Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File:                     uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier:          E+nyki0gIJf339iK7AhXfTF5zz4S0Vdw7RL2/reqdm0=
Subject key identifier:   92:59:B7:19:E3:B3:44:44:76:3C:FD:0B:4C:74:B0:E2:30:60:02:33
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer:       /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial:       019FAC07C6B6C405CC260074700B5009E2FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 04:00:18 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:18 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:18 +0000
Files and hashes:         1: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (hash: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI=)
                          2: hTUAMk4ivW-zcf6qV0iH6m50Tko.roa (hash: VBCrCjN466HYq/3fbWnNr2nU6AFrUJpSz4d+MsDsH6k=)
                          3: po2AjEIA0cEB2DRz3ItNN0tLtJA.roa (hash: emEIyu5B7Cay8ES1oJZR9gyFPVy8pKl4tqO8qQcgwDQ=)
                          4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: 3xYsN648VTVA9/iANutK/IFdp7n5AuIIU/VfchdFquc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:c6:b6:c4:05:cc:26:00:74:70:0b:50:09:e2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
        Validity
            Not Before: Jul 29 04:00:18 2026 GMT
            Not After : Jul 30 04:00:18 2026 GMT
        Subject: CN=9259b719e3b34444763cfd0b4c74b0e230600233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:e1:56:c9:2d:a8:bb:db:d5:f9:61:2d:5f:
                    37:51:c5:9b:5f:19:de:f7:2f:6a:77:68:99:21:1b:
                    c1:73:f2:ef:05:ee:d6:70:60:20:8a:d5:57:20:2c:
                    25:3d:3c:28:f1:ce:72:36:c7:d2:74:9f:09:18:66:
                    a8:ac:89:95:b3:a2:14:67:7d:98:4d:aa:42:cf:cb:
                    01:5b:90:ad:e7:f0:3b:7b:44:ee:c0:e5:ba:2e:6e:
                    93:e6:dc:d3:2a:c3:24:e1:1a:9f:5f:86:14:cb:30:
                    43:86:a5:02:f3:93:63:32:f7:34:15:10:36:a0:41:
                    01:62:52:0b:46:86:66:6c:4e:6b:2d:48:9f:c4:1e:
                    aa:e2:57:d6:f0:60:4d:7f:19:d1:9c:50:03:67:df:
                    4d:2b:0d:ed:fe:25:59:7e:19:14:30:97:5f:4a:7d:
                    29:47:46:ad:f9:1f:9f:92:77:e8:32:a8:ae:8c:ad:
                    4e:14:af:05:2c:94:fc:f9:50:50:e0:bf:6e:d6:b3:
                    c1:32:5d:b5:97:56:a1:ec:24:a4:49:be:7c:a6:cc:
                    70:82:ad:a9:8d:8a:48:14:8c:2f:13:cb:6f:b3:cf:
                    e8:53:0d:ee:e7:71:c8:4b:71:a2:8f:57:de:f0:d1:
                    af:06:4c:16:13:f8:06:fd:0a:1f:e5:52:3a:be:e1:
                    a3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:59:B7:19:E3:B3:44:44:76:3C:FD:0B:4C:74:B0:E2:30:60:02:33
            X509v3 Authority Key Identifier:
                keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ab:32:c6:f0:6a:0c:ea:71:d8:af:57:bb:d7:29:ad:2b:5f:
         a2:f8:c6:63:12:ed:3a:69:78:a7:5a:ec:6f:2e:66:a6:e8:87:
         e9:88:c6:a7:9d:dc:ab:38:b2:39:38:06:e9:38:d9:c6:25:35:
         b7:e9:56:43:7b:f8:24:95:ac:ac:af:fb:5d:32:84:1a:7f:fc:
         8f:27:16:7b:22:17:e3:0a:ba:fb:04:e8:71:1d:1e:c9:3e:4b:
         3c:4f:00:e0:55:df:d1:02:80:41:47:28:01:e6:36:be:15:b4:
         77:31:91:50:07:73:6b:a6:b4:c0:28:85:6f:f6:cf:8b:f6:3e:
         03:8c:bf:79:46:8d:c5:e2:6b:62:aa:6a:28:48:63:da:5f:12:
         f4:c4:59:bb:33:c2:6b:7b:0c:d1:22:e8:ab:3f:b0:61:89:6b:
         28:83:99:fd:9d:93:17:74:0e:1d:be:38:19:b6:be:2d:0c:32:
         ac:e9:13:fe:89:6f:35:6f:3a:a8:e7:23:3e:d9:d7:52:4e:4e:
         98:f4:37:33:b0:54:07:d5:1a:4e:74:06:9a:ed:19:c8:75:b0:
         9f:f9:7a:25:29:94:fa:c3:8a:0d:8d:af:a4:c8:43:ea:3e:f4:
         66:e3:b8:64:35:e9:f4:7d:98:72:71:f7:d1:bf:b5:e4:83:3f:
         f2:8f:10:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:47:09 2026 by rpki-client