Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
File:                     Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json)
Hash identifier:          6QHpsM0ZKD56FZ/Ikba5IeUNKehmEg8pIHYtqj4DpEg=
Subject key identifier:   95:0B:BC:43:79:BE:F7:A1:71:D4:AC:B3:A9:D2:03:33:96:32:2B:08
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Certificate issuer:       /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial:       019F92485A5622F239451ED30B2D2FF3D55A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 04:00:42 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:42 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:42 +0000
Files and hashes:         1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: DqWhD/bcagaeBc/8T3rROtq9AE9468X7KN+l7WimCFc=)
                          2: gasIi9uIBm_j6aD0r4hpEpXQM6k.roa (hash: Wp7nXb862KjRHfKzxWCc0lZMplvU3kmdQKf28f0j66g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:5a:56:22:f2:39:45:1e:d3:0b:2d:2f:f3:d5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
        Validity
            Not Before: Jul 24 04:00:42 2026 GMT
            Not After : Jul 25 04:00:42 2026 GMT
        Subject: CN=950bbc4379bef7a171d4acb3a9d2033396322b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:03:2e:86:f8:25:fd:c8:89:1e:68:f5:e1:
                    d1:d2:79:c4:09:36:88:72:d4:0d:19:6f:e9:e9:e5:
                    ee:4f:77:c7:75:28:bc:a9:b2:9f:7d:03:2c:38:ab:
                    7f:f6:b4:5e:df:d9:2a:10:70:ec:38:01:b0:51:1c:
                    a5:66:6c:91:d2:8f:47:5c:e3:12:63:b8:8d:d9:dc:
                    7e:fe:29:30:c2:e5:46:ca:12:a0:f8:c7:34:28:2e:
                    10:f4:80:9c:23:21:be:72:61:0e:48:b4:de:a4:4a:
                    eb:6c:a3:67:d2:0a:f4:74:ce:bd:1e:4e:77:64:d7:
                    91:84:fc:64:9d:a4:84:0f:70:fe:37:2e:0b:f2:1d:
                    5a:df:5c:03:2c:40:ac:55:80:20:8b:b1:46:f7:53:
                    ef:62:de:f0:46:98:5f:cb:3b:32:bb:e7:43:8a:ae:
                    2c:93:bc:45:7b:8c:48:29:54:36:66:d4:d8:c6:e4:
                    bb:ef:77:61:36:d1:34:02:77:db:db:68:43:ee:33:
                    50:12:23:65:9a:fb:8c:cb:45:de:b7:e0:bb:32:28:
                    88:96:d0:bc:7d:31:be:f7:39:7f:8f:ca:00:97:da:
                    66:44:f5:5e:0b:fd:68:8a:bf:27:51:b6:23:97:ae:
                    cf:1d:2d:7f:16:72:26:a0:b1:ac:3c:28:36:fa:65:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0B:BC:43:79:BE:F7:A1:71:D4:AC:B3:A9:D2:03:33:96:32:2B:08
            X509v3 Authority Key Identifier:
                keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9e:fd:88:94:54:36:59:b3:bc:9e:86:75:4f:7a:30:9b:db:
         c6:51:a0:62:c0:d2:14:2d:64:92:71:fa:20:76:38:11:95:14:
         4a:f9:80:3d:29:ae:3d:58:51:a0:95:d6:6b:fb:0c:55:e7:bc:
         8f:25:4a:b3:c7:b0:a1:cf:19:90:2e:7c:34:87:a8:41:80:2c:
         2c:79:41:d5:d7:aa:c5:67:be:98:b2:49:3d:19:4e:d1:05:b2:
         8f:8d:14:7b:af:f4:66:a9:e9:1d:4c:27:1f:fe:63:bc:26:d8:
         c3:7e:7f:25:1b:bd:35:94:be:ce:f2:d7:70:b7:d3:a7:df:31:
         4b:25:db:58:1a:9e:25:5f:6a:53:03:08:c4:23:4d:46:84:ff:
         74:f5:08:03:94:90:28:dc:60:26:6b:83:ba:9a:65:fd:43:94:
         32:eb:39:68:f1:38:93:37:77:43:f1:03:2e:81:32:0a:9b:c4:
         0e:bd:1d:41:76:ff:aa:58:44:12:c9:ee:c2:c1:e9:33:28:50:
         9b:44:9d:af:4c:5d:4e:02:c0:a7:d6:46:e9:c8:fd:fc:af:65:
         a9:eb:ba:cd:c5:8f:07:be:5d:27:36:76:cf:f6:b4:29:11:5c:
         10:1f:26:9c:fc:14:4f:05:b4:9d:0b:f2:20:6a:65:6b:c1:14:
         e8:94:82:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:42 2026 by rpki-client