Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File:                     uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier:          tz9NnfaaqojuntNQHd8lNsDHVWlkG55G/EpmpWmwU0U=
Subject key identifier:   D0:E3:45:32:0A:55:BB:9E:39:A9:81:30:43:88:C1:C5:0F:05:DA:49
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer:       /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial:       019F90FEF95A639B938283C5B58C2BD8CB88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number:          1128
Signing time:             Thu 23 Jul 2026 22:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:56 +0000
Files and hashes:         1: S-yBnbW2TPRdHm8Bvnkb6SKNP-E.roa (hash: thzWzHkRBVrBpMkyMju39NgzMSOUf/2SSYied1BZFaw=)
                          2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: +a4fNoojxNKePUTTSIh1wWE7MnjnzSfS1K6ODNOSuIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:f9:5a:63:9b:93:82:83:c5:b5:8c:2b:d8:cb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
        Validity
            Not Before: Jul 23 22:00:56 2026 GMT
            Not After : Jul 24 22:00:56 2026 GMT
        Subject: CN=d0e345320a55bb9e39a981304388c1c50f05da49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:82:34:0e:6e:d3:ad:94:39:13:fd:bc:92:
                    40:a5:2a:ae:53:17:18:79:e0:7c:64:ac:69:63:64:
                    26:63:94:46:13:92:a9:2d:66:36:95:b4:27:6b:ce:
                    d7:0a:60:c5:d4:7e:92:53:a5:f7:c4:ba:1b:43:01:
                    af:35:dc:a0:b8:58:ce:3b:93:63:ab:7d:8d:e4:09:
                    b1:69:9e:0e:52:cc:a5:ca:31:c1:2e:a4:e0:07:af:
                    96:11:01:25:f8:52:fd:0c:50:97:06:a5:56:6f:52:
                    ce:66:01:2d:fd:12:b4:a7:2f:c7:93:2c:f4:f3:79:
                    dc:8b:25:43:9d:bc:a4:9d:f1:55:18:fc:20:f7:ae:
                    d5:7c:23:68:be:ed:e3:92:a9:f4:a0:41:af:99:c3:
                    cf:1a:93:94:44:2e:09:20:2f:81:14:5b:75:2a:ed:
                    3f:34:7f:c7:0d:31:50:a8:38:4c:f4:24:79:98:ac:
                    0f:bc:4b:15:78:ef:2f:9e:45:f2:e0:37:99:01:76:
                    63:20:a7:43:3a:d8:2f:b6:7b:26:c7:35:ab:b9:5b:
                    8e:f5:cb:a0:f9:07:ba:5b:e7:c8:a2:cd:0a:6c:d5:
                    38:e8:89:22:a3:56:30:8f:19:d1:70:13:40:49:ba:
                    b8:fc:f8:39:c0:38:67:b2:60:c0:2b:0a:f5:ce:c8:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E3:45:32:0A:55:BB:9E:39:A9:81:30:43:88:C1:C5:0F:05:DA:49
            X509v3 Authority Key Identifier:
                keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:a7:2d:df:61:fd:a9:b5:5f:51:3f:56:35:b3:f2:26:54:
         3c:28:69:4a:e1:95:ac:47:8b:d2:a2:68:4f:71:3e:dd:cb:e4:
         d4:a6:5b:de:b5:95:88:76:fe:7a:86:38:ac:a9:52:20:57:5b:
         57:f5:24:2d:8c:65:76:02:29:75:b9:21:d7:52:27:a7:76:fb:
         14:a8:7e:44:83:25:9c:69:6a:f8:cc:9b:02:8e:e3:b8:8b:71:
         74:ea:2a:bd:67:4d:2c:c6:15:ef:1d:3a:9c:95:33:d4:60:2c:
         6d:62:25:e9:60:74:52:2a:bd:a1:1e:37:22:e8:0b:70:90:53:
         0a:d3:15:db:b9:95:17:7f:b3:ab:e6:c1:af:08:6e:02:15:03:
         26:fe:2e:2d:07:20:b8:56:ae:1e:69:95:a3:8f:82:55:b2:8c:
         f4:8f:92:ca:e2:60:24:d0:66:06:08:6b:9f:23:ac:3a:bb:14:
         bc:91:b7:eb:57:5f:95:c8:b2:ec:76:d5:81:68:db:bc:a7:fa:
         51:97:29:e3:be:08:64:2b:a4:55:87:d3:c2:d7:08:00:64:76:
         ce:31:19:c1:07:1c:54:62:cc:8e:58:e1:8b:c8:5e:01:ba:eb:
         2e:56:57:24:05:46:1e:01:a3:a6:16:b7:48:ac:75:61:0b:af:
         cf:22:80:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:14 2026 by rpki-client