Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
File:                     uDtc22Xsxb10bYt0mCgxptjcEFM.mft (raw, json)
Hash identifier:          XgQN/GWUKjwHmB1F+IJjClyMIG1DYyPXsk7X4OyusWQ=
Subject key identifier:   CE:5B:F9:F4:31:27:D9:2F:DC:61:32:9D:84:96:30:2D:A0:A3:4F:47
Authority key identifier: B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53
Certificate issuer:       /CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053
Certificate serial:       019F92B6C3CF5D73DA3E2D8A774874ACB10B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
Manifest number:          1245
Signing time:             Fri 24 Jul 2026 06:01:18 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:18 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:18 +0000
Files and hashes:         1: lfLo0D5ENgt6llv50YfdmRFAQiw.roa (hash: hkIz4lm2sH7tAlv2qyrzV3aAv7hwXQo0U1p5z28Zvks=)
                          2: uDtc22Xsxb10bYt0mCgxptjcEFM.crl (hash: HjT/QJdLnL2/5owDpWuCXAPbRl6v2OPC23e1Ss1EdBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:c3:cf:5d:73:da:3e:2d:8a:77:48:74:ac:b1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053
        Validity
            Not Before: Jul 24 06:01:18 2026 GMT
            Not After : Jul 25 06:01:18 2026 GMT
        Subject: CN=ce5bf9f43127d92fdc61329d8496302da0a34f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:34:85:8d:fe:c2:f4:89:0a:78:44:fc:9f:
                    84:18:a2:9b:50:dc:9f:9a:8a:71:b5:e3:23:dc:47:
                    9b:5c:d8:6e:0a:f5:9b:39:1f:29:d7:74:c7:2e:bf:
                    11:1f:ee:31:5f:8a:e2:d1:fd:63:ee:14:8e:59:63:
                    e0:39:23:bb:23:a0:a7:00:95:c8:1b:bc:d1:8c:74:
                    1e:e8:4f:a3:e7:b8:0b:67:72:d1:72:eb:dd:96:f1:
                    63:d6:f8:f5:1e:85:2a:dc:90:63:94:a5:75:b3:97:
                    d8:2c:0b:e1:d9:2e:19:92:28:c3:3e:ba:12:bc:08:
                    9b:32:59:e9:87:99:08:ec:52:a8:e7:06:7c:14:ee:
                    c4:5e:c1:54:f9:bc:45:4b:34:64:eb:ff:03:3c:2a:
                    f9:c8:64:5b:68:16:bb:22:08:3e:2a:97:cd:85:19:
                    30:83:e8:54:70:8a:54:cc:9f:89:5d:54:cf:0c:18:
                    14:17:ef:af:b0:e7:b2:2e:72:42:b1:b5:c4:86:78:
                    dc:fa:91:19:e1:39:07:62:1c:ab:eb:3b:b7:65:37:
                    17:a5:ae:09:d9:17:57:fe:bf:54:6a:56:cb:02:53:
                    30:81:37:08:c3:5f:c7:a5:86:aa:f5:65:6d:85:2f:
                    df:2b:00:bc:38:d2:b5:44:bb:8b:13:ee:ee:eb:d7:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5B:F9:F4:31:27:D9:2F:DC:61:32:9D:84:96:30:2D:A0:A3:4F:47
            X509v3 Authority Key Identifier:
                keyid:B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:b3:01:a9:c9:34:11:2b:c3:84:30:6d:ea:51:34:a0:41:c9:
         4f:e7:55:93:a9:a0:94:85:c9:a7:a5:f2:af:42:cb:70:15:91:
         92:60:b6:bf:3f:60:5e:7c:41:4f:fb:49:4a:cb:3d:e9:b9:c2:
         65:5b:69:1d:aa:25:a1:92:75:a9:04:2c:e6:f8:8b:5e:28:23:
         42:e8:6b:c2:e7:b7:33:98:87:c8:3a:fb:60:63:d4:13:4f:70:
         e9:22:90:6b:1d:21:27:95:a0:a4:56:de:3a:e5:94:43:b9:22:
         ef:bd:46:4d:73:20:f9:02:9f:3d:b3:fc:12:f2:6f:81:dc:46:
         14:ab:93:a5:d3:aa:f9:93:f7:30:f7:de:dd:fb:e5:ee:79:a9:
         13:f1:5f:68:b8:5d:60:e2:95:10:3f:4f:fb:66:0b:a2:f2:36:
         6f:05:d0:2c:c7:01:dd:95:e8:14:f9:51:91:96:aa:f0:60:94:
         0d:00:36:0f:14:0c:12:17:a3:f6:15:f2:4e:6c:3a:e1:6d:62:
         9e:03:2d:e9:c3:13:4f:ad:fe:23:f5:60:9c:d7:00:a2:3d:cc:
         22:77:49:e2:9d:69:a0:61:bb:47:b0:0a:cc:d5:aa:9c:71:e4:
         2b:0a:bf:a0:16:c3:92:f6:15:76:cd:f6:08:ad:6f:d0:ca:4c:
         44:df:7a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:29:23 2026 by rpki-client