Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
File:                     UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft (raw, json)
Hash identifier:          Fr6b+ccVijpq/ZLyTbPyS0n5LXc8u4n/Cw2IjfqSU3A=
Subject key identifier:   C0:B5:0A:DB:2F:52:84:FF:88:BD:01:30:C5:FD:78:E3:69:DA:53:F3
Authority key identifier: 50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
Certificate issuer:       /CN=505cec09bfd85db2762696345d68871d09d5e8bd
Certificate serial:       019FACACA9C52DF5DD01516C76E43A2AE151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
Manifest number:          01DA
Signing time:             Wed 29 Jul 2026 07:00:24 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:24 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:24 +0000
Files and hashes:         1: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl (hash: Xt6CWBdvZm+u/Hm6HRCAuavNNfBnP1/lgN0FNDZpxq8=)
                          2: iHf5pzR2G0Z6T_ZJi-EaUcBL-Pg.roa (hash: xmsgXuBrJTw5PmZn+vLgj/qAwG4jTdhGkBSvr8O5tbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:a9:c5:2d:f5:dd:01:51:6c:76:e4:3a:2a:e1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505cec09bfd85db2762696345d68871d09d5e8bd
        Validity
            Not Before: Jul 29 07:00:24 2026 GMT
            Not After : Jul 30 07:00:24 2026 GMT
        Subject: CN=c0b50adb2f5284ff88bd0130c5fd78e369da53f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:d3:4e:ea:43:48:b8:f9:33:a9:02:40:b3:
                    11:12:35:32:f6:da:46:06:d8:7b:32:09:ba:86:15:
                    7c:a0:99:85:e8:9d:a7:cb:45:bb:85:51:ec:04:1d:
                    e8:15:dd:64:df:69:d2:d7:ef:33:7b:3d:8a:da:d0:
                    47:8d:40:0c:00:1e:a2:06:b9:ec:37:fa:34:56:6c:
                    4a:08:30:31:1f:11:f7:fc:43:53:19:81:3b:6e:d2:
                    88:ba:95:a5:02:9a:59:bf:c6:8a:a0:f6:ea:7a:3b:
                    7b:1e:f5:34:6e:be:a1:e3:94:70:17:72:ed:7f:db:
                    fe:7e:0f:78:9b:44:5a:45:8f:56:88:dd:14:e1:9d:
                    f0:97:50:a6:a5:f8:c9:76:81:7b:e6:0b:f9:ff:fa:
                    53:a2:c6:cb:74:76:29:da:1b:f0:b5:c0:6f:e1:9e:
                    a1:95:1a:a2:c1:e7:7d:48:99:50:63:bf:f5:ed:38:
                    2f:00:1c:f9:11:98:9d:fe:5c:b2:40:a0:56:3c:57:
                    9d:f3:37:bc:44:bf:ff:a5:0f:88:60:69:c5:4c:57:
                    b4:dc:e7:cd:ce:da:bd:e6:bd:03:f2:7e:92:fe:2e:
                    38:41:a8:d9:eb:74:51:8b:0c:fb:40:e2:d6:dd:3c:
                    21:d1:ff:81:de:04:74:9d:8e:34:89:a7:35:45:60:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B5:0A:DB:2F:52:84:FF:88:BD:01:30:C5:FD:78:E3:69:DA:53:F3
            X509v3 Authority Key Identifier:
                keyid:50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:96:d8:e8:57:da:9d:8c:6c:0b:6f:db:c0:dd:17:f9:c5:90:
         47:d9:89:1c:6b:6d:e7:17:0d:a0:f6:ef:74:20:3d:df:cd:9a:
         90:1b:fa:ff:e4:fe:f1:6e:df:f7:fd:92:6c:eb:ec:13:d6:ce:
         5d:a0:22:80:21:4b:14:a6:5b:6a:f1:ed:ce:b6:44:4c:5a:b1:
         f9:08:da:b0:a0:6b:fc:8b:58:5a:bf:ff:05:1d:98:63:42:77:
         01:bc:f4:e1:0e:3e:c6:4e:33:09:c9:69:52:d9:ae:94:3f:5e:
         c9:a3:e8:c0:27:c6:f5:0e:58:86:96:ed:3f:a0:c1:bc:6f:d1:
         ee:46:97:c4:be:54:5b:40:84:f6:a5:97:43:88:0d:64:68:e5:
         20:df:c2:85:8c:2e:4b:48:14:ec:39:fd:02:71:ec:e9:80:7a:
         7a:85:da:39:b5:de:b0:95:b0:ac:34:63:60:bb:68:c1:98:59:
         56:71:e9:ba:30:9a:6e:eb:53:36:d6:9d:20:6f:1e:8a:52:74:
         9f:bb:32:b9:eb:23:33:5f:19:03:68:3a:1c:a3:99:ee:00:6c:
         95:0c:06:2e:a5:31:86:db:a4:eb:51:58:13:73:d8:51:89:9d:
         92:43:de:24:b8:4f:f5:de:ba:17:cb:43:72:82:3a:3c:f3:de:
         1c:e5:ad:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:29 2026 by rpki-client