Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
File:                     UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft (raw, json)
Hash identifier:          Dz9ePmP9uGaxRj01/Zvbou12YrWcRoyWUUq7pOnXpM8=
Subject key identifier:   B6:AF:75:40:B0:C4:CC:17:ED:66:9E:B1:43:B1:F1:78:B8:0A:45:AE
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Certificate issuer:       /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial:       019F93C8EB9100E524FA636A1952B6AFE789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
Manifest number:          19CE
Signing time:             Fri 24 Jul 2026 11:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:46 +0000
Files and hashes:         1: MQJyHdCQqrR49YtqfP5n2nCmdBc.roa (hash: tayylzbDzrQ2vAXY3YULZKX+Mr7ci8knVpJFx/AOaaM=)
                          2: UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl (hash: tk7VQ1nrCx8ND40/0XjZJ8BiT/9gxQdNMCbtjRYOj84=)
                          3: VDLlDzAUnpp3yY9jYEhslsSDEio.roa (hash: U4N6I7gKlIzNINdJyuTqu3g1hmT4TUUCZ4OMW8ayoD4=)
                          4: jSW60U-IDuUsjOlqZECJM6Mt8QM.roa (hash: wz6ZP0fktYKLcRgNv3R96YBySJmIs8qgZe1Q2mMxP04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:eb:91:00:e5:24:fa:63:6a:19:52:b6:af:e7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
        Validity
            Not Before: Jul 24 11:00:46 2026 GMT
            Not After : Jul 25 11:00:46 2026 GMT
        Subject: CN=b6af7540b0c4cc17ed669eb143b1f178b80a45ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:ca:21:67:96:f0:ce:81:b9:cc:09:b7:4d:
                    22:39:8c:d6:5b:d5:aa:63:c2:da:7f:99:15:98:3b:
                    e5:a1:ba:26:42:1d:4b:04:64:f7:86:66:d1:c9:c9:
                    7c:df:7f:88:83:eb:de:8c:cd:fb:e6:78:19:ef:2c:
                    f1:21:bc:93:72:bb:f3:06:f5:04:39:6f:8c:ac:90:
                    07:fd:9d:fe:cd:22:4b:ed:a4:68:e6:a8:10:09:7f:
                    2b:58:72:55:fe:a5:80:81:cd:59:28:39:59:90:b7:
                    d3:e7:de:3e:88:f8:d2:25:47:82:97:22:24:2e:4d:
                    8b:c7:36:91:21:ed:28:35:8d:35:b7:87:12:1a:a0:
                    bb:6f:96:67:6e:39:1f:36:f5:55:af:c9:d6:48:18:
                    45:f9:93:e7:75:42:9b:15:e1:4c:b2:ec:1d:33:93:
                    f9:a3:22:41:dd:5b:e5:81:b5:8e:70:78:4a:b3:eb:
                    33:1c:8b:cc:3d:db:ec:9c:a5:c8:f0:83:95:31:fb:
                    8b:55:3d:b6:b6:43:90:36:b8:f4:26:b5:1b:9d:54:
                    da:b4:c7:77:ec:6a:aa:9c:a1:c3:ab:79:6e:d9:94:
                    ff:ac:07:9f:67:1a:fc:9a:66:c4:27:1f:27:ab:97:
                    5b:54:62:36:b5:cc:85:78:e1:95:e5:c6:a8:64:35:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AF:75:40:B0:C4:CC:17:ED:66:9E:B1:43:B1:F1:78:B8:0A:45:AE
            X509v3 Authority Key Identifier:
                keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b1:28:83:05:14:8f:75:15:2c:0e:d3:67:06:b0:34:de:16:
         d6:1c:a5:7c:b4:2b:c1:96:e8:50:5b:5f:8e:70:53:71:9b:a2:
         c0:5f:08:2b:39:43:5a:bb:42:c6:79:64:80:19:8e:15:0c:02:
         f9:82:d3:73:8d:b0:a7:07:7a:84:dd:0c:16:7c:17:70:0a:58:
         b3:ce:8d:96:72:24:53:04:45:00:04:22:87:22:50:60:be:3e:
         72:46:5d:f5:a4:01:8e:12:6f:68:81:a2:32:87:ef:6f:55:f7:
         f2:f2:c5:9c:52:cb:2d:00:51:39:a9:93:d9:fc:14:04:d7:ff:
         da:ea:67:70:51:6e:30:b6:d0:62:c6:88:e1:85:d8:06:46:e4:
         55:49:ae:45:00:de:33:66:00:a6:3b:32:91:e3:9b:5b:c7:1a:
         ab:c9:87:9d:25:1d:62:db:f0:66:99:79:ab:12:5a:06:93:4a:
         4d:d9:0d:5f:71:19:f1:0e:63:66:13:1b:0d:0d:e0:07:c6:e0:
         6b:5d:93:87:a2:f1:c3:d3:88:79:a1:c3:39:da:1b:ba:ee:d7:
         26:9a:01:21:22:2d:2c:f3:21:03:4f:a8:11:ec:17:88:a7:39:
         cd:20:b5:74:54:52:d3:db:a3:be:5f:82:1c:af:6e:53:57:c4:
         5e:8e:d6:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyOuRAOUk+mNqGVK2r+eJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWM2M2M2ZDc1NmJiMmFjZDNmMWFkOTJhYzQxNWRhODU3
ZTZjOTgwHhcNMjYwNzI0MTEwMDQ2WhcNMjYwNzI1MTEwMDQ2WjAzMTEwLwYDVQQD
EyhiNmFmNzU0MGIwYzRjYzE3ZWQ2NjllYjE0M2IxZjE3OGI4MGE0NWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDXKIWeW8M6BucwJt00iOYzWW9Wq
Y8Laf5kVmDvlobomQh1LBGT3hmbRycl833+Ig+vejM375ngZ7yzxIbyTcrvzBvUE
OW+MrJAH/Z3+zSJL7aRo5qgQCX8rWHJV/qWAgc1ZKDlZkLfT594+iPjSJUeClyIk
Lk2LxzaRIe0oNY01t4cSGqC7b5ZnbjkfNvVVr8nWSBhF+ZPndUKbFeFMsuwdM5P5
oyJB3VvlgbWOcHhKs+szHIvMPdvsnKXI8IOVMfuLVT22tkOQNrj0JrUbnVTatMd3
7GqqnKHDq3lu2ZT/rAefZxr8mmbEJx8nq5dbVGI2tcyFeOGV5caoZDVXwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLavdUCwxMwX7WaesUOx8Xi4CkWuMB8GA1UdIwQY
MBaAFFCcY8bXVrsqzT8a2SrEFdqFfmyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMt
MzhhMzkyNDc3NmU5LzEvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMtMzhhMzkyNDc3NmU5
LzEvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrEogwUU
j3UVLA7TZwawNN4W1hylfLQrwZboUFtfjnBTcZuiwF8IKzlDWrtCxnlkgBmOFQwC
+YLTc42wpwd6hN0MFnwXcApYs86NlnIkUwRFAAQihyJQYL4+ckZd9aQBjhJvaIGi
Mofvb1X38vLFnFLLLQBROamT2fwUBNf/2upncFFuMLbQYsaI4YXYBkbkVUmuRQDe
M2YApjsykeObW8caq8mHnSUdYtvwZpl5qxJaBpNKTdkNX3EZ8Q5jZhMbDQ3gB8bg
a12Th6Lxw9OIeaHDOdobuu7XJpoBISItLPMhA0+oEewXiKc5zSC1dFRS09ujvl+C
HK9uU1fEXo7W8Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:52:36 2026 by rpki-client