Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File:                     UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier:          IBEnYWiyVIvKXtIdSZnmQiQUovK0Ur2pU3xyC68uhbM=
Subject key identifier:   1E:63:EB:F7:44:A5:70:7C:42:4F:0B:06:EA:2D:08:E4:87:AC:B9:B1
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer:       /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial:       019F8F10BAFB71CE3BA15466354517794DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number:          08FB
Signing time:             Thu 23 Jul 2026 13:01:05 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:05 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:05 +0000
Files and hashes:         1: K1qLnnrsBytcCd672tmGsMqXxYM.roa (hash: chgkC32Z3UMGB9mkkwLQsJIKs1LFl1ohHwqbg9qIaPw=)
                          2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: HZMB7wlaiZbU+eAtK64xnkaE8xB4dBJYZD8SpQ5NA1k=)
                          3: X9lVyI85cWemgsO6nj6KNiyvWhg.roa (hash: fAtsDmjcFGxCPbNfuOqgmjuDJEqjBeXCafa+9VtJFx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:ba:fb:71:ce:3b:a1:54:66:35:45:17:79:4d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
        Validity
            Not Before: Jul 23 13:01:05 2026 GMT
            Not After : Jul 24 13:01:05 2026 GMT
        Subject: CN=1e63ebf744a5707c424f0b06ea2d08e487acb9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:f5:7a:1a:8a:07:4d:b5:68:2d:e7:36:dd:
                    fc:4c:ed:30:96:c7:40:96:2f:91:12:6c:82:fb:97:
                    59:8d:1e:9a:d5:82:3f:df:c6:de:09:50:49:b8:77:
                    12:62:d1:33:3a:26:e4:f3:5e:6a:6d:94:e5:9f:b9:
                    44:84:a6:65:f3:19:36:43:d4:43:b0:85:af:e0:cf:
                    15:09:db:26:39:d8:c0:92:82:c2:e0:e8:a0:f7:27:
                    2b:ef:9b:f3:cb:d5:a1:7c:d0:66:d3:6c:02:f4:39:
                    c0:d6:38:88:cb:ed:1e:be:fc:df:d0:c7:d2:73:ca:
                    c7:c5:26:57:94:d3:d0:7c:c4:cc:9a:a5:49:b0:73:
                    c9:f4:23:3a:d5:3e:77:f6:08:21:a2:5b:1e:9e:ae:
                    be:7a:17:14:ba:1b:f8:7d:eb:c7:12:21:ab:aa:d8:
                    d6:2e:5a:bb:fa:63:c1:c0:6a:f1:28:62:db:69:30:
                    5e:79:f0:3a:71:d1:d7:c6:92:6d:e0:21:bc:23:15:
                    4e:33:5d:d4:16:eb:55:c3:33:0b:be:a5:c8:84:2a:
                    18:45:b5:aa:42:23:cb:c1:83:22:8b:5d:15:b6:33:
                    63:4d:62:fc:64:ca:61:9f:ba:50:c5:6a:02:62:2a:
                    e8:23:db:92:a6:58:e4:a2:22:97:b0:6d:08:68:a9:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:63:EB:F7:44:A5:70:7C:42:4F:0B:06:EA:2D:08:E4:87:AC:B9:B1
            X509v3 Authority Key Identifier:
                keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b9:b1:e1:65:5c:29:1e:13:1b:c9:d8:58:37:73:21:44:70:
         db:78:a3:35:89:40:04:17:f3:33:2c:f0:e9:c2:bd:26:d5:b0:
         40:0f:32:36:0b:c0:b5:f0:2a:df:04:76:7e:81:50:27:92:3f:
         20:20:3d:94:37:29:2b:ed:20:f8:fd:55:1e:41:88:5b:e1:a7:
         cb:f0:8e:07:6b:62:4a:19:08:8a:25:39:17:ee:43:90:f6:73:
         74:8b:d1:27:8a:42:77:1a:75:ab:56:58:06:60:4e:ed:d7:38:
         82:1c:bb:1a:84:01:b7:da:6b:88:ca:d8:31:52:70:52:06:40:
         52:02:79:b9:bd:8d:85:ec:03:38:02:18:e8:9f:06:d1:67:08:
         48:64:22:5e:f8:87:87:83:4f:54:2d:18:3f:d1:6d:1f:f7:f9:
         b5:3c:f8:87:c3:50:a7:0c:68:b8:38:8e:7b:a6:bf:87:e3:ea:
         02:5f:54:d4:51:49:a7:5b:4f:51:0a:f9:bf:01:13:0a:27:08:
         fc:8b:de:f6:b1:3c:a0:a6:d6:bd:c7:96:ad:88:f9:eb:80:61:
         57:12:21:4a:71:10:37:a9:e6:65:0d:40:ec:4e:13:8f:32:ea:
         4c:92:d9:51:05:eb:ae:d2:84:9b:a1:2e:87:1d:da:77:3b:45:
         0b:cf:c1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:40 2026 by rpki-client