Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File:                     ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier:          9b9wpsKy/p0JfF0fMCBWuZtEjW/IfBL5KCXu85JYTMQ=
Subject key identifier:   44:41:3E:6C:89:44:49:D8:13:39:8C:50:E5:59:D9:6A:53:7C:D9:D0
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer:       /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial:       019FAC08E025EC07CD3B2C65EC54773A0868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number:          118F
Signing time:             Wed 29 Jul 2026 04:01:30 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:30 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:30 +0000
Files and hashes:         1: 33gU1W_UI1Ae18rle6T32Am_ap0.roa (hash: CtHyr3lbVK0nM4M5V+efOeDGbhPQI4ZIEpY0w9de2vw=)
                          2: 7d0P9doBZNnco0Uk-uyE95zYsRU.roa (hash: C0smtXlBUg5wv9v0wIvA4FN2yM+ZFAWopSk3eOTxr4A=)
                          3: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=)
                          4: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=)
                          5: LE0LYSRlSHBlwqkbBS3d-4jQXVI.roa (hash: qNI5ryb9dP4ZDLAtMIMap6nbp3+t9sAW2t3qbIFwYZE=)
                          6: Rq_6E29y9FzzDAL1ZxfTgVmFkZs.asa (hash: yI85oGl8VeF8e1P6DlU+1YJp0A0saEK2LwjW5ZnVXF8=)
                          7: SM6e5UqBHogNbgt0o12BmkZX2DY.roa (hash: U4nFBrr+xudjO3gD5UENImDfwahddAJuHGHpyaSej5k=)
                          8: VZOyRy0tzJ2sfmNYjeH9siUXpok.roa (hash: hg8jPOLxAFpxHffAZVtykZM6KfjDO72SPntESUbpkNs=)
                          9: eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa (hash: oREm2BU1au2wLbubTl/7hfGGiO50t8g7O52UFNL9Yd4=)
                          10: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=)
                          11: sPWdnd-6eDj5X9yNO4z9PSISSlQ.roa (hash: agHieGTKdf4veiuZ5e0ZnuSvZ/4cBqOGV3qPQeuYVLw=)
                          12: uDj2Yyjz9Osyu9dJCu_3OQFz4uA.roa (hash: 3im4Wph6tBomBtiDPxXDGzF9rSSihCEjyLDoawI+nsw=)
                          13: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: ofRylgtkuzabRWTfl6CvX6xrdmvbXSblnO6ChQYm4IQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:e0:25:ec:07:cd:3b:2c:65:ec:54:77:3a:08:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
        Validity
            Not Before: Jul 29 04:01:30 2026 GMT
            Not After : Jul 30 04:01:30 2026 GMT
        Subject: CN=44413e6c894449d813398c50e559d96a537cd9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:03:c5:7a:eb:4a:7e:1c:2a:2a:3f:6a:d5:da:
                    e6:f5:8c:42:c9:53:d2:5a:af:15:c1:89:5c:80:8c:
                    25:ae:58:24:7c:2a:c5:7d:c9:20:8c:c5:95:5a:65:
                    72:d4:f1:d4:7c:9d:d0:ae:60:f0:3e:86:0f:dc:18:
                    49:2f:45:b3:9e:f4:5e:60:b6:83:fc:df:f4:b5:be:
                    76:2b:f5:93:81:34:40:65:d1:34:ca:2f:02:57:7a:
                    93:b8:00:c4:b2:c5:54:a7:50:02:4e:a7:41:1d:12:
                    91:1b:5b:9f:13:f9:74:b2:ec:95:d3:14:70:64:2c:
                    82:bd:b7:7b:90:f5:de:b9:de:6c:c7:f6:f0:40:50:
                    a0:ef:c6:43:8f:fb:c4:a5:c5:07:f9:93:ba:a8:7f:
                    10:51:65:85:a1:d8:bd:e3:4f:89:fb:db:ca:fc:65:
                    d7:5a:dc:0a:93:2e:c1:de:06:d0:7a:98:6c:e6:23:
                    af:a3:61:c1:45:cb:b0:a0:38:23:ee:27:19:e8:9f:
                    3e:87:43:5e:16:75:42:56:04:b9:98:fd:fe:36:80:
                    4d:dd:f9:c1:b4:1a:3a:3c:8b:f6:ed:98:b2:0f:91:
                    b7:70:35:d5:db:e1:f6:df:6c:93:f7:e8:85:ad:19:
                    9b:1d:27:6e:7a:47:3d:3b:c5:40:9b:b9:c6:bb:c7:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:41:3E:6C:89:44:49:D8:13:39:8C:50:E5:59:D9:6A:53:7C:D9:D0
            X509v3 Authority Key Identifier:
                keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:75:c4:4e:3f:a1:74:f2:98:b3:e6:17:db:97:5b:b3:23:0d:
         a4:94:91:c7:69:05:14:1f:fc:dc:b8:7e:93:a4:17:49:a9:cc:
         b0:27:c5:e8:f2:bf:02:df:cf:83:90:91:08:c0:47:14:0e:6c:
         87:24:9d:1d:bf:a7:be:4c:06:36:34:48:35:3f:cb:3f:6e:39:
         53:1a:10:3b:c2:d8:2e:e8:18:75:38:e6:4a:fd:80:71:00:08:
         60:c1:05:74:50:aa:72:7c:3a:39:67:9f:23:92:41:1c:fa:cc:
         c9:d5:40:8b:79:7a:df:b8:d6:e5:eb:c1:c2:9c:e8:db:9d:af:
         ef:32:cb:88:49:23:2d:fd:33:9a:99:fe:ab:bf:53:07:e5:d4:
         07:48:20:be:2e:44:0a:2d:6c:c8:4b:6c:2e:42:b7:cf:4c:05:
         60:f3:5c:c9:0a:05:3a:c8:3a:45:52:22:39:67:cb:a6:01:1c:
         67:55:9f:1f:2b:64:9e:28:b4:10:2b:68:50:2d:2a:8e:1d:06:
         12:a3:27:39:e2:64:b5:1d:84:56:ee:d8:2a:e3:52:f1:60:7a:
         43:26:d4:2a:a6:ae:bd:96:8f:75:00:98:25:37:fe:0d:7d:27:
         ef:e3:a5:cc:f1:ef:87:73:fa:db:cc:65:2c:68:52:d9:15:ed:
         ac:41:85:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:36:47 2026 by rpki-client