Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File:                     uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier:          7dxqSCtR1jOFbJGI26J10Wjni06tx4v5K+1Ci6IL4Ec=
Subject key identifier:   0A:F0:05:BA:2A:A6:AD:0E:51:16:67:E9:A5:3B:99:E6:DF:71:AA:15
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer:       /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial:       019FAB9A3570A41FC3A75A32FFF555238E8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 02:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:37 +0000
Files and hashes:         1: c8CsVa9fXYgke6S-ngSoGNntydo.roa (hash: Fwv89IU2a8LpbILl9PnyWFIyy2FdK+fO/FwW2CCp7u4=)
                          2: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: KJnOYOAQ9L/5TXz6Bph0B+xWvYrnCnuG94FWJHMaWdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:35:70:a4:1f:c3:a7:5a:32:ff:f5:55:23:8e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
        Validity
            Not Before: Jul 29 02:00:37 2026 GMT
            Not After : Jul 30 02:00:37 2026 GMT
        Subject: CN=0af005ba2aa6ad0e511667e9a53b99e6df71aa15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:fa:11:80:66:ba:c8:d5:db:cc:61:05:22:
                    f7:25:3f:47:7d:d5:5d:3f:87:45:54:c0:ae:02:33:
                    c5:18:e1:77:66:c5:d3:a9:19:2f:7e:49:0b:5d:5f:
                    eb:6d:a4:d1:fe:a2:a7:4f:9e:87:31:b7:aa:79:cc:
                    a0:ea:6f:c6:76:73:38:bd:1c:a3:95:26:d9:d4:a7:
                    00:cb:0b:98:60:9c:f9:2d:e7:e3:3a:0f:09:10:fa:
                    30:7c:de:80:91:cd:0a:ff:c7:8e:b9:a1:e6:52:b7:
                    be:e8:53:0c:0f:a6:60:b5:65:9b:6e:62:79:6d:d8:
                    66:b4:87:70:ab:fd:4b:00:ba:46:85:1a:8e:ad:ee:
                    9e:2c:9f:d4:4d:4b:fe:16:b2:c2:34:f7:a8:ff:f9:
                    ec:c1:83:92:0e:0c:84:f1:4c:ae:5b:f4:c6:6f:e4:
                    66:8d:a2:86:ae:3a:7e:af:a9:81:be:59:68:55:b9:
                    f8:7c:6f:07:64:dc:d4:68:12:17:d1:0e:56:c3:dc:
                    51:b8:56:89:5f:dc:35:e9:9e:a6:ca:e8:13:6e:73:
                    47:19:79:d3:57:33:4c:d9:0a:2f:95:5f:91:84:8d:
                    fe:fd:03:05:cc:00:0d:a1:d7:8d:1b:83:15:96:7b:
                    1c:3e:89:81:a7:08:61:41:eb:02:26:d7:74:a8:c2:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F0:05:BA:2A:A6:AD:0E:51:16:67:E9:A5:3B:99:E6:DF:71:AA:15
            X509v3 Authority Key Identifier:
                keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f9:b7:e9:67:a3:3b:50:9a:37:7f:5d:a8:e1:4e:59:6b:40:
         91:4d:56:f3:c5:8c:da:02:42:aa:86:8c:b8:74:4f:cf:c2:f6:
         ee:56:b5:79:d4:fd:21:f0:a2:4c:7b:b7:4a:e5:70:e7:4c:34:
         35:10:d5:5a:ed:1c:05:2e:8f:a2:5f:92:94:ee:32:71:e4:6a:
         2c:59:d2:f8:a1:83:4d:1d:4c:40:f2:7a:84:97:9a:1c:18:5b:
         00:39:58:1e:77:00:68:9f:82:35:3f:2c:41:22:2c:3f:ff:69:
         47:ed:e1:33:e9:15:32:4d:8d:28:6c:fc:98:10:1e:71:d5:5c:
         2d:c7:f1:77:2a:87:10:74:ac:2b:84:87:3a:e3:69:cf:09:45:
         aa:fb:24:97:23:72:98:60:8f:cb:f9:00:b5:6b:00:19:0f:90:
         80:29:a2:2a:06:57:96:9f:ad:93:ce:34:22:08:f7:17:15:d2:
         1f:1e:e6:ab:96:42:5b:a6:d4:97:8d:ac:ee:19:90:bb:8d:12:
         41:b9:2b:86:42:7c:8c:eb:ab:fc:c6:f0:35:b9:e9:20:3f:3d:
         08:3c:9e:18:62:ad:ad:59:23:44:bf:ad:55:ce:90:fb:6c:86:
         79:b3:75:b9:1c:64:df:56:0e:6d:7d:6e:7a:60:d9:bd:00:b9:
         6e:d8:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:11:58 2026 by rpki-client