Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
File:                     pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft (raw, json)
Hash identifier:          XKLcSqeIfssjNtan8SmKCZS1jdzCiIe9Stw15Zh/7zI=
Subject key identifier:   63:B1:69:50:E1:46:39:68:E1:5D:73:17:54:B8:7C:F9:80:D3:75:F2
Authority key identifier: A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
Certificate issuer:       /CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Certificate serial:       019F8F108D060A290D102A07EE0E0FD87E95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
Manifest number:          B0
Signing time:             Thu 23 Jul 2026 13:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:54 +0000
Files and hashes:         1: kHouM2VLdzKRZTCra3l9Z36Mmyk.asa (hash: sV07n58Gs6Mq12Maj9pNWDdpH7lTopJq8te/ptrRpDw=)
                          2: pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl (hash: MuGiE4PJ91QLOYKbWSjfwdyzp4VpsXKCsPafZ4mtJEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:8d:06:0a:29:0d:10:2a:07:ee:0e:0f:d8:7e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
        Validity
            Not Before: Jul 23 13:00:54 2026 GMT
            Not After : Jul 24 13:00:54 2026 GMT
        Subject: CN=63b16950e1463968e15d731754b87cf980d375f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:80:89:55:00:8a:9f:19:72:85:5b:8a:28:
                    80:ca:06:82:7e:8e:b7:7f:f7:3d:9a:3c:96:dd:64:
                    01:10:e4:c5:7d:9c:3c:49:b2:66:d8:76:0a:d7:33:
                    9e:10:1b:27:af:aa:7b:72:96:63:fe:57:66:a5:36:
                    31:16:bd:51:6b:15:24:76:84:6e:57:ce:e9:36:42:
                    28:09:8d:90:91:97:1c:6d:12:8d:46:be:2a:70:07:
                    ac:02:40:bf:ea:b7:bf:8f:db:0a:1a:0e:5f:d0:e9:
                    82:10:0e:54:11:bc:64:33:79:dc:74:b5:11:25:89:
                    b6:ab:31:80:df:05:81:08:8a:37:2c:ce:2b:03:19:
                    c8:28:04:43:d6:93:7f:51:b4:ac:12:1e:0b:df:a5:
                    b0:c2:dd:7a:6a:aa:e8:1a:86:96:d8:9a:5a:e8:f2:
                    b0:cc:f8:dc:cf:a2:5e:51:b6:88:26:11:eb:6c:34:
                    0a:be:01:71:60:17:97:8e:4a:14:b4:8f:04:d8:18:
                    d1:3c:b1:6f:28:e7:a9:69:ec:e5:63:65:3c:3a:63:
                    db:3a:85:a5:df:f1:76:e9:f0:26:db:24:f1:f8:6f:
                    02:1f:1f:fe:27:73:2b:32:a6:28:a2:37:ed:d2:16:
                    9c:7c:d3:18:36:e0:b1:2d:20:9b:de:80:dd:6d:8a:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B1:69:50:E1:46:39:68:E1:5D:73:17:54:B8:7C:F9:80:D3:75:F2
            X509v3 Authority Key Identifier:
                keyid:A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:34:c5:33:fa:50:f7:8f:51:86:74:72:e7:66:e5:35:1b:4f:
         cf:c8:b5:f1:7d:d1:95:64:c7:cc:1d:4f:cc:cf:ec:9f:a7:d2:
         e4:e5:56:b7:44:7d:3e:0f:f3:d3:e3:72:bf:19:5a:62:6f:a5:
         4b:79:b5:97:ac:36:84:fd:a0:03:a8:5b:bc:2c:2c:cc:c5:84:
         c1:52:a6:66:d8:15:5b:17:59:8f:5c:53:8c:73:9d:f5:3e:78:
         b9:82:59:3e:84:d4:55:03:26:14:42:c8:11:c4:1c:14:91:93:
         d5:85:af:1d:85:68:63:67:69:5a:b1:cb:d9:12:9f:7b:c6:0b:
         39:ad:1e:ca:c3:e3:53:a3:1e:25:47:66:8d:c7:83:32:43:22:
         cd:83:90:74:3b:f0:02:14:a8:e6:b2:75:33:84:e2:42:6e:f8:
         75:cc:cc:d6:4f:39:7f:c5:f1:6f:a4:55:88:62:87:8b:f0:fa:
         48:6c:4a:1e:42:24:4f:d1:17:7f:de:af:8c:5a:43:fc:a5:c8:
         39:dd:a5:a0:a7:66:56:19:50:9f:2b:8c:92:ad:40:f6:fb:eb:
         ff:c6:d1:27:2a:b9:5b:f8:2c:7b:fb:06:6c:ef:20:a4:f2:a5:
         92:9e:1e:bb:b9:d4:96:06:ff:9b:50:94:4d:9f:07:e2:c3:b7:
         0e:d6:25:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:57:27 2026 by rpki-client