Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
File:                     UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft (raw, json)
Hash identifier:          Bpz3TrhdCOnGFeQA/yO7G/ngTg8AbDcD1BvfygIaG9U=
Subject key identifier:   3C:2B:F1:24:8D:D8:0A:FD:DE:5A:42:17:3A:56:9B:98:47:82:A4:97
Authority key identifier: 50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
Certificate issuer:       /CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Certificate serial:       019F92488C102DAB3EE96E04963589F871A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
Manifest number:          0913
Signing time:             Fri 24 Jul 2026 04:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:55 +0000
Files and hashes:         1: NRjE2ub-qyO1bTuX03Zvfc6I9B4.roa (hash: T1iZTA7aq3lUr9C6VWAbrTX5NRDe5+H29lpTIjZMGkc=)
                          2: UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl (hash: qNWXqcU6nT4E/04IeP3mPTS1EN20C+kODxDzLkI/Ndg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:8c:10:2d:ab:3e:e9:6e:04:96:35:89:f8:71:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5053c7da9c8fffea5ced97a7990200d4beee4177
        Validity
            Not Before: Jul 24 04:00:55 2026 GMT
            Not After : Jul 25 04:00:55 2026 GMT
        Subject: CN=3c2bf1248dd80afdde5a42173a569b984782a497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:43:d1:b2:4b:c9:20:14:fd:a2:82:1d:45:
                    6d:ee:e9:a3:0a:28:7f:15:e8:37:5c:3a:d9:a4:1b:
                    7e:c1:58:51:40:6d:7c:bd:50:0e:bb:2e:8f:bd:05:
                    34:54:42:e6:ef:e4:2a:85:58:59:e3:86:b1:77:1b:
                    f5:2d:2e:89:f8:2b:29:b8:00:d4:1e:1f:fc:c0:da:
                    7b:64:e0:90:fb:49:e8:fe:7f:ed:34:2d:aa:20:23:
                    d4:eb:8d:45:3f:ca:d3:3f:5a:0e:89:ef:c1:8f:01:
                    50:7c:19:ca:0c:0f:01:59:ce:4b:a3:2f:35:dc:88:
                    d5:ba:a6:0a:46:48:ca:5b:4c:d8:0e:cd:85:70:1e:
                    6a:55:d0:f0:dc:4c:ee:37:5e:ba:8f:75:86:9d:cd:
                    f8:08:31:dd:db:55:62:62:21:5e:4b:31:3e:77:73:
                    c2:ef:69:d0:93:ad:8a:06:28:b5:cb:5f:6b:7a:dd:
                    bb:9e:48:96:64:2d:40:9f:eb:8a:ac:9e:13:22:c3:
                    46:e2:df:35:ff:c9:52:50:8d:c8:82:34:7d:3a:f1:
                    ea:b1:ad:91:2a:4a:5c:22:dd:06:61:13:be:cd:cd:
                    12:fe:11:49:39:65:75:d0:3a:6b:63:ac:b5:6d:f3:
                    bc:1e:42:5f:da:88:f3:d9:cb:95:e4:c7:aa:ee:d3:
                    8d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2B:F1:24:8D:D8:0A:FD:DE:5A:42:17:3A:56:9B:98:47:82:A4:97
            X509v3 Authority Key Identifier:
