Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File:                     uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier:          w6+Tuy/cwm53XdEo/JFImVvxy1Fn2U9XHHiUyaTwDu0=
Subject key identifier:   9C:16:CA:94:4B:3E:EC:28:DF:2E:5E:AA:12:90:17:C9:B7:11:77:8E
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer:       /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial:       019F958031F1F69CCB0505E04A80ACBCA7C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number:          0914
Signing time:             Fri 24 Jul 2026 19:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 19:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 19:00:34 +0000
Files and hashes:         1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
                          2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
                          3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: rDiIwjUZzpAlWfXeyzYenbW23eDwXtj5k7tZjE+Fbzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:31:f1:f6:9c:cb:05:05:e0:4a:80:ac:bc:a7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
        Validity
            Not Before: Jul 24 19:00:34 2026 GMT
            Not After : Jul 25 19:00:34 2026 GMT
        Subject: CN=9c16ca944b3eec28df2e5eaa129017c9b711778e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:49:9c:31:a1:79:b3:eb:6e:f5:1e:76:3e:36:
                    f2:9b:5e:f8:cc:cb:76:8f:75:7b:6e:9d:60:17:e3:
                    c7:32:47:22:b4:d4:d9:0f:4a:55:79:27:af:2a:f3:
                    49:4d:18:20:f3:44:02:c4:b8:d8:9d:8d:0b:fd:6d:
                    dc:1a:a0:ba:7c:fc:1a:26:cd:0f:29:23:58:1e:60:
                    fc:8f:46:b2:5b:0b:90:4f:36:85:9a:ef:1a:bc:19:
                    74:51:26:7c:b6:92:06:8e:1e:d9:6f:6f:4d:3f:37:
                    8c:ed:79:43:61:1b:5f:12:90:62:5b:d2:83:a7:76:
                    5d:7e:7b:b3:49:61:26:1d:3a:35:d5:d1:d7:d7:b6:
                    1d:63:96:4d:9c:c2:11:2e:1f:db:28:57:3b:8d:05:
                    e4:03:72:ca:e1:d7:21:83:71:6b:4f:19:d2:27:17:
                    37:0d:7b:e9:77:30:a0:e7:f1:68:6a:e3:5f:5d:1d:
                    3c:24:bd:b9:86:61:23:27:cd:da:28:9c:dc:7b:e9:
                    40:23:ee:a0:98:cf:0f:38:6d:0a:eb:a2:0d:79:c0:
                    99:e4:1a:75:bf:17:b4:a4:39:73:87:ef:5c:e0:b5:
                    94:70:f2:65:9b:b7:9d:be:4e:7c:79:44:04:cf:00:
                    1a:0f:85:4a:5a:92:82:4a:11:ee:bd:77:60:35:17:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:16:CA:94:4B:3E:EC:28:DF:2E:5E:AA:12:90:17:C9:B7:11:77:8E
            X509v3 Authority Key Identifier:
                keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ca:24:c7:06:8a:1c:0b:c9:dd:30:59:15:34:ca:ef:97:2b:
         93:39:e0:b0:86:0f:a7:b1:b1:5f:6b:b1:29:f1:9b:c1:f1:5b:
         16:84:58:71:f9:bd:9e:54:42:f1:ce:b6:01:96:f7:b4:cd:c2:
         ed:0a:10:fd:f3:fc:cd:56:1f:08:d2:a1:0c:eb:dd:93:f8:95:
         92:cd:ac:d0:7b:84:38:d7:c4:69:21:2c:b1:d8:94:a9:e5:7a:
         e9:ec:19:fc:62:1a:a6:3a:ef:d0:72:1e:4b:7d:29:30:57:3a:
         ff:c8:3f:85:22:df:49:b2:2d:05:80:2c:69:c6:34:f9:b8:c7:
         8d:71:13:c2:63:3b:88:eb:51:d3:25:b0:29:7f:36:42:74:43:
         ef:08:39:ca:6f:af:42:b5:ff:80:8b:f4:6e:90:ef:d0:ef:2e:
         f6:58:66:b6:c6:1a:cd:98:e5:4b:d5:f4:0c:e8:97:a7:7f:dd:
         84:21:98:86:b2:1e:18:16:40:1c:3f:52:05:e9:52:f7:c7:e0:
         b3:94:e4:ec:2b:d6:c4:c8:5c:de:24:28:46:ad:4b:12:03:50:
         2b:49:d1:87:ca:bf:09:ac:b6:29:be:af:c6:d6:c9:9e:34:45:
         5e:58:68:65:b2:ff:04:91:8a:3a:ea:4f:98:09:6a:47:1d:7a:
         7d:24:aa:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VgDHx9pzLBQXgSoCsvKfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OTUxYzg1MTRiN2RkMjFiMzMzYWJiMzNjYWNhM2M0ZGFl
OWQ3MDkwHhcNMjYwNzI0MTkwMDM0WhcNMjYwNzI1MTkwMDM0WjAzMTEwLwYDVQQD
Eyg5YzE2Y2E5NDRiM2VlYzI4ZGYyZTVlYWExMjkwMTdjOWI3MTE3NzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUmcMaF5s+tu9R52Pjbym174zMt2
j3V7bp1gF+PHMkcitNTZD0pVeSevKvNJTRgg80QCxLjYnY0L/W3cGqC6fPwaJs0P
KSNYHmD8j0ayWwuQTzaFmu8avBl0USZ8tpIGjh7Zb29NPzeM7XlDYRtfEpBiW9KD
p3ZdfnuzSWEmHTo11dHX17YdY5ZNnMIRLh/bKFc7jQXkA3LK4dchg3FrTxnSJxc3
DXvpdzCg5/FoauNfXR08JL25hmEjJ83aKJzce+lAI+6gmM8POG0K66INecCZ5Bp1
vxe0pDlzh+9c4LWUcPJlm7edvk58eUQEzwAaD4VKWpKCShHuvXdgNRea8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwWypRLPuwo3y5eqhKQF8m3EXeOMB8GA1UdIwQY
MBaAFLiVHIUUt90hszOrszyso8Ta6dcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQt
OGNkNzk1MjdlNTMwLzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQtOGNkNzk1MjdlNTMw
LzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsokxwaK
HAvJ3TBZFTTK75crkzngsIYPp7GxX2uxKfGbwfFbFoRYcfm9nlRC8c62AZb3tM3C
7QoQ/fP8zVYfCNKhDOvdk/iVks2s0HuEONfEaSEssdiUqeV66ewZ/GIapjrv0HIe
S30pMFc6/8g/hSLfSbItBYAsacY0+bjHjXETwmM7iOtR0yWwKX82QnRD7wg5ym+v
QrX/gIv0bpDv0O8u9lhmtsYazZjlS9X0DOiXp3/dhCGYhrIeGBZAHD9SBelS98fg
s5Tk7CvWxMhc3iQoRq1LEgNQK0nRh8q/Cay2Kb6vxtbJnjRFXlhoZbL/BJGKOupP
mAlqRx16fSSqrA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:07:37 2026 by rpki-client