Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File:                     uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier:          XfH/Jho8EmGcyT/EA+z5JSWM+ROimB0/3BeLVSXcSyQ=
Subject key identifier:   D6:84:19:47:16:58:91:B6:09:75:BE:97:F8:99:E0:F0:F1:98:EE:A5
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer:       /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial:       019FABD128D832DD6357B5C11D17976FBDE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number:          1609
Signing time:             Wed 29 Jul 2026 03:00:39 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:39 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:39 +0000
Files and hashes:         1: UhAbETd73I_RNmPinYlIjwaxS5A.roa (hash: 72Y1aXwOgGGk1TvFfLXba73tNjzJqcFFrwUxU2i0lEg=)
                          2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: hNeHzEc/sxw1q1jpka+Rl3aYaAQxTUP0qv94dG6QwAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:28:d8:32:dd:63:57:b5:c1:1d:17:97:6f:bd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
        Validity
            Not Before: Jul 29 03:00:39 2026 GMT
            Not After : Jul 30 03:00:39 2026 GMT
        Subject: CN=d6841947165891b60975be97f899e0f0f198eea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:01:ff:53:3d:4d:a6:cb:4d:e5:17:e1:a9:
                    e4:16:d6:2e:b8:9e:11:bb:d1:2e:b2:b3:9d:0e:45:
                    36:9c:d8:ae:64:c1:f2:15:74:c5:12:30:28:2d:1b:
                    1f:a4:51:83:82:17:e2:d0:f4:bd:50:4c:0d:28:37:
                    cb:1e:1f:d5:3a:d4:16:49:c5:3b:68:42:cb:6a:e0:
                    e3:0b:44:e6:e5:2f:a6:33:9f:79:44:34:58:03:53:
                    24:83:b1:12:50:87:61:d8:b8:29:83:82:4e:0d:cc:
                    a5:88:40:58:de:99:e5:66:79:fd:ac:20:04:f1:55:
                    e2:e9:df:0d:bd:b6:42:61:1b:69:6c:bc:f7:ff:46:
                    67:68:3d:3a:30:4f:50:7f:5b:71:c1:2d:fe:a1:e0:
                    ae:69:e1:a3:28:97:e1:fc:81:1c:2c:0e:60:14:46:
                    7d:0f:fb:7e:48:c6:f4:ab:85:b8:dd:ac:c6:a9:e2:
                    7f:09:af:5f:17:17:d1:f8:83:35:f7:0a:69:ae:a4:
                    06:62:89:c1:bf:e0:02:76:af:81:43:95:d7:50:00:
                    13:97:09:40:57:91:67:b6:a8:2b:df:ba:8e:20:bb:
                    7d:82:99:53:7a:d6:60:62:15:fd:74:1a:de:4a:17:
                    21:1e:ee:3f:08:5f:16:1f:10:aa:54:b6:18:39:02:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:84:19:47:16:58:91:B6:09:75:BE:97:F8:99:E0:F0:F1:98:EE:A5
            X509v3 Authority Key Identifier:
                keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:44:22:a3:0c:f8:ad:ef:4a:91:8b:f4:97:9a:26:a1:9f:24:
         00:8b:84:0c:a6:48:18:91:52:26:af:de:88:38:f7:70:90:95:
         44:9b:fb:dd:ee:26:a3:fd:52:50:05:ad:c8:b6:a9:88:8f:23:
         f0:8f:98:0d:ea:7b:2d:83:17:8a:fa:3a:ce:51:8d:fa:dd:32:
         6a:07:88:d7:81:31:5b:62:04:15:c2:f4:6c:cf:3c:4f:2c:ee:
         46:8d:a2:c6:30:74:8a:b7:5b:dd:28:76:b9:49:f4:31:a4:bb:
         02:95:88:fd:43:99:04:36:aa:2f:05:48:7b:44:c6:0c:e2:9e:
         d4:21:41:41:26:2a:b9:81:eb:01:38:43:43:6c:5f:cc:80:74:
         b4:ee:51:06:31:98:67:ae:29:b0:e4:45:67:12:db:44:a0:a9:
         ca:1d:c8:6c:95:10:94:47:7f:79:61:4d:1a:b1:42:d8:9b:3d:
         f6:82:7e:af:36:36:48:ce:7d:d7:60:18:bb:21:04:eb:7e:19:
         c0:75:10:89:52:7b:a1:d0:3c:b9:87:f1:90:e1:41:28:23:ee:
         03:69:2b:45:b7:9c:ae:8d:1a:46:89:7d:66:4a:a7:67:c0:2a:
         2b:e1:ec:7b:3c:65:0c:af:37:bb:58:93:5c:fc:a9:a5:65:cf:
         b3:2b:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:07 2026 by rpki-client