Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File:                     U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier:          7ooxEqosV9NuUCHnYEKPKKaqjXxuR8iiMrZmeufZz0Y=
Subject key identifier:   44:93:7B:9C:9C:1B:9E:5D:5B:F6:8D:10:08:7E:C1:50:80:10:F4:8C
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer:       /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial:       019FAAF5FB8142C0143198CF30174002875D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 23:01:15 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:15 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:15 +0000
Files and hashes:         1: IhNm1XAjTUBP_UYjIGIEELcWiWc.roa (hash: TcGN7ZBSR/KDo/mk7XwRToavEZ6usSTJYaYD26UCIPE=)
                          2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: JBpnR+Dbm4NEQtJ8iBiymvUg8QN/CNEKwoVTZisdt5g=)
                          3: mjm_jL6FnCZyLJAmMfTaUZL_DF4.roa (hash: 7TBTThhJXxwuqJMKV3smo+3dSUEAzVVTW36ntOu96Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:fb:81:42:c0:14:31:98:cf:30:17:40:02:87:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
        Validity
            Not Before: Jul 28 23:01:15 2026 GMT
            Not After : Jul 29 23:01:15 2026 GMT
        Subject: CN=44937b9c9c1b9e5d5bf68d10087ec1508010f48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:52:ca:93:44:c4:6d:89:e0:4c:94:5e:0c:
                    c4:04:2f:fb:89:f4:1e:be:95:8a:58:66:3a:e3:b3:
                    86:0b:3a:1d:73:5c:10:a1:f7:94:b1:fa:2e:11:15:
                    e6:aa:c3:c7:e3:7a:fb:06:23:18:02:b5:b3:17:ab:
                    a8:3d:83:28:29:14:0c:8c:26:33:56:99:5b:29:cb:
                    5e:d3:08:5b:39:1e:a4:9b:34:c5:e0:8b:85:e1:a4:
                    95:a3:2a:65:81:aa:29:cb:25:0f:24:20:eb:6c:ba:
                    80:0a:0f:19:ec:90:73:6d:f7:32:b8:58:39:22:8e:
                    4d:c0:1b:5d:96:57:d2:74:cb:92:92:dd:66:2f:9a:
                    01:ce:be:d4:5d:d2:c8:6a:9a:57:eb:d6:8e:fc:17:
                    2c:df:68:d5:58:0a:e8:6b:d7:25:fa:c5:f2:7d:b1:
                    05:88:24:fc:22:ee:b8:06:17:e8:d5:14:95:c3:c5:
                    31:0e:ee:03:5f:66:ce:4d:39:54:a5:d5:12:32:5a:
                    9b:67:33:eb:e6:96:8d:e4:28:de:bd:3e:73:e8:65:
                    9b:b2:2a:bd:e8:8c:34:0c:e1:55:22:36:3d:9f:3a:
                    36:b6:1f:c8:5d:b6:36:de:73:85:b9:ea:7b:46:cc:
                    a9:6a:29:1e:81:95:74:57:1f:90:fb:20:ea:56:30:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:93:7B:9C:9C:1B:9E:5D:5B:F6:8D:10:08:7E:C1:50:80:10:F4:8C
            X509v3 Authority Key Identifier:
                keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b0:58:27:af:7a:a7:d5:5f:95:9f:4e:69:58:aa:0e:d4:89:
         38:72:37:08:8b:b3:01:0c:a0:7b:4c:a7:10:6f:26:4c:c8:5f:
         62:dc:a7:fb:84:8e:66:a7:87:5a:2b:c9:07:ab:7b:5f:0d:e2:
         7b:fb:4d:4b:ee:4f:9e:f4:d1:c4:e7:57:97:b7:77:5e:e1:f2:
         04:fe:5e:4d:fa:18:73:15:b9:62:2f:7d:f1:89:44:08:39:b7:
         41:b3:60:a3:2a:59:3e:4e:28:0d:07:15:b3:e5:1a:e7:b7:de:
         d5:45:0b:04:8a:3f:51:1d:5d:73:9c:89:af:30:71:9a:07:34:
         da:58:89:87:51:ad:0f:ab:f5:23:c8:38:22:af:bc:5a:0d:28:
         75:16:29:46:23:86:94:cf:17:8e:0f:1a:a6:df:d1:b8:bd:19:
         8d:ce:c1:be:88:af:04:e6:0c:a3:d8:62:58:93:a6:c7:2e:14:
         b5:a4:e3:fb:77:9c:64:68:56:08:6e:e5:2d:09:ec:2b:30:18:
         31:18:31:07:87:ed:20:90:46:86:cd:a7:2b:88:1e:7e:55:13:
         3d:f4:1b:16:9d:22:b2:ce:b5:fe:4c:4e:2d:0a:1b:5f:b0:e8:
         d9:ff:2b:53:f8:39:31:b8:61:cc:72:ff:4f:39:6b:23:69:75:
         c4:08:cf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:45 2026 by rpki-client