Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File:                     uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier:          Vhwjv/uw55KpCiTUmUT+NLZA7jzn4rY/2giyYNhIrnU=
Subject key identifier:   1F:5E:D9:57:7C:FD:BC:7E:28:37:08:84:55:DD:77:46:4B:02:A3:E6
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer:       /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial:       019FABD0F7DBA32D871B87011D0658E1DD88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number:          0BE0
Signing time:             Wed 29 Jul 2026 03:00:26 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:26 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:26 +0000
Files and hashes:         1: IVaGwYE-xSWos9-zj2HpODEJhqg.roa (hash: L3WvUKStDTf5drv93q1GG66aaVezmjafU4Trsj7t1+s=)
                          2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: pN3L/UOEMKfeS6LT+LLo1gDZtqRCjRRGtL8oMwcnur4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d0:f7:db:a3:2d:87:1b:87:01:1d:06:58:e1:dd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
        Validity
            Not Before: Jul 29 03:00:26 2026 GMT
            Not After : Jul 30 03:00:26 2026 GMT
        Subject: CN=1f5ed9577cfdbc7e2837088455dd77464b02a3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3d:17:03:a9:49:56:46:20:49:8a:25:ce:15:
                    cb:6b:06:59:81:02:85:e5:75:2e:e2:fe:3b:27:6f:
                    18:7b:f5:57:c9:28:98:9d:25:a4:7c:3c:dd:92:fe:
                    a0:b2:c2:5e:34:35:6d:4c:5c:93:2c:aa:1a:6d:6f:
                    11:ee:12:8c:6a:46:ee:6e:fe:54:97:3e:f8:b7:78:
                    49:cf:33:34:e4:89:fc:84:d8:fa:fa:22:c4:4d:b5:
                    f6:33:bd:82:f8:2c:d0:a5:33:07:f1:86:8c:d1:1d:
                    21:b9:a3:3a:bc:35:7d:48:dd:2c:2a:4c:b3:71:5d:
                    c3:16:ee:22:ea:c8:d4:e3:28:76:64:6c:07:4c:0c:
                    58:e5:15:1a:b0:81:b9:73:4c:1b:06:ad:fb:a7:8d:
                    b5:c6:72:b2:c6:79:f3:c7:ca:03:82:97:1a:9f:4c:
                    7d:87:d0:a5:8e:ab:8b:aa:7c:b3:42:eb:93:8f:b4:
                    7b:59:f0:13:67:76:f0:c4:1f:22:19:e2:bf:ec:f1:
                    e6:4c:40:1e:00:d7:58:21:93:27:63:cb:f3:36:ed:
                    c8:48:e3:b9:03:89:f1:d0:5d:58:d4:dc:6d:14:a2:
                    ee:3f:3a:3a:14:3e:ba:7f:e4:29:b4:f2:0f:e0:bd:
                    66:6e:67:90:aa:33:bf:45:92:8a:86:a1:a9:84:16:
                    2d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5E:D9:57:7C:FD:BC:7E:28:37:08:84:55:DD:77:46:4B:02:A3:E6
            X509v3 Authority Key Identifier:
                keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a6:5c:2d:d2:52:e9:4f:14:ca:a4:c5:b6:49:da:91:f9:cd:
         9b:96:54:e8:5c:56:16:a3:c2:43:89:ff:c9:e2:f9:37:6f:c6:
         38:78:71:3c:28:8f:b1:13:30:46:1d:d2:b6:76:54:00:77:22:
         f2:2b:11:84:1e:1a:1d:e5:31:ee:cc:63:66:92:49:3a:8d:7a:
         62:23:18:44:d0:33:e1:12:52:97:94:13:7f:fe:b8:f1:67:74:
         a3:cc:e5:b0:da:e2:fe:2f:c9:fa:e8:50:1b:51:a5:75:e4:c8:
         f3:67:62:f4:6e:54:62:eb:44:ce:8f:e1:27:74:a7:b8:b2:03:
         ff:2f:60:42:c9:3c:b0:01:68:9d:37:25:36:af:d1:72:06:ff:
         76:04:aa:cf:49:3c:cd:06:ae:d5:ae:b9:7b:60:8c:45:20:4c:
         2c:0c:9b:8b:23:2c:53:2b:ad:68:6e:36:65:e2:9e:b6:48:09:
         b8:45:3d:62:bc:71:b4:8d:17:f6:55:91:8a:98:00:0b:b0:76:
         2e:2c:cd:b8:f9:78:21:7a:8c:6a:0e:87:a0:82:5b:21:de:f0:
         52:bd:9c:24:60:78:56:a2:da:88:3a:ba:6e:3d:03:ce:d2:41:
         19:0e:2d:9f:c5:bc:a3:f7:2c:9f:15:92:04:0a:69:0f:96:0e:
         2d:97:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:39 2026 by rpki-client