Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
File:                     sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json)
Hash identifier:          k3kGcRs1Zz0GixUxoCcyBPgJdld6UyDA2uh3RW0KqeY=
Subject key identifier:   76:33:31:35:8C:24:1F:BF:B3:2D:09:D0:22:1E:60:D3:19:53:73:9F
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Certificate issuer:       /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial:       019FA899AEC8A842FBDA9B190A137384A675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 12:01:11 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:11 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:11 +0000
Files and hashes:         1: P4g9yTAv1bQsEHzbCNOJ067tquU.roa (hash: kouwCvNmAHfMnCaV0S5emEt24x5TunBBSbVBzdGSrqY=)
                          2: Y360lwoG9eyseVvOT5wT1Z7gt7U.roa (hash: U9JtvNrirG87zfze5K4hjslK7QIiDoWF/Ia/56lwbBw=)
                          3: pWNFve3JFzOWEIOafmb-tq3ozgk.roa (hash: J9P5fP20DSym7BQV4ZtLFdmGdvrRCw0F5AUaKX6zn0M=)
                          4: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: xR/l4H4fNTgZDexwkVhMTLRW0DaQzRi5lS0T8qAlP78=)
                          5: wjwk4znZSgE3afujO_o00KJ1wc4.roa (hash: /EHRjEt0mZL7bm2KcS0WqhNixMXZVUS3aHhSERVsdww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:ae:c8:a8:42:fb:da:9b:19:0a:13:73:84:a6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
        Validity
            Not Before: Jul 28 12:01:11 2026 GMT
            Not After : Jul 29 12:01:11 2026 GMT
        Subject: CN=763331358c241fbfb32d09d0221e60d31953739f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:52:2b:fd:63:e0:d4:00:af:8e:0c:ad:bc:e1:
                    53:53:1c:0c:39:1f:f6:25:a1:3f:c9:86:57:ea:74:
                    3d:b0:22:8d:f7:b6:fa:9e:a0:7f:13:1a:4f:0d:c0:
                    b3:13:b4:1e:8f:94:8d:c6:85:f6:38:80:d6:c5:5f:
                    df:af:c4:a4:db:e2:41:b2:b2:16:e3:b3:c2:ae:78:
                    57:03:41:c4:81:c5:70:9f:58:da:22:18:0c:e2:fb:
                    da:d0:31:fd:50:7a:d8:1a:ab:bf:d3:5e:45:c6:25:
                    f7:c1:e3:f2:ca:d4:79:e5:b6:c3:4e:4f:8d:77:f4:
                    01:36:ad:55:6c:d1:a2:67:7f:20:c7:bf:84:23:c8:
                    69:1b:0f:52:07:49:54:05:60:e8:97:7c:b7:25:c2:
                    92:d0:98:b4:6e:f0:80:ff:96:fa:6f:0e:e3:05:72:
                    38:d3:12:47:f3:9c:58:aa:0f:28:2b:c5:1e:1b:c5:
                    a6:47:6f:ac:98:31:df:38:5e:11:c9:21:b2:98:a6:
                    6a:6c:ed:2c:9f:e8:7b:97:c2:ab:96:de:79:5d:f5:
                    3f:9c:f9:39:e7:1d:d5:6e:d9:74:ba:71:f8:05:58:
                    e2:63:b6:f5:64:4e:ab:51:05:51:3e:32:31:58:b3:
                    ab:c8:01:14:4a:eb:38:e1:fa:24:57:2e:66:3c:a1:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:33:31:35:8C:24:1F:BF:B3:2D:09:D0:22:1E:60:D3:19:53:73:9F
            X509v3 Authority Key Identifier:
                keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:70:db:a6:85:e7:f9:d3:20:10:f4:a5:29:4e:17:1f:de:1b:
         01:88:b4:bd:f9:69:95:95:f7:5c:3c:1c:d1:02:67:be:1a:58:
         a9:a4:ce:d9:c9:16:c8:21:35:58:f0:f9:ff:04:7f:c9:5d:d0:
         c6:47:8f:28:92:a4:71:79:37:e3:49:ca:60:8a:11:9c:6c:be:
         94:fe:1f:19:e7:be:07:52:04:c1:93:0e:bc:cd:02:f7:4a:ab:
         05:a8:3f:cc:e5:c2:6e:a9:3f:a8:5c:2e:13:9a:50:56:cc:0d:
         1b:e2:0d:f1:87:4c:90:36:93:35:83:dc:52:3d:05:7d:1c:1a:
         87:78:96:e9:5e:01:a3:15:b2:8c:35:9f:06:f0:9d:a9:eb:3d:
         7a:a2:be:e4:8d:d4:ab:0a:72:4f:f6:a8:df:78:9b:b9:43:bc:
         03:06:6b:49:47:db:63:bd:26:f3:3b:d0:3b:f2:eb:08:eb:19:
         55:cd:1a:4b:85:88:08:00:cf:60:e0:88:c3:b1:1d:95:03:c9:
         81:ad:13:a8:d6:4b:d3:28:cc:ab:7e:7d:69:d2:44:08:38:39:
         28:81:30:7b:56:3a:12:fe:f8:00:97:bd:bd:a7:4f:bc:4e:82:
         40:f6:50:a2:c6:1d:15:8d:8e:7e:18:db:a1:a3:51:f2:fe:36:
         23:f3:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:53 2026 by rpki-client