6e:d3:94:87:cf:8e:fa:2b:aa:f0:27:a4:3a:
         ea:72:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:09 2026 by rpki-client