Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.mft
File:                     Uz_pWg1f2WoWlveaYSEwi5gf3Vg.mft (raw, json)
Hash identifier:          w2Fbb3zdURxH/F9f5n1mQnVo5DrsRemMAIoZHbnY0L8=
Subject key identifier:   AD:6D:96:A6:AA:91:C6:5D:1A:CB:FC:F8:92:98:72:4E:25:5F:86:23
Authority key identifier: 53:3F:E9:5A:0D:5F:D9:6A:16:96:F7:9A:61:21:30:8B:98:1F:DD:58
Certificate issuer:       /CN=533fe95a0d5fd96a1696f79a6121308b981fdd58
Certificate serial:       019FA89973CBCB697F3A4E10C45FB7AD6C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:56 +0000
Files and hashes:         1: 2QJlNqejeO95FQ8p2esL1ZII6dk.roa (hash: Kke3EbmaVtee0KytWcvPRvyGZmTbAP6OWgdRpSMJlGg=)
                          2: Uz_pWg1f2WoWlveaYSEwi5gf3Vg.crl (hash: C6WE597A64XIGMG8IVvSkpVpVTvwKvpi6WPQwZn36T0=)
                          3: nKoniYig4vkyih3_6WESbYJo7J0.asa (hash: fz8YeP7u+OnaTRxOC1bRvP7gc/JmHFkV2WeAiv8OI88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:73:cb:cb:69:7f:3a:4e:10:c4:5f:b7:ad:6c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533fe95a0d5fd96a1696f79a6121308b981fdd58
        Validity
            Not Before: Jul 28 12:00:56 2026 GMT
            Not After : Jul 29 12:00:56 2026 GMT
        Subject: CN=ad6d96a6aa91c65d1acbfcf89298724e255f8623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:18:91:71:dc:da:a0:78:1b:f5:31:64:61:ff:
                    d7:e5:ee:52:f1:16:bd:f8:90:c7:0f:b8:13:24:e5:
                    9d:0e:37:d8:8a:ec:cf:00:3e:01:8a:f6:bf:12:d9:
                    40:25:79:2b:28:de:21:07:76:03:86:f0:c6:68:c1:
                    f9:8c:c2:de:97:de:a5:ad:7c:40:75:b6:f7:d2:fd:
                    c6:b9:0b:f6:df:10:c4:f2:4a:b6:ec:33:7f:e8:75:
                    0d:67:9e:34:9e:7b:8b:84:8d:80:2d:06:4c:79:f9:
                    69:02:9e:95:27:ae:61:23:43:63:57:f2:eb:7a:77:
                    16:1d:bd:10:7c:ee:ae:1b:9c:0b:a6:04:24:bb:27:
                    30:cd:4b:86:45:79:32:26:f5:d2:0e:74:06:b6:ca:
                    b2:31:46:67:8d:61:95:27:21:8e:b5:e5:4d:b3:ea:
                    b1:d6:8a:65:79:4b:32:df:32:53:31:97:f7:85:52:
                    f9:ed:c0:65:24:7e:19:7f:e1:97:f4:e7:d8:19:ba:
                    97:08:9e:df:12:a5:14:84:87:b3:c9:56:6b:a8:11:
                    6c:28:eb:15:e2:2e:af:de:e6:28:59:5d:27:73:93:
                    f8:b8:6a:5d:60:3b:b1:9e:6a:b9:43:66:04:e2:34:
                    9c:8f:d2:4c:21:ab:45:6c:69:96:e1:96:01:ac:bc:
                    a2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6D:96:A6:AA:91:C6:5D:1A:CB:FC:F8:92:98:72:4E:25:5F:86:23
            X509v3 Authority Key Identifier:
                keyid:53:3F:E9:5A:0D:5F:D9:6A:16:96:F7:9A:61:21:30:8B:98:1F:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:d9:22:95:58:3d:49:d6:e5:57:eb:87:65:8b:20:3e:4c:
         d1:64:22:e0:1c:2b:01:1c:0b:29:1b:c6:9f:44:35:b2:be:61:
         cb:90:04:85:cd:3c:ca:93:3e:c8:52:81:43:86:b6:6b:36:41:
         d1:5d:3c:f4:d4:da:71:fa:b2:46:02:b8:eb:ef:5e:19:81:55:
         1d:9f:1e:85:27:9d:b5:62:e5:f1:e5:5a:01:c2:92:f1:84:70:
         91:8c:f2:db:7a:e2:21:27:b6:fb:ab:19:e9:29:86:d6:a9:48:
         fd:db:59:da:20:85:b8:00:37:7a:59:41:ff:63:7c:99:87:7e:
         36:bb:b6:83:2f:d2:51:56:8b:2a:4b:bd:13:08:d4:40:9c:fe:
         0f:66:5a:3f:fc:c3:97:8e:e4:e7:ce:f5:23:a4:ba:55:d8:21:
         83:c5:cd:cb:2b:ed:76:45:48:fc:03:aa:1e:41:f2:8b:ab:df:
         84:73:be:b0:ed:89:40:73:fd:90:4c:1c:bd:57:20:5b:fe:57:
         8f:2f:ba:63:f6:12:8b:79:0d:ed:57:86:e4:51:9c:29:cc:60:
         c4:31:3f:c2:1f:37:ba:18:2b:71:cc:57:75:ec:6d:6f:d6:63:
         2e:31:26:2e:e4:12:e1:7c:51:e7:0a:ec:b5:89:56:41:3e:11:
         86:f5:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:49 2026 by rpki-client