Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
File:                     UuZ47pYouTW-JXzsw_siiYOdnlw.mft (raw, json)
Hash identifier:          2KEk5gJNm48HD+bjbmPgNfO5xQrSRu7uSEMKiZZOJBU=
Subject key identifier:   CC:01:6F:7C:99:37:DF:36:CE:D1:AD:FB:CB:B3:17:39:A8:BC:5D:D5
Authority key identifier: 52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C
Certificate issuer:       /CN=52e678ee9628b935be257cecc3fb2289839d9e5c
Certificate serial:       019FAD51E290223BCA0DBB693302C28B6548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
Manifest number:          146B
Signing time:             Wed 29 Jul 2026 10:00:52 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:52 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:52 +0000
Files and hashes:         1: UuZ47pYouTW-JXzsw_siiYOdnlw.crl (hash: GOkfUZbCuY5s9npPIZ/KLDqQ2Rfw9tlf4+/sjrT6tt4=)
                          2: awSUblYoi0uR-Qce-vsLGT4n938.roa (hash: hHM4gOkF2eXvtJlaJJ+ugAV+qUcnK5bYGtz3UK4BoKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:e2:90:22:3b:ca:0d:bb:69:33:02:c2:8b:65:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e678ee9628b935be257cecc3fb2289839d9e5c
        Validity
            Not Before: Jul 29 10:00:52 2026 GMT
            Not After : Jul 30 10:00:52 2026 GMT
        Subject: CN=cc016f7c9937df36ced1adfbcbb31739a8bc5dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:f9:63:03:53:66:ba:98:59:5a:8c:05:fd:
                    c0:78:38:ee:fc:94:db:47:ca:8c:2a:1b:92:07:3f:
                    df:01:29:ff:02:3b:0f:6c:fb:3e:86:4b:5e:7a:23:
                    dc:e0:0b:68:5b:24:6a:ee:c8:7e:b1:a8:3d:f2:d8:
                    b9:62:ba:38:3e:02:31:70:b8:e2:8c:59:26:67:d3:
                    aa:43:3f:5a:46:7e:98:42:29:a4:69:c5:72:f3:51:
                    e7:e7:47:28:a6:ca:13:4d:6d:6f:88:9e:d7:d6:a3:
                    17:c4:41:16:4a:57:7f:bf:a6:ca:1e:d4:b9:be:88:
                    72:d7:2c:39:4a:61:32:3b:dc:3d:b2:9a:4d:3a:5d:
                    8e:92:d1:c6:d0:a2:5a:59:59:64:cb:c8:11:4b:44:
                    e5:30:a9:bc:33:f9:ab:1a:fb:84:53:48:c3:7a:de:
                    29:ae:46:34:16:6b:9a:ab:32:6c:e0:7f:21:aa:90:
                    a9:43:2b:fb:d3:1c:3a:d4:1f:0e:e5:b9:97:4d:59:
                    d1:c3:77:ca:03:ce:ff:14:f4:35:f5:c1:b8:75:dc:
                    31:58:66:c4:27:0c:a2:97:4d:c3:72:da:b0:97:fe:
                    d9:63:24:7b:31:a8:06:1d:e7:6c:df:f5:f3:c6:a9:
                    53:66:07:56:ef:ff:c4:65:64:2f:39:90:df:41:f6:
                    69:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:01:6F:7C:99:37:DF:36:CE:D1:AD:FB:CB:B3:17:39:A8:BC:5D:D5
            X509v3 Authority Key Identifier:
                keyid:52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:eb:49:83:48:93:9d:b7:ff:a9:cb:24:a6:4d:d7:5c:e9:66:
         96:f5:3c:6c:2c:43:c0:90:b8:6c:d9:97:40:ec:9d:e5:6e:18:
         f1:14:85:a2:ec:4f:43:9e:96:d9:d8:bd:17:8a:df:5f:12:e2:
         fc:a9:1b:93:a5:7a:01:5b:2b:d9:d5:8e:d0:c5:29:e9:1e:25:
         9a:31:65:ac:02:9c:61:7e:06:39:01:9b:b9:e1:f5:92:7c:f5:
         fc:22:c5:8b:31:5d:95:d6:3a:de:d6:26:80:fe:46:3e:62:aa:
         b2:6b:1e:a5:85:66:b4:7e:4b:04:60:df:15:84:53:92:8c:10:
         fb:82:60:62:44:ea:43:38:50:4c:00:28:85:09:e0:8f:5c:c6:
         f2:73:50:33:4b:0d:13:43:e7:33:43:2e:f1:df:4f:f8:e8:c7:
         e9:33:7b:24:a7:e2:1d:68:90:69:89:4f:02:83:a6:01:b6:48:
         f8:0f:98:1f:21:00:da:df:64:34:1b:76:bf:fa:7c:f8:4e:1c:
         91:0b:3b:5c:a6:db:a7:e5:7d:b2:97:c6:a4:31:21:9d:c0:7a:
         fe:19:76:09:6f:73:fe:00:d8:67:b5:c8:2c:08:b4:fa:84:31:
         36:f2:cc:c2:b6:68:42:28:d5:4a:11:05:f9:1e:d2:fd:68:6e:
         45:34:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:57:58 2026 by rpki-client