Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File:                     UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier:          JHr1jF0tqyJbQ7F0TX9OzgIRxqBUd1cVQdl8INE/GCo=
Subject key identifier:   F4:20:FA:A0:B8:D1:36:BC:0E:63:64:6F:9E:52:6A:50:2C:EA:14:D4
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer:       /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial:       019FAC3EC10D2B496431FB1045221AF5C091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 05:00:21 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:21 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:21 +0000
Files and hashes:         1: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: +yOkOhMmsqE71Wa9mQlm5D4RXMhziUhGFEhIZIVGu2c=)
                          2: jb28EMGpZLQEx0nm-COFBx7LuxA.roa (hash: tlsP+4YE5wEIxVFDiqeCuZVOSE8h29Zo7K+FoY31djg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:c1:0d:2b:49:64:31:fb:10:45:22:1a:f5:c0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
        Validity
            Not Before: Jul 29 05:00:21 2026 GMT
            Not After : Jul 30 05:00:21 2026 GMT
        Subject: CN=f420faa0b8d136bc0e63646f9e526a502cea14d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:29:09:da:d4:41:a0:98:42:25:17:58:11:86:
                    1e:12:81:e3:c2:e9:dc:96:54:3e:d9:2e:4c:02:10:
                    da:5a:31:09:1b:60:8a:14:63:72:0c:7d:c4:20:f7:
                    04:95:b6:f7:ed:e2:78:4c:0b:db:e1:13:41:5d:ea:
                    3f:f2:f4:b3:59:f5:d1:ea:8a:3f:b3:3f:c2:37:56:
                    f2:53:2f:28:2f:a5:78:18:af:c5:3e:4a:be:16:9e:
                    35:c7:21:6c:fb:4b:72:6e:53:12:1d:0e:44:b8:fd:
                    ee:d5:ed:28:11:71:d6:16:3d:6c:16:df:ae:f4:7d:
                    80:3a:31:73:c2:13:24:d1:89:b7:dd:41:13:5e:30:
                    2a:7d:cd:9b:80:38:bc:9e:5d:8f:ee:27:a9:f9:39:
                    c1:d1:8a:1c:b5:27:8f:0b:dd:5a:92:28:a0:30:62:
                    73:0f:bb:9a:80:f3:5b:c1:38:98:11:2d:1b:21:11:
                    71:ad:c2:3a:6d:bb:af:3f:58:af:24:a1:3b:b1:26:
                    b4:cc:f5:38:14:02:26:37:96:d6:d7:26:a9:b6:b3:
                    7b:e2:ef:b6:3b:2e:30:53:ab:fb:aa:07:8d:05:b9:
                    35:c5:1b:16:73:7a:3d:f2:b7:fc:fa:45:86:44:12:
                    60:82:6d:6c:b6:cf:b3:aa:56:8f:d4:9e:e0:45:0a:
                    d9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:20:FA:A0:B8:D1:36:BC:0E:63:64:6F:9E:52:6A:50:2C:EA:14:D4
            X509v3 Authority Key Identifier:
                keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2c:0c:f6:a9:80:34:e7:9a:81:f8:7a:f8:0a:71:2f:37:0a:
         70:bb:81:47:96:55:1a:19:41:64:40:3a:74:47:84:14:d6:f0:
         85:39:41:e2:fd:cd:98:72:99:41:8c:dd:37:e9:fb:ad:ba:7d:
         ee:89:92:a2:79:c5:30:26:49:6e:4c:12:e2:08:49:25:2a:f4:
         7e:48:37:8e:be:5c:f0:6c:34:12:6e:13:90:f7:e5:c3:62:cc:
         de:ea:5a:8d:a6:e5:3b:4b:ee:5d:05:bf:87:a9:bf:f4:4a:02:
         51:c7:dd:39:69:e4:29:54:27:c2:6e:51:af:03:52:ef:de:fd:
         97:b4:d6:97:e0:0e:de:d0:d1:50:41:4c:1e:f8:d6:01:b8:0d:
         92:33:23:79:55:77:07:f2:20:58:19:f7:bb:4c:50:50:c0:41:
         30:a0:1d:89:f8:7e:4e:3c:2c:23:4d:3a:fa:92:b0:ab:01:dd:
         52:39:cf:b5:11:44:98:2c:60:0d:0e:72:b3:98:9b:a5:ac:22:
         b0:6c:bc:cb:24:cf:50:81:39:df:b6:38:27:bd:51:18:0d:22:
         c4:ba:af:3b:aa:ff:3e:fa:68:70:bf:73:0f:5c:b3:aa:6a:a1:
         b4:30:83:62:95:d7:a7:11:98:e8:98:99:c7:a5:e7:c1:a2:04:
         a5:0a:f8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:37 2026 by rpki-client