Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
File:                     Uwt27wq1VbyLB2H2BopE4QsrMfc.mft (raw, json)
Hash identifier:          aKsNEDc8x0CYw12B/u6Z4+QGI75heu0cF0oV4lzgo04=
Subject key identifier:   8D:4D:64:54:B8:BC:CE:59:30:D3:1D:0F:87:55:5C:80:2A:39:13:F5
Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
Certificate issuer:       /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Certificate serial:       019F935B132AF8804CF0A7198BFC66175808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 09:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:47 +0000
Files and hashes:         1: 7qtrZvTgn0cpSEVLml8fcuthLe4.roa (hash: S4nLPxNgM6/xYB2o4ZydmxvSiUoLNOsPi+E4YsX/E2g=)
                          2: Uwt27wq1VbyLB2H2BopE4QsrMfc.crl (hash: +P8vcge2KJ4mSI51ij2xgyYPczRVMpUUN2NBMuSWaog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:13:2a:f8:80:4c:f0:a7:19:8b:fc:66:17:58:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
        Validity
            Not Before: Jul 24 09:00:47 2026 GMT
            Not After : Jul 25 09:00:47 2026 GMT
        Subject: CN=8d4d6454b8bcce5930d31d0f87555c802a3913f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:0e:44:a1:ab:4f:70:c2:92:ed:d7:b9:db:
                    24:3f:e0:9b:ed:d2:e8:09:d6:91:da:5d:5e:37:25:
                    bf:00:e4:74:18:1b:03:8a:65:aa:3f:18:a4:87:b4:
                    3d:ee:42:ce:43:52:3f:10:f3:32:ae:fa:71:36:94:
                    20:c1:84:32:de:13:f6:de:d6:8c:79:d9:8c:eb:fd:
                    16:df:6c:49:48:1f:15:e6:76:72:0f:f5:92:6e:14:
                    33:cf:57:b9:72:1d:41:f8:23:77:6c:b0:bb:db:4b:
                    15:d6:50:03:9d:1e:8d:f9:41:38:60:4f:0c:a2:45:
                    d8:f1:59:72:7f:e4:2f:84:99:53:e3:91:90:e2:81:
                    49:83:a1:6a:c9:ff:9a:33:19:08:fb:2e:69:d6:6c:
                    41:23:b2:2d:03:5e:ba:dd:07:9a:90:b8:fa:e5:fb:
                    6c:d7:f3:e9:e3:83:43:b2:2e:e9:4f:20:ad:37:50:
                    f5:48:3f:25:4a:bb:d8:c7:74:3b:06:f1:24:46:67:
                    29:9f:e4:d7:d6:5e:40:ad:65:62:8b:08:12:7d:7a:
                    b5:8d:90:2a:45:c4:11:39:95:1a:dd:4d:f1:17:59:
                    83:cb:e7:b9:4d:92:3c:ed:6a:ba:c7:30:e8:9c:e4:
                    e8:06:61:cd:cf:be:7b:28:07:99:87:0b:01:a6:66:
                    95:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4D:64:54:B8:BC:CE:59:30:D3:1D:0F:87:55:5C:80:2A:39:13:F5
            X509v3 Authority Key Identifier:
                keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:53:9d:1a:ff:20:bd:09:d0:84:b9:9d:d8:07:de:91:ec:46:
         18:45:07:84:eb:8a:d1:93:3b:8a:52:c5:25:74:1d:d3:69:07:
         ed:36:4b:cc:2d:a1:c5:0c:27:53:4f:12:3a:0f:eb:c4:d1:02:
         05:1a:b2:c9:ff:ee:1b:d5:76:b4:16:3e:3d:38:52:1c:aa:1e:
         74:27:18:5f:fc:40:83:14:a1:d4:5b:80:af:60:6e:6d:1e:db:
         37:d8:e5:e8:5a:8f:77:61:66:2a:03:eb:e8:59:51:96:21:b5:
         8f:d3:9e:8e:65:00:e7:b5:af:9d:e9:08:c5:c9:1c:02:40:44:
         e4:2f:b4:45:69:0c:95:a8:af:c1:b7:fa:06:de:14:9a:1e:f0:
         71:6d:bb:1d:e5:68:5c:ae:68:8e:61:5b:59:fb:a8:64:93:5a:
         a7:9e:96:26:34:74:af:ec:ac:ac:b8:a1:09:8d:af:3c:84:86:
         6d:70:4c:ce:c0:d0:71:9c:cf:e5:ff:2f:3a:87:51:b2:45:0f:
         20:d5:9f:7c:1c:56:f2:45:55:53:36:ae:15:7e:87:85:2c:57:
         7e:ed:bc:a3:ff:d3:93:71:d2:f3:cd:bf:4d:a7:3a:6c:c6:2a:
         51:1d:cd:7f:c9:ed:55:d2:63:2e:ce:8a:26:80:5b:f6:0a:b0:
         19:55:58:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:19 2026 by rpki-client