Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File:                     uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier:          jAfVEDWQcZIVT1W78k8717Umv3JdqORq2GgfdT0ZPvU=
Subject key identifier:   23:66:24:2D:AB:56:B7:79:1E:8A:74:EE:43:CB:27:9C:32:43:F4:26
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer:       /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial:       019FAA1A6ABE4BAF98EB9AE57AFF8EB65250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number:          1135
Signing time:             Tue 28 Jul 2026 19:01:25 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:25 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:25 +0000
Files and hashes:         1: S-yBnbW2TPRdHm8Bvnkb6SKNP-E.roa (hash: thzWzHkRBVrBpMkyMju39NgzMSOUf/2SSYied1BZFaw=)
                          2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: tFRZEZ6bFrQclOqI8ncJINxNPTiKzbReuvhVW/90EVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:6a:be:4b:af:98:eb:9a:e5:7a:ff:8e:b6:52:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
        Validity
            Not Before: Jul 28 19:01:25 2026 GMT
            Not After : Jul 29 19:01:25 2026 GMT
        Subject: CN=2366242dab56b7791e8a74ee43cb279c3243f426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fa:d4:6b:54:4e:7d:2e:e7:d0:6b:7f:e8:29:
                    ad:0e:b9:89:45:8d:8e:db:aa:11:36:e1:a6:99:f7:
                    22:56:b1:1c:24:5a:71:8e:68:25:cf:45:ae:78:c2:
                    cc:6b:e0:b7:b2:c8:1e:5b:b6:64:92:22:81:6a:06:
                    9d:0a:ed:d9:b8:4e:12:a7:fe:91:21:1c:55:ae:8f:
                    41:16:45:3d:27:f3:1b:19:ed:58:2b:b1:6f:7c:3c:
                    cd:b1:24:87:d1:26:23:8b:ab:f4:7e:9b:ca:b4:d0:
                    47:5f:e0:65:81:f1:70:96:cc:7a:a6:55:2f:cb:2e:
                    f5:17:78:8e:42:77:d2:f7:bf:0d:8c:84:9d:47:b4:
                    46:56:1a:72:bf:28:be:9e:89:73:bf:41:69:e9:05:
                    2c:c7:7f:bb:76:6b:30:39:5f:a6:ba:be:96:85:dd:
                    1e:c2:c9:64:50:0c:15:c9:b0:11:c5:83:fc:40:7a:
                    39:36:07:96:cf:63:0d:a5:00:27:24:43:03:4f:d5:
                    cd:cd:fe:dc:05:84:03:d0:ae:15:04:f5:3e:d0:9c:
                    42:9c:e1:8b:00:93:25:13:2d:59:da:bb:d2:fe:fb:
                    0c:33:16:50:25:5d:12:49:fb:0b:84:7a:f4:dd:e6:
                    01:bf:5a:b7:eb:37:2c:8b:b7:64:f2:0d:c5:e6:b8:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:66:24:2D:AB:56:B7:79:1E:8A:74:EE:43:CB:27:9C:32:43:F4:26
            X509v3 Authority Key Identifier:
                keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e7:85:a9:bc:d3:b8:3b:23:b6:19:f4:6e:e6:04:d2:c8:7d:
         cf:a7:c9:b5:51:b0:5f:ed:e3:26:99:9a:36:4a:cf:6b:70:7a:
         1a:23:a7:3a:e0:63:5e:03:c6:2d:40:de:d3:4f:a5:9b:e6:e5:
         a8:7c:9a:5f:74:b2:2f:51:65:9f:d3:1a:d7:2f:f0:93:48:a3:
         1f:ed:b0:c9:b5:19:00:82:98:47:5a:d5:19:2e:8c:60:a8:4d:
         39:78:a5:48:e0:c6:32:22:cd:e7:7d:59:7d:3e:bb:65:80:95:
         de:c8:62:f8:ac:58:a5:e6:9b:4b:b6:33:09:a1:fc:ec:81:ce:
         d4:3b:50:3e:f6:de:c0:2f:1a:34:d0:9d:f0:2e:0e:b1:60:a6:
         50:fd:13:0d:79:21:dc:f2:cf:07:31:5c:07:8a:b0:38:30:6a:
         d6:ef:53:ec:3a:f4:c5:4e:36:4a:d0:40:be:54:72:7f:35:93:
         62:b6:22:63:a9:09:d5:d6:c2:8f:b5:f8:a3:13:b8:a1:72:5d:
         cb:73:4f:d2:1e:a4:7a:b5:23:95:b7:04:0d:cc:4d:ae:4e:c5:
         b3:7d:c4:d4:39:27:34:21:d9:f8:b2:b3:64:4c:e7:46:36:94:
         ee:8a:45:5d:d8:b0:04:8b:db:80:45:5f:ad:21:91:2c:27:a0:
         38:71:c9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:56:01 2026 by rpki-client