Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File:                     uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier:          LxICwSNwR++vuAZo8m18O7aOrdUhDwCiLDeUgkeJH5Y=
Subject key identifier:   0B:21:15:BA:19:F3:C4:F7:E6:B3:AD:F9:70:F5:4D:AF:2C:E4:D2:34
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer:       /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial:       019F9392556B6E2B05C86DBDB5AEBC58903C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number:          0913
Signing time:             Fri 24 Jul 2026 10:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:08 +0000
Files and hashes:         1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
                          2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
                          3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: gP4+CsL6Keq56Nh/mcvGQok4T87wvJEl4w/hZCdpIx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:55:6b:6e:2b:05:c8:6d:bd:b5:ae:bc:58:90:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
        Validity
            Not Before: Jul 24 10:01:08 2026 GMT
            Not After : Jul 25 10:01:08 2026 GMT
        Subject: CN=0b2115ba19f3c4f7e6b3adf970f54daf2ce4d234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:51:c7:af:b3:ee:06:e5:33:38:4b:3e:e2:
                    2c:01:8b:0a:6b:2d:c6:5c:b9:e9:fe:29:1d:ed:59:
                    be:17:11:5f:77:d6:27:e2:a5:77:f9:96:d6:46:4f:
                    ad:a5:c8:24:2e:23:98:3b:21:8f:01:1d:be:97:d1:
                    1a:28:68:9d:1a:c1:98:93:58:90:b9:30:50:02:b6:
                    eb:e8:43:4b:fe:a9:17:83:01:f0:eb:3f:9e:aa:bf:
                    a8:c6:e1:29:29:29:32:46:92:69:bb:4f:aa:fe:fc:
                    1f:38:9f:8b:63:5d:4d:f2:bb:8c:dc:61:10:a5:66:
                    ad:57:ef:d3:31:ff:87:0a:ad:b3:b8:ee:eb:40:4a:
                    a9:c3:b0:71:3f:1c:18:cd:18:e2:25:4d:77:00:ef:
                    b2:29:d1:56:6f:e1:f8:67:c0:97:b8:d9:d8:f9:e6:
                    67:07:83:09:16:31:cf:2d:4c:8d:74:f9:08:44:36:
                    76:e2:d3:ec:39:19:68:5e:bb:3a:f3:69:0b:d6:62:
                    60:c7:d7:81:05:85:ce:b5:f1:0d:06:91:f8:ac:a6:
                    c3:67:23:a2:8f:a6:e3:f8:8e:16:ba:cd:ab:2f:f8:
                    b1:60:1d:2c:69:e8:c9:52:01:72:aa:27:af:95:87:
                    fb:4e:67:1b:a4:30:98:f9:f6:96:f2:8b:f7:d9:b0:
                    ea:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:21:15:BA:19:F3:C4:F7:E6:B3:AD:F9:70:F5:4D:AF:2C:E4:D2:34
            X509v3 Authority Key Identifier:
                keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:03:88:8b:e7:75:01:17:bd:eb:66:a7:45:99:91:aa:ab:ed:
         6c:dc:b0:c3:c2:d9:8d:fa:d6:06:57:d1:52:2c:12:fe:06:54:
         62:49:41:db:4e:bc:5c:b7:61:14:a8:6c:04:9f:de:1b:05:aa:
         af:54:76:fc:cb:f9:15:6c:42:45:d5:33:e0:01:a5:b3:72:bf:
         d0:85:23:fe:97:99:f8:d1:80:fb:0f:4b:6c:9b:85:44:a7:5e:
         0b:b3:61:f8:f9:a8:0f:9b:02:0b:12:1a:bd:5f:bb:0e:71:5d:
         a8:60:f6:3a:c9:92:32:5c:e1:05:20:6f:67:fb:d5:eb:03:9b:
         30:90:e3:ff:ac:bd:b6:7e:b1:38:46:f1:c5:b2:36:ee:2a:da:
         47:38:8f:ca:25:53:57:e3:45:87:60:19:90:58:65:25:bc:04:
         6e:1a:e4:64:ea:af:35:4a:bc:3a:55:70:77:f9:95:d9:9f:d4:
         b8:83:c3:13:b8:1b:18:ed:83:90:9c:82:0f:fa:80:fa:71:53:
         c6:bb:a9:9f:83:c1:bd:bf:0f:a1:a5:34:27:69:81:a3:05:72:
         7b:81:f4:f5:ad:18:89:4b:e5:4f:7b:7a:f7:d8:b5:d9:9c:c3:
         00:cc:4a:1c:5e:eb:31:63:21:43:4d:54:1f:75:ac:d1:72:5e:
         4b:58:fe:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:36 2026 by rpki-client