Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
File:                     UPX-mbwiMohxFv2sgtQIKtvGrLc.mft (raw, json)
Hash identifier:          vfcCdS8JaaPMZ86MuKJ0zUC/ZFX0x4MeDe9+PSOn5mg=
Subject key identifier:   F8:A2:0E:AF:F1:D2:1C:CC:2B:16:7C:41:9E:2C:57:40:8B:64:93:6F
Authority key identifier: 50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
Certificate issuer:       /CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Certificate serial:       019E1DC79751FE8DEC6F57417141FD4244AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
Manifest number:          0792
Signing time:             Tue 12 May 2026 20:01:19 +0000
Manifest this update:     Tue 12 May 2026 20:01:19 +0000
Manifest next update:     Wed 13 May 2026 20:01:19 +0000
Files and hashes:         1: UPX-mbwiMohxFv2sgtQIKtvGrLc.crl (hash: hLirDXFLVkuHsGeF/sSLKkTPyGyHVVF74M5Un+k+0Kw=)
                          2: mf0gWWT9tDUujC29k27IpTbJ344.roa (hash: CIBQigWs2TocsqchNE4I1RZtMQ3hnsC16oL8fK2cCdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:97:51:fe:8d:ec:6f:57:41:71:41:fd:42:44:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
        Validity
            Not Before: May 12 20:01:19 2026 GMT
            Not After : May 13 20:01:19 2026 GMT
        Subject: CN=f8a20eaff1d21ccc2b167c419e2c57408b64936f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:e3:6e:9c:d3:5c:b3:d0:b1:f1:c6:bc:3e:
                    6b:f2:05:c1:fb:0b:95:33:9f:ef:8d:dc:43:4a:63:
                    f2:51:55:09:0a:fb:ec:85:61:fa:4d:6d:ca:59:0e:
                    ff:66:71:4d:e8:68:1e:29:53:af:b5:aa:ac:9b:1a:
                    58:ef:d1:61:bd:72:4f:cd:1e:5f:18:ee:b6:64:07:
                    11:f3:e0:db:83:a5:50:2e:87:50:08:ed:0f:8f:86:
                    b3:f6:13:d0:7c:5b:97:f5:19:cc:fc:cd:51:78:b9:
                    fb:c7:d5:75:84:5f:d3:f7:0b:33:45:3d:bd:85:14:
                    b9:93:b9:68:d6:58:f3:b6:d1:28:be:84:b6:40:c1:
                    f2:85:ed:28:a6:3e:70:4a:56:74:74:66:e7:a0:c8:
                    dd:c1:84:24:ff:18:80:92:9e:02:52:15:3f:5c:a0:
                    b9:10:72:c1:9f:17:d4:17:d3:22:d2:22:81:42:85:
                    62:c3:f2:81:b7:9e:1d:30:8b:6c:0d:3b:50:f3:7c:
                    c1:28:17:b9:1f:52:d6:54:07:6e:67:3c:f5:f9:d8:
                    43:83:54:52:21:3e:de:e8:25:bb:03:cf:6b:b2:49:
                    b1:fb:1d:bc:a9:78:0f:8a:54:c4:d6:1c:37:8b:a3:
                    24:7a:1d:18:aa:63:01:fc:ba:d1:20:e5:a8:4b:7a:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A2:0E:AF:F1:D2:1C:CC:2B:16:7C:41:9E:2C:57:40:8B:64:93:6F
            X509v3 Authority Key Identifier:
                keyid:50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:73:99:2c:97:ae:9f:e1:d6:46:32:d1:55:29:d5:76:98:37:
         83:8c:f7:81:7a:27:4b:98:00:6c:c1:ae:51:87:47:e7:49:4b:
         ee:1c:d0:3a:c8:51:93:df:fa:fc:9d:54:06:c7:86:6e:ce:32:
         9b:3b:15:e7:93:e0:47:bc:e8:0a:d4:e1:8f:3e:f2:c8:88:a6:
         c5:8a:0c:c9:c7:e4:34:7a:55:9a:bc:51:33:19:e7:69:95:9f:
         4e:a6:3a:0e:42:f5:88:04:80:a5:7e:e1:2c:9a:28:2f:88:98:
         d9:8c:44:ab:79:73:02:fb:cb:08:de:c6:0d:3a:51:b1:00:08:
         f1:e0:8a:5a:0c:3b:2c:5c:9b:ed:e6:7c:60:8d:c0:dc:98:f0:
         2f:90:d6:3e:28:f2:29:93:23:da:bd:4c:b6:c5:92:24:dc:26:
         24:07:0b:09:f4:45:ff:20:8f:8f:94:09:02:44:05:9d:17:91:
         6b:f7:40:22:33:23:cc:dc:ae:2c:8d:5d:3a:8d:c3:67:4f:e7:
         58:aa:12:d4:e7:8d:f6:cc:c2:05:09:68:34:72:e4:33:e7:4b:
         6b:4d:82:e1:35:c5:c2:78:be:86:72:13:4f:dd:f8:5d:6b:4d:
         aa:09:08:3e:0b:5c:25:db:8b:b0:57:30:87:f2:a9:25:c9:29:
         be:e0:ac:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:01 2026 by rpki-client