Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File:                     A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier:          tSnWoVFqY3riw4KBvOSSR7AVKJC4yMarDm4Xw9ehB+0=
Subject key identifier:   24:32:2E:C9:B9:A7:45:B1:3F:1F:A9:A2:53:E5:1B:43:EF:BA:F8:EA
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer:       /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial:       019FAB2C691AEB33FBB599DBEA8467894F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number:          1157
Signing time:             Wed 29 Jul 2026 00:00:42 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:42 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:42 +0000
Files and hashes:         1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: ki8hf5PImDlDzrFRofwHe9vyl0ESV/jmLGHAplmwHEA=)
                          2: FKqbBbCatHDV91uCIV2iSLiR4J4.roa (hash: OiRQx3xEWtooKV7KslWbkFM1gAMKnnIL8/Yhr2gA9Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:69:1a:eb:33:fb:b5:99:db:ea:84:67:89:4f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
        Validity
            Not Before: Jul 29 00:00:42 2026 GMT
            Not After : Jul 30 00:00:42 2026 GMT
        Subject: CN=24322ec9b9a745b13f1fa9a253e51b43efbaf8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:24:f6:05:e4:e3:fe:7f:dd:ae:73:f9:1f:
                    8d:82:42:bc:d1:69:ce:2a:14:88:3d:60:01:58:eb:
                    e7:0f:26:82:6f:00:5d:ea:6f:de:2b:fa:90:f7:a6:
                    30:0a:67:70:bf:ad:8f:e2:03:5f:31:64:1b:ed:1c:
                    cb:05:06:8b:31:bf:23:d3:d0:d6:d5:8f:3a:b1:61:
                    91:8f:87:40:f8:30:a2:88:fd:9c:b9:4a:0b:9d:19:
                    99:23:ca:59:68:cc:3f:4a:c5:5b:04:50:2f:8b:93:
                    70:b2:23:8c:88:f6:f5:cd:b4:73:fd:30:8c:b5:37:
                    fe:02:c0:51:13:50:8c:e8:8e:b4:ff:84:85:b5:3d:
                    03:98:e7:47:6c:cf:14:ef:c3:92:af:73:e1:8d:dd:
                    41:78:63:c2:2a:1f:f2:f0:98:4f:f6:75:db:d4:5c:
                    14:1b:55:8d:74:41:c7:ba:f2:fe:c0:80:5d:a1:ac:
                    93:4e:15:4f:dc:2b:9a:53:9e:f3:4a:47:4f:48:a3:
                    d4:e3:e8:ab:70:52:bd:2a:f0:9c:03:d6:fd:39:b3:
                    fe:54:58:bf:68:80:af:62:72:53:52:8b:7a:27:44:
                    22:e3:79:4a:98:8d:54:6a:b8:85:c1:33:31:53:64:
                    70:c2:8c:2a:4e:af:3f:ed:3e:17:6f:69:4d:92:cc:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:32:2E:C9:B9:A7:45:B1:3F:1F:A9:A2:53:E5:1B:43:EF:BA:F8:EA
            X509v3 Authority Key Identifier:
                keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:51:23:6a:57:4f:07:5d:e7:f1:8d:cd:9b:60:ea:95:46:9f:
         6f:48:c7:2d:22:05:d4:2c:45:72:02:ee:31:4e:6d:54:ed:54:
         2a:bc:8a:2d:b2:b2:91:4e:cc:b2:61:19:4c:27:92:7a:b4:3a:
         44:b4:b5:ee:b5:6a:81:d7:e0:3b:92:f6:db:d8:d0:25:bd:c6:
         9e:5d:ed:9d:c4:8a:e6:4f:da:5a:b7:69:ef:2b:a6:93:13:60:
         50:26:63:4e:5d:15:f9:38:d3:92:b5:3d:e9:69:72:71:1a:90:
         de:67:21:bf:fd:45:9c:43:34:13:1c:7a:4c:99:f9:1c:9f:f5:
         ab:50:27:14:0e:e2:d1:93:7a:99:41:29:a5:b3:b2:95:a7:65:
         14:ce:8d:2e:65:4b:4d:f7:ba:05:01:39:b9:83:a3:c4:11:2c:
         6b:67:e8:f6:48:c9:c5:eb:e6:c0:a9:39:10:f0:a5:df:7d:68:
         3a:b1:d8:55:b0:0e:6e:ee:f0:f4:17:84:12:24:e0:ea:56:2a:
         9f:fb:af:14:81:59:4b:15:0c:df:17:d1:8d:fa:26:b1:83:5e:
         d0:38:99:04:c5:f1:1a:1f:1b:e1:6e:07:64:1b:47:ae:b6:18:
         66:42:94:83:22:af:0b:28:46:4f:1e:e1:9e:7c:63:3b:36:20:
         49:11:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:12:45 2026 by rpki-client