Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File:                     uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier:          zeuHimSJrv4xOwbgoT2dK86hog0xq4RSXiAq27ZdEe4=
Subject key identifier:   C7:F5:C2:64:FB:BC:14:84:8D:6C:CE:AE:92:E8:20:FE:86:10:81:5C
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer:       /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial:       019F8F11134C4304C264E636D154A02C0160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number:          198B
Signing time:             Thu 23 Jul 2026 13:01:28 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:28 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:28 +0000
Files and hashes:         1: 4vljd6eS7xs98V4vbQdU27KIRbo.roa (hash: p9Wr9nNkj4z/XeaCt1WGEIqENx+18d7M1y0DLvifYF0=)
                          2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: 7qUeG6Pg2mT45lrGUfK4fH295IfNgY3k7GPAQ21+WrE=)
                          3: uUX1xSwp1T9nuxxoEoS7mJ4ylKQ.asa (hash: ARnmi9JFKrZP1rcaarKtNChdLdy0XQtmO2iQxRYVYjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:11:13:4c:43:04:c2:64:e6:36:d1:54:a0:2c:01:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
        Validity
            Not Before: Jul 23 13:01:28 2026 GMT
            Not After : Jul 24 13:01:28 2026 GMT
        Subject: CN=c7f5c264fbbc14848d6cceae92e820fe8610815c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b8:59:50:e3:ad:84:ac:87:c4:53:8e:cf:b7:
                    7a:90:ae:93:b8:1b:d0:a5:e4:3b:cf:b4:3a:b7:ca:
                    9e:24:0c:06:eb:70:3b:2a:3e:f5:6d:8d:be:5b:ea:
                    73:47:eb:32:4a:d9:50:41:6e:0b:44:0f:70:f5:64:
                    88:9f:8f:ee:82:85:51:cd:bf:5e:65:f0:d2:fa:a7:
                    b3:8d:1e:ea:a1:12:c7:66:6e:04:01:92:90:59:d5:
                    8d:5f:d2:5b:b8:9c:6c:12:b7:fe:a9:b8:4a:93:21:
                    0d:5a:62:96:20:a2:32:f2:f6:e1:c6:79:a6:b5:71:
                    97:17:b4:fb:a6:d1:02:55:1f:de:6c:26:2f:4e:38:
                    b9:a8:c4:35:1d:22:bb:0a:e0:3c:ea:16:18:72:32:
                    00:89:56:95:82:c7:01:05:5a:69:9e:b0:e4:16:61:
                    27:b8:08:0c:38:fd:b5:9c:fa:5b:04:0e:b2:f6:ad:
                    29:12:b9:73:0a:1d:e7:23:34:f3:65:f7:c7:5b:4a:
                    bf:d4:64:f9:e2:e3:84:fb:13:7a:09:53:8a:e0:13:
                    e3:43:91:40:38:1c:28:e8:ea:22:b6:12:c0:1c:1c:
                    8b:9b:7d:f1:e5:df:f8:d2:cf:62:3a:6b:8e:26:da:
                    3e:b0:a0:9f:d3:82:4b:96:ac:09:15:c9:8f:3a:8c:
                    1f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F5:C2:64:FB:BC:14:84:8D:6C:CE:AE:92:E8:20:FE:86:10:81:5C
            X509v3 Authority Key Identifier:
                keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1c:a7:34:f6:f9:a4:a8:73:76:d1:54:74:58:77:33:87:08:
         9b:7b:57:75:5a:25:ba:68:47:3c:87:94:8e:14:ea:12:32:af:
         ce:a6:23:f0:67:33:fa:ab:a9:86:d7:1f:67:82:22:08:3c:f3:
         c3:db:7e:21:9c:1b:2f:f2:dc:67:a6:9e:ce:fd:aa:66:db:f4:
         84:59:7a:87:c5:4f:35:07:69:d4:37:e8:3f:3c:a9:9f:fa:9b:
         90:b1:36:ac:2b:5f:5e:fc:f5:03:da:ec:8f:ad:de:f7:4a:95:
         02:98:e8:21:6c:d2:3d:df:10:8f:3f:3c:6a:d6:0e:a9:12:be:
         47:26:c6:e1:9f:a7:c5:4f:c9:aa:3c:2f:b8:e9:d1:0c:23:80:
         92:c7:26:08:20:98:1d:68:24:a8:de:03:94:d8:96:fc:cc:a2:
         10:08:17:40:33:b7:9d:b6:0f:12:b0:82:a2:80:84:0e:15:a8:
         28:61:8c:60:82:76:ce:2e:f9:68:a1:9e:d3:ee:2c:d6:52:4b:
         df:90:a4:0a:dc:88:fa:f3:21:4f:58:6b:5d:a3:13:4a:16:10:
         55:f4:43:57:48:aa:5d:2c:64:07:80:ea:92:17:93:0d:69:cc:
         87:59:7e:41:c2:01:54:81:e7:4a:aa:22:f4:10:94:f8:81:53:
         c4:3e:d9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:47 2026 by rpki-client