Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File:                     U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier:          Rgz7LgLc7mz7ww6Tu8x7Bs81hAIO4D5UZ5BRK/Fv4Ng=
Subject key identifier:   07:53:33:81:BB:6A:7A:9D:83:5B:72:59:01:B6:03:66:66:DA:61:CC
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer:       /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial:       019FAC0824C3CEDF766A1840801F48445E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number:          0A14
Signing time:             Wed 29 Jul 2026 04:00:42 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:42 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:42 +0000
Files and hashes:         1: 8otHkib5_3i41JyAw70LeXUh0QU.roa (hash: 0qAK41CxT/RWAwJIryforayLl8dembnwnfhhCABuNu8=)
                          2: GYkAYH4GlgFxJb3HfEIiU4VdRLs.roa (hash: mPmyrDhwtpph0YzGy8Rd73AkujDJmoGuUoDG6KNajn8=)
                          3: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: u5eQtCQYiDE0cPEj/TBp3t+gikmvgw/+dO/VRYzp8tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:24:c3:ce:df:76:6a:18:40:80:1f:48:44:5e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
        Validity
            Not Before: Jul 29 04:00:42 2026 GMT
            Not After : Jul 30 04:00:42 2026 GMT
        Subject: CN=07533381bb6a7a9d835b725901b6036666da61cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1b:aa:20:cb:42:e1:5d:98:bd:c9:50:46:f8:
                    36:7b:48:79:da:dc:f6:e1:66:67:22:d2:28:37:77:
                    8d:ef:10:83:d2:1a:f0:59:4a:e7:e7:9f:93:fc:71:
                    12:37:cc:8d:d0:50:2e:e7:7a:60:ef:a2:4a:31:8c:
                    ce:a4:d7:ca:b2:06:2d:5e:ef:ec:ef:fe:f5:3a:ad:
                    73:b5:c3:09:06:cd:c6:84:4e:d6:da:b8:e2:2b:c7:
                    11:35:62:3a:c2:39:5c:3e:6e:8a:ea:ca:0f:50:3a:
                    4b:88:9d:84:73:bc:9e:2a:2e:12:4e:13:60:58:00:
                    a8:a1:d0:49:be:f0:27:36:57:50:0f:0f:e4:1d:9d:
                    a7:f0:ee:99:32:cb:b1:b4:ce:00:48:f7:16:2c:69:
                    2b:5f:38:4b:e4:a2:03:25:d7:0a:e2:34:2d:2e:17:
                    8a:9c:41:0d:e7:1c:f5:93:f5:e4:a6:12:66:f1:ec:
                    a8:1a:0e:fa:c8:fa:98:eb:13:a4:59:fc:84:b1:0f:
                    25:7b:ac:93:fd:29:2c:cb:82:77:bc:32:3b:6d:72:
                    05:82:8d:f3:d5:1c:ab:1c:1d:4d:d2:7c:c2:48:3e:
                    66:ec:f0:78:32:64:62:15:67:a0:c3:bd:f4:59:dd:
                    e6:05:eb:34:0a:71:f6:b2:76:24:5d:0d:47:3f:27:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:53:33:81:BB:6A:7A:9D:83:5B:72:59:01:B6:03:66:66:DA:61:CC
            X509v3 Authority Key Identifier:
                keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3d:9a:40:69:df:fa:26:c3:23:c5:72:13:e4:23:8e:4b:b3:
         f7:40:72:a0:72:94:6a:fd:77:9c:82:ae:9d:3e:4f:9f:ac:a3:
         84:29:78:86:a2:16:ea:fc:b9:29:7a:72:52:f2:ac:d1:f8:27:
         e1:4f:7c:1a:67:17:3c:15:9b:ae:22:08:41:39:3f:e5:6b:dd:
         41:53:36:21:4b:6f:d0:44:ec:47:10:28:50:ff:43:69:7b:72:
         cd:59:a7:9e:62:10:e0:9b:bd:5c:71:ac:6b:b6:92:dc:b0:19:
         2a:38:92:bc:d6:de:6a:2c:f9:a4:d4:66:b4:93:06:fe:8b:e2:
         00:d7:88:21:92:00:e3:ac:77:40:a3:e9:04:57:de:c6:85:84:
         15:45:52:84:1c:5d:77:75:8e:a7:87:90:bf:0d:e8:08:00:de:
         46:31:3c:06:89:f6:fc:ac:a1:24:eb:38:df:11:a1:10:1c:31:
         e0:19:19:50:50:77:57:68:88:7b:b2:18:a5:8b:9a:1a:38:16:
         a5:ae:ed:cd:ab:1e:e1:f6:dc:68:a8:36:87:fc:e8:5b:f9:2f:
         5b:ad:f3:e8:05:65:da:8d:ce:48:ca:08:95:4c:69:61:a1:3d:
         ab:21:05:f6:1d:2a:bf:66:c8:66:15:3c:b7:17:f0:8d:44:f1:
         f3:3d:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:56 2026 by rpki-client