                keyid:50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:68:f5:75:6c:74:ac:70:60:05:ce:f2:f0:cf:54:d2:d9:64:
         7c:56:b6:10:28:f4:27:40:9b:ea:bc:4c:b6:28:11:8c:8a:75:
         65:40:57:92:57:4a:c2:1b:97:9e:04:94:7d:60:43:a9:37:dc:
         94:ca:00:65:d5:4d:d8:0d:c3:21:9c:3b:c4:5d:bc:69:3f:f8:
         c6:e6:0c:38:b4:f4:a0:33:3a:56:54:38:7e:56:3a:b7:23:e8:
         98:b4:e3:4c:39:cb:57:4c:ef:31:38:c7:96:f5:60:69:ef:f1:
         22:23:58:60:6c:4e:26:09:3b:d5:af:25:10:52:bf:a8:02:18:
         8a:73:ae:93:d4:26:55:c8:d4:0b:2e:46:2f:22:24:17:b8:f1:
         ab:90:fe:af:33:f0:28:f9:26:39:41:cc:d7:1d:5f:c6:3f:57:
         c4:32:45:58:45:d9:d7:95:cb:5d:8a:99:a1:ad:ee:7b:6d:cf:
         80:3f:88:44:17:71:38:b1:18:4b:51:96:9b:26:54:15:46:4c:
         0d:3f:88:69:35:39:8f:3a:6c:da:2e:15:41:7c:d1:fb:79:49:
         a9:9c:65:6c:12:c5:8a:de:bc:b4:44:57:d0:f5:bc:fe:ab:20:
         f7:ad:ed:5c:51:81:29:d9:13:e9:c0:e2:58:e5:2a:0a:1b:0c:
         9d:29:f9:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSIwQLas+6W4EljWJ+HGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTNjN2RhOWM4ZmZmZWE1Y2VkOTdhNzk5MDIwMGQ0YmVl
ZTQxNzcwHhcNMjYwNzI0MDQwMDU1WhcNMjYwNzI1MDQwMDU1WjAzMTEwLwYDVQQD
EygzYzJiZjEyNDhkZDgwYWZkZGU1YTQyMTczYTU2OWI5ODQ3ODJhNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/9D0bJLySAU/aKCHUVt7umjCih/
Feg3XDrZpBt+wVhRQG18vVAOuy6PvQU0VELm7+QqhVhZ44axdxv1LS6J+CspuADU
Hh/8wNp7ZOCQ+0no/n/tNC2qICPU641FP8rTP1oOie/BjwFQfBnKDA8BWc5Loy81
3IjVuqYKRkjKW0zYDs2FcB5qVdDw3EzuN166j3WGnc34CDHd21ViYiFeSzE+d3PC
72nQk62KBii1y19ret27nkiWZC1An+uKrJ4TIsNG4t81/8lSUI3IgjR9OvHqsa2R
KkpcIt0GYRO+zc0S/hFJOWV10DprY6y1bfO8HkJf2ojz2cuV5Meq7tON3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwr8SSN2Ar93lpCFzpWm5hHgqSXMB8GA1UdIwQY
MBaAFFBTx9qcj//qXO2Xp5kCANS+7kF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZQSDJweVBfLXBjN1plbm1RSUExTDd1UVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wZjhjZTctY2E5Ni00MzViLTg1NzQt
YWM2MjBkYTJmODdlLzEvVUZQSDJweVBfLXBjN1plbm1RSUExTDd1UVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8wZjhjZTctY2E5Ni00MzViLTg1NzQtYWM2MjBkYTJmODdl
LzEvVUZQSDJweVBfLXBjN1plbm1RSUExTDd1UVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGj1dWx0
rHBgBc7y8M9U0tlkfFa2ECj0J0Cb6rxMtigRjIp1ZUBXkldKwhuXngSUfWBDqTfc
lMoAZdVN2A3DIZw7xF28aT/4xuYMOLT0oDM6VlQ4flY6tyPomLTjTDnLV0zvMTjH
lvVgae/xIiNYYGxOJgk71a8lEFK/qAIYinOuk9QmVcjUCy5GLyIkF7jxq5D+rzPw
KPkmOUHM1x1fxj9XxDJFWEXZ15XLXYqZoa3ue23PgD+IRBdxOLEYS1GWmyZUFUZM
DT+IaTU5jzps2i4VQXzR+3lJqZxlbBLFit68tERX0PW8/qsg963tXFGBKdkT6cDi
WOUqChsMnSn5Fg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:42 2026 by rpki-client