Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File:                     ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier:          xa+qenhygwqgMhgq5QJBIC2AZ4fdupr0dsrX1NOtccc=
Subject key identifier:   58:69:C3:50:16:47:E6:A1:12:16:D3:30:17:38:74:37:CF:9F:52:07
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer:       /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial:       019FAC07BB0A149899CC04A11FA78F2803DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 04:00:15 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:15 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:15 +0000
Files and hashes:         1: AlKyY1UFKLIiSwkNxpsgmdrM60E.roa (hash: RVsM/xgSLkhzfMVV3ZGsMCowRm3BI62GEPj6ptHzyso=)
                          2: FG47vsukPFFVqGR7bOnjAT2rp7w.roa (hash: awpRf5Q5mKob7svn8oYO+jlkoCbAPExf5Adoe8FOrnc=)
                          3: G6A1KhUGyTv_ayk63fXoZcf-2FU.roa (hash: FvWxPy4xmiHLhgfYS33DaG1bqGpWvGhVoY87fJXbboE=)
                          4: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: QULO4XrA5PVJkpOvB507GFxI+uHfj9hQhUUt1svjPv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:bb:0a:14:98:99:cc:04:a1:1f:a7:8f:28:03:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
        Validity
            Not Before: Jul 29 04:00:15 2026 GMT
            Not After : Jul 30 04:00:15 2026 GMT
        Subject: CN=5869c3501647e6a11216d33017387437cf9f5207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6e:7f:37:d4:07:7d:f2:75:d3:df:ff:f1:0a:
                    79:48:27:ef:c9:ad:fb:41:65:6a:9e:9c:4b:55:75:
                    8a:c7:58:b8:49:12:9c:b8:86:28:1d:d4:98:41:66:
                    32:4a:30:34:bf:de:07:01:98:4a:2b:d5:6c:9a:93:
                    e0:ae:39:c5:74:1d:67:0a:b1:b0:87:0d:eb:66:b8:
                    44:b8:2f:92:e7:4d:9c:8d:f9:f2:7c:5e:f0:77:6c:
                    94:4f:47:16:ac:6d:e7:44:16:df:e0:6c:98:0a:a4:
                    d2:1a:29:2d:9f:de:32:86:b2:d2:a5:4d:52:96:d2:
                    ea:89:05:10:3d:98:56:4e:60:64:64:58:81:c0:9b:
                    4a:94:23:8e:3b:a9:92:db:07:7e:64:3b:54:7d:fe:
                    cc:19:54:26:36:21:ec:b1:28:6d:41:e2:10:92:33:
                    b6:e9:5b:b3:3b:9a:6f:44:8a:17:e9:c0:78:72:87:
                    be:b1:84:06:e1:65:85:c4:57:b1:f1:90:5a:73:ee:
                    94:82:4b:88:0f:b6:9a:a4:46:c4:17:c8:45:c7:71:
                    06:2a:49:78:0b:85:b8:29:f2:50:53:81:62:a3:9c:
                    fc:dd:c7:3b:2a:f5:1f:7f:0b:a1:88:ed:fd:a6:7e:
                    d0:a8:68:5f:4e:d4:e5:4e:d2:46:7b:8c:ae:c6:50:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:69:C3:50:16:47:E6:A1:12:16:D3:30:17:38:74:37:CF:9F:52:07
            X509v3 Authority Key Identifier:
                keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:5f:dd:2f:d8:4f:45:92:ae:f1:28:13:ab:07:66:1d:96:f4:
         41:9c:be:10:02:e0:81:39:e2:e7:29:d7:90:d1:98:68:a0:48:
         2d:a6:40:0f:12:27:fa:89:9b:d8:99:e2:27:47:69:20:cb:21:
         21:20:06:4d:76:73:5d:0c:ba:07:fb:3a:7f:a1:75:bf:38:f0:
         26:52:d4:50:dd:31:27:b5:c1:d3:7a:7a:ae:84:ad:09:82:bf:
         63:8c:98:6b:47:36:ca:e0:82:76:41:fc:64:73:b0:e3:88:78:
         29:9c:b2:96:5e:8f:d1:cd:59:a5:78:e0:57:72:99:b7:b8:e1:
         9a:49:f8:f1:10:d5:bd:ee:ff:68:d5:e2:74:82:2e:be:c8:7c:
         4b:99:3a:da:98:68:d2:78:5a:f1:17:37:0b:ad:c6:f0:70:9a:
         f6:9a:ca:e6:1b:68:32:71:cd:18:bb:1a:83:2d:bb:be:8a:66:
         2f:6f:8e:c8:c4:93:c6:7a:0e:4c:62:c8:b2:7c:41:68:d1:33:
         7b:04:12:e0:58:4e:07:12:eb:15:9e:70:39:d2:07:0c:bb:62:
         64:e3:4f:9c:d9:d3:61:7f:f3:6f:8d:57:b4:38:be:73:1e:a9:
         d3:96:a8:75:78:15:b8:59:36:cd:47:a9:54:74:3e:88:0c:07:
         d2:49:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:29 2026 by rpki-client