Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File:                     UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier:          oIUEVvg2+xvbRu2NFJSpqD9wpAwas1s9nJS9yo/Sw/w=
Subject key identifier:   9E:C3:9C:23:DA:FF:3C:04:C4:6A:3E:38:E3:16:E3:BA:FB:1B:49:6B
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       019F8F7F82F42794AA1A950AB3EF80ED7BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 15:02:06 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:06 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:06 +0000
Files and hashes:         1: Fh1t7rzPIhJXnOEVD4FNHFJov6I.roa (hash: xyxnFW4AuKmT8OTwF87A3TgtZBfvGtO+UCiL5cJIqm4=)
                          2: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: 1ZtA+yTjzQE4L8s2tVKlzSDcDfx0mTzQyJdZwnVEh3A=)
                          3: _FC9hMLG7SF2_l0VnWxgvnPruLU.roa (hash: /T+U+cTcUNtTkJxXrz2mxyyoddVM2fTKoj6v8XpQa6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:82:f4:27:94:aa:1a:95:0a:b3:ef:80:ed:7b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Jul 23 15:02:06 2026 GMT
            Not After : Jul 24 15:02:06 2026 GMT
        Subject: CN=9ec39c23daff3c04c46a3e38e316e3bafb1b496b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:50:11:ad:50:50:df:9f:98:48:36:fe:3d:
                    c1:5e:31:d7:50:b6:78:0c:0f:8c:af:80:4e:b8:23:
                    e0:2d:3b:4d:46:c4:9b:bd:07:67:8b:89:ea:f5:6e:
                    9b:b2:d5:1d:7b:fc:be:61:bb:26:1a:5b:7e:cc:3d:
                    49:c4:dc:cf:97:88:78:27:9b:52:9c:fe:14:d1:28:
                    9b:0a:41:67:bd:25:4b:0f:42:a2:64:50:2c:e5:b1:
                    56:83:e0:82:e7:31:61:85:92:40:48:93:b7:32:c9:
                    c7:b3:5b:a9:12:50:25:e1:a6:22:bf:5b:0e:97:b0:
                    19:58:47:5b:42:98:18:cc:3c:c2:9b:36:9c:f6:08:
                    37:8c:06:9e:d2:9c:e8:46:67:5d:9b:1b:b2:1a:f0:
                    8d:f6:64:0f:c7:17:bc:de:e5:18:f4:f6:9d:82:ff:
                    ef:78:90:ad:5d:3f:72:73:33:d8:4b:df:65:21:bf:
                    fe:0b:9e:d5:5e:e6:69:ba:14:67:ff:ee:e7:21:81:
                    80:2e:96:e5:0a:c8:af:f4:15:93:b8:a1:0a:1d:a3:
                    ee:ce:54:8a:b0:f0:1e:ee:95:59:42:6a:f9:60:99:
                    ae:8a:20:bd:be:fa:5d:72:4f:e5:4a:1f:c3:ec:c7:
                    4f:6a:fc:c7:09:25:f4:70:47:66:01:d5:89:eb:ae:
                    4d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C3:9C:23:DA:FF:3C:04:C4:6A:3E:38:E3:16:E3:BA:FB:1B:49:6B
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:da:c5:06:94:81:d6:4d:6e:af:5b:55:85:9b:e6:a4:de:4b:
         eb:81:35:39:f9:6f:a3:fb:ea:cf:e2:1f:12:77:2c:de:14:af:
         62:c8:33:c1:0b:d5:b6:ec:46:c6:e1:da:a8:11:aa:13:f5:ff:
         35:52:d1:fe:c0:f7:0e:6f:ff:23:0d:2f:f1:0b:50:d2:5d:f4:
         89:dc:0a:90:68:ec:90:08:8b:1b:05:26:d9:d1:47:b9:0a:95:
         33:71:8f:c3:56:31:09:c6:43:16:a5:8d:c5:59:5d:06:0b:87:
         1f:80:67:8d:be:b4:36:10:99:d8:04:90:36:f9:da:62:22:77:
         40:04:af:86:c0:85:8c:8c:fd:a3:ca:78:b3:45:ed:89:36:87:
         c7:e2:6a:83:cf:a5:98:8e:c8:3e:9e:2d:8c:89:43:17:51:0b:
         57:58:3f:de:01:37:02:6c:dd:49:40:38:f4:4c:f0:9c:d7:6a:
         63:f7:3f:95:8b:74:f9:d2:17:8d:87:21:05:91:79:cf:6c:4c:
         5a:6c:7b:50:ec:52:80:05:06:37:38:96:ce:e4:4a:2f:33:a2:
         46:0e:4f:af:e2:2d:ed:b8:ce:16:1e:4d:08:76:00:42:fd:2c:
         9f:33:c0:df:6f:e6:d3:37:3a:1e:4b:9b:51:e6:31:13:31:ff:
         5d:e5:c8:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf4L0J5SqGpUKs++A7XvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTJiZTEzOWFlNzc5Y2QzZDRmZWViY2NkMzY4MjgxYTFm
NWU3YTAwHhcNMjYwNzIzMTUwMjA2WhcNMjYwNzI0MTUwMjA2WjAzMTEwLwYDVQQD
Eyg5ZWMzOWMyM2RhZmYzYzA0YzQ2YTNlMzhlMzE2ZTNiYWZiMWI0OTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodRQEa1QUN+fmEg2/j3BXjHXULZ4
DA+Mr4BOuCPgLTtNRsSbvQdni4nq9W6bstUde/y+YbsmGlt+zD1JxNzPl4h4J5tS
nP4U0SibCkFnvSVLD0KiZFAs5bFWg+CC5zFhhZJASJO3MsnHs1upElAl4aYiv1sO
l7AZWEdbQpgYzDzCmzac9gg3jAae0pzoRmddmxuyGvCN9mQPxxe83uUY9Padgv/v
eJCtXT9yczPYS99lIb/+C57VXuZpuhRn/+7nIYGALpblCsiv9BWTuKEKHaPuzlSK
sPAe7pVZQmr5YJmuiiC9vvpdck/lSh/D7MdPavzHCSX0cEdmAdWJ665NfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7DnCPa/zwExGo+OOMW47r7G0lrMB8GA1UdIwQY
MBaAFFHivhOa53nNPU/uvM02goGh9eegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMt
Y2Q3YjZlZGJmY2Y1LzEvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMtY2Q3YjZlZGJmY2Y1
LzEvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdrFBpSB
1k1ur1tVhZvmpN5L64E1Oflvo/vqz+IfEncs3hSvYsgzwQvVtuxGxuHaqBGqE/X/
NVLR/sD3Dm//Iw0v8QtQ0l30idwKkGjskAiLGwUm2dFHuQqVM3GPw1YxCcZDFqWN
xVldBguHH4Bnjb60NhCZ2ASQNvnaYiJ3QASvhsCFjIz9o8p4s0XtiTaHx+Jqg8+l
mI7IPp4tjIlDF1ELV1g/3gE3AmzdSUA49EzwnNdqY/c/lYt0+dIXjYchBZF5z2xM
Wmx7UOxSgAUGNziWzuRKLzOiRg5Pr+It7bjOFh5NCHYAQv0snzPA32/m0zc6Hkub
UeYxEzH/XeXIMA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:26 2026 by rpki-client