Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          MK/ZLt6xk/fuKMLwUjqBOjpJ6tAhgYJ1wWC8n0Y35Oo=
Subject key identifier:   CE:94:25:00:89:2B:58:75:8E:9C:5A:A8:41:7B:C6:87:97:C9:CD:9D
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       019FACE38DADBBFB9E604FA80E679ED04D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          19E2
Signing time:             Wed 29 Jul 2026 08:00:21 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:21 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:21 +0000
Files and hashes:         1: 0d6SiGZ_3HskVJZrwW4LAUnPhVk.roa (hash: sH5j+6BmvxKro4kCtZa6p73msltGzoMgNQq57Mh0jXE=)
                          2: GBJMnjMbFvL5E-lL9i3lBFi6nWY.roa (hash: SL+iSObRv/yIgCUc1iePoCbQgwvJ0km8l952y/nYPkY=)
                          3: IY7fhcpZn8V1nFJzcjkAB2G_wy8.roa (hash: kypNUV6hOKnyhwHaYDOZf/jJOmWZK2acEUl1kQxKdoM=)
                          4: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: XiO1MLfO8kXEge1vC58nd0TI+6XN3i4zAnGi/D/rGh8=)
                          5: ZDSwaO2zu2qpiNoQdfHO9f__qXE.roa (hash: /yuwN8mjkUUOdBbxmmKWCbuEc9CKVHYeB+reIdnpnsM=)
                          6: qfnbY9JngbTP144k13tCg-IRl3w.roa (hash: 9MKZ2wZQrvJYgyQxGjaYnWmRu2eM+70F1EApasiltnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:8d:ad:bb:fb:9e:60:4f:a8:0e:67:9e:d0:4d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Jul 29 08:00:21 2026 GMT
            Not After : Jul 30 08:00:21 2026 GMT
        Subject: CN=ce942500892b58758e9c5aa8417bc68797c9cd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:69:38:6d:90:a1:af:24:71:16:0c:89:69:
                    f0:d4:5a:a0:e2:c5:1f:7a:0c:22:1d:a4:71:56:fb:
                    79:16:1f:c4:7b:24:32:f7:e7:7a:33:31:cc:6c:ef:
                    8a:0e:ed:b7:15:b3:e6:28:99:7f:ea:61:e1:23:c0:
                    9e:3e:a8:68:28:fd:0c:0c:2b:a7:b1:6e:31:00:79:
                    e8:09:cd:69:65:87:46:f4:80:75:8a:c9:a8:63:70:
                    75:a9:23:11:d2:26:27:96:8c:24:4d:27:9a:e3:d1:
                    03:1d:5b:5c:1c:17:a3:4e:d4:71:e0:bb:b8:2e:7c:
                    ce:12:30:97:46:1b:be:45:10:4e:d5:19:ca:a8:bb:
                    5e:a9:03:a1:7c:50:0d:dc:85