Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
File:                     Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json)
Hash identifier:          UOZuNPME8wAf7wyl3GUDTy6HHPN8KMUNIlSlSh3d+fM=
Subject key identifier:   50:35:9C:56:74:22:BF:49:CE:83:98:8B:DF:C6:57:28:F0:88:2A:F8
Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Certificate issuer:       /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Certificate serial:       019F93C8B583D589A70CD990942530E9AD8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
Manifest number:          1589
Signing time:             Fri 24 Jul 2026 11:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:32 +0000
Files and hashes:         1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: nKqCCIYqZeXCmguCQ/j2sgCrNLwKexoOzS0o46DMuBs=)
                          2: oOmlfKVzpMVENSLkIqqHr9oYYIg.roa (hash: /1cGoeAjRc1hP5Tzk5VY4ttcaNmL4WoxJgl5UoSxmIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:b5:83:d5:89:a7:0c:d9:90:94:25:30:e9:ad:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
        Validity
            Not Before: Jul 24 11:00:32 2026 GMT
            Not After : Jul 25 11:00:32 2026 GMT
        Subject: CN=50359c567422bf49ce83988bdfc65728f0882af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:54:61:2d:2e:dd:08:ea:42:46:d6:1b:9a:f3:
                    64:c1:cd:d7:51:5f:01:9c:3f:bf:4a:07:99:3d:d9:
                    c2:ed:84:e7:95:98:4a:6e:f0:c5:fa:c8:5b:1f:b5:
                    a9:d4:d8:83:e4:7d:33:6e:c2:fb:bf:b5:12:3a:1e:
                    f5:25:7c:f0:17:16:b7:6b:90:e7:3b:8b:0b:a9:35:
                    1e:57:11:21:0b:89:0f:ab:b8:d4:7a:17:36:7a:01:
                    73:9c:1d:9c:d1:2c:74:14:7f:0f:e8:ae:ad:4b:8e:
                    d5:fc:bd:26:32:ea:2b:7c:08:0a:88:c2:aa:86:30:
                    20:88:e4:02:fd:0b:51:5d:75:12:0e:f0:47:c5:86:
                    27:28:ac:20:15:21:2c:f2:fa:cd:0d:14:91:7e:b6:
                    ce:e1:22:11:35:21:1c:90:82:cb:76:50:39:dd:a8:
                    d4:e0:79:c9:ba:4d:aa:e0:c5:fc:44:ba:c8:60:b0:
                    81:61:78:59:d9:12:5d:3b:4b:43:ed:76:63:9e:f5:
                    e9:65:87:da:ea:0d:26:33:0a:d2:18:bb:c1:b4:0c:
                    a2:e0:a2:9e:fd:7a:c9:40:7f:bd:8f:e4:ff:31:ae:
                    a6:71:db:df:55:db:82:65:ef:65:ee:6f:99:34:35:
                    38:c5:d9:dc:a9:39:c2:30:cb:5b:b7:8a:41:c4:f5:
                    33:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:35:9C:56:74:22:BF:49:CE:83:98:8B:DF:C6:57:28:F0:88:2A:F8
            X509v3 Authority Key Identifier:
                keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:1b:af:39:41:24:22:ab:bd:53:d2:01:ea:b5:6e:03:bf:2f:
         50:7b:8b:38:c1:5f:1c:89:dc:de:76:cf:00:ce:a5:67:98:f5:
         6d:39:45:3b:15:ec:61:22:b8:58:22:d3:fe:4e:40:cb:48:f5:
         16:d6:90:ba:07:7f:7c:2a:63:1c:47:54:97:1e:bb:d6:3b:a2:
         57:57:1a:29:6d:d6:9b:d8:80:b1:ad:93:e8:86:a3:36:f3:2f:
         fb:f9:f8:77:69:2b:00:17:77:77:67:81:4e:de:56:af:73:68:
         55:9a:b7:c8:33:88:d9:63:37:71:c4:91:e4:cc:8d:f7:60:81:
         9c:d1:a6:92:23:50:93:9f:96:22:cd:bc:fe:d7:f4:26:6e:ec:
         fe:75:cb:c6:04:e2:e0:53:91:d5:54:ef:3c:9f:a5:61:8b:1d:
         af:e9:18:b9:ae:7f:a4:4a:bf:dc:9d:95:09:d6:b7:06:4b:38:
         59:0e:42:ca:8a:ec:75:60:d0:b4:b6:4c:12:eb:06:7b:72:40:
         b7:0f:94:67:c8:63:ca:b7:aa:4d:7b:75:df:09:97:de:92:8b:
         e0:d0:95:c9:0d:b3:79:be:64:01:11:40:23:4b:bf:af:cf:34:
         ed:39:18:e1:6a:66:59:fa:c5:13:87:da:85:d9:6b:80:89:26:
         9c:05:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:35 2026 by rpki-client