Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
File:                     UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json)
Hash identifier:          84KRemYjrp04tqvadDtH23i+FMqLVd8T4pXhTr9CWV0=
Subject key identifier:   DD:3D:4B:0B:00:BE:EB:9E:2F:D9:CC:77:DD:A1:9F:3F:C1:9D:0F:AE
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Certificate issuer:       /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial:       019FAB9A37171490048EDD50E190E5E0FC08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
Manifest number:          14FC
Signing time:             Wed 29 Jul 2026 02:00:38 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:38 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:38 +0000
Files and hashes:         1: 5LP1tFsYxrSifJx4g3QCwnwqEE0.roa (hash: KN3CpVDHemmKFo5Hvty6pP9rTH9gXzF1gwHa0T5DRaI=)
                          2: CGEbthtCVvOlptpvMNG-4zYMxC0.roa (hash: uleULESiIyYNwyib2ltUP7gwwxZ92HdRJC/n7Kqb5sg=)
                          3: NEN0LXaSfRY1LnULdkJtj6mRNJQ.roa (hash: 3VMJ8FAcJtXYQQFiElHCi0MUd/IBCd2Oo6ayYD6ZuQI=)
                          4: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: 6+K6dKiiKcIzhlFjrPy9hBXRmxINseZWmbVcEiYujos=)
                          5: Vvg_eRMXx1wM0ykfa7tuZT2JbiU.roa (hash: y54xWJIZgynMkSzzpbyHXRwEQLJEaYo5XZHrl4z8vdo=)
                          6: c72wk2piK98wT4mJw8_ZtS1RplA.roa (hash: sWf1C2L00m53zAy7UBc4ltRNb1KloYEQlgh8zb6I1Tg=)
                          7: q5ijRhsoQMXQqvexZ__tLFhWfbE.roa (hash: RKODKNUK1hXqxPnqoVYe1vULFOrntBOl4JYsmeK1KQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:37:17:14:90:04:8e:dd:50:e1:90:e5:e0:fc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
        Validity
            Not Before: Jul 29 02:00:38 2026 GMT
            Not After : Jul 30 02:00:38 2026 GMT
        Subject: CN=dd3d4b0b00beeb9e2fd9cc77dda19f3fc19d0fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:1f:05:c9:ae:f5:b8:75:de:8a:36:03:d7:
                    6c:30:e8:b7:a8:48:96:e6:d3:7d:13:db:1a:f3:0e:
                    9e:e9:4d:c8:f0:66:bf:b6:2e:32:3a:58:14:ed:4f:
                    e3:ac:f4:3f:df:af:e3:3c:79:87:fc:83:84:7c:bb:
                    21:9a:7b:b5:8b:ce:31:f3:9b:c9:b0:09:92:ec:60:
                    d0:b3:8e:c5:e4:77:d0:81:20:e1:30:07:34:8f:e3:
                    d4:2b:01:86:21:99:62:9f:b2:45:08:d7:54:d8:bf:
                    15:97:8c:28:76:ae:8a:d1:28:d4:d1:2b:8c:9d:d4:
                    e1:98:fc:f5:16:55:dd:08:b6:c1:1c:7e:93:95:32:
                    95:a3:a0:c2:ee:12:9c:58:3b:8e:9b:df:63:02:5c:
                    be:89:9e:01:83:df:77:0b:9d:b8:99:ec:7a:49:ca:
                    68:38:06:fe:9f:13:1b:92:a7:a0:59:5b:6c:dd:e5:
                    b7:45:ff:af:37:c4:a9:d0:a4:aa:5a:76:b4:d6:be:
                    f2:e9:95:c6:0e:c6:15:40:e4:4d:2d:08:04:6c:ef:
                    ff:e9:88:5f:e5:77:56:a9:d0:52:43:a1:51:fd:b9:
                    42:98:4a:73:a5:f3:07:27:25:e9:3a:60:7a:13:ba:
                    69:57:28:b1:cc:f2:5a:86:90:66:dd:f3:d9:80:28:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3D:4B:0B:00:BE:EB:9E:2F:D9:CC:77:DD:A1:9F:3F:C1:9D:0F:AE
            X509v3 Authority Key Identifier:
                keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:59:f8:ac:1f:6d:37:54:8b:89:e9:ef:28:0b:3d:77:31:cf:
         1f:55:23:b9:f4:c2:f5:98:ab:59:70:fd:e4:0c:97:97:a7:70:
         80:d2:47:9e:ae:b9:13:21:64:23:89:83:02:ce:c5:30:a7:05:
         58:51:88:9d:37:8f:6a:d3:b0:3e:52:e8:dd:bb:e2:b2:56:3a:
         62:62:09:61:d3:bc:39:bc:67:47:4e:23:4e:e4:17:dd:29:d8:
         47:0d:15:2b:d2:4f:09:e0:5a:a8:54:5b:6b:bf:66:65:99:4b:
         80:86:09:46:1e:43:15:2c:13:19:7d:69:91:1d:ae:eb:e8:98:
         aa:5b:80:1e:5d:0b:73:9b:e7:7c:0a:1a:a3:dd:cf:b4:2a:a5:
         56:82:3a:b8:34:ce:ee:02:64:7b:97:64:a4:09:2b:f4:c1:2f:
         d8:7a:5c:74:42:c6:a2:8c:9c:d0:c4:8b:a2:61:c5:d3:ea:a3:
         d3:a4:2a:f1:a7:af:d9:7f:9c:20:eb:01:56:37:b0:80:ec:ad:
         c1:dd:17:ed:32:81:1d:53:98:aa:69:d3:52:90:76:7a:53:fe:
         2a:f7:8b:83:de:aa:4f:5b:eb:13:49:5b:bf:a4:27:c0:6c:40:
         a6:a4:4c:37:c8:4c:d7:a5:d2:b4:95:f4:df:d7:a5:f4:fa:64:
         38:1c:2f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:51:13 2026 by rpki-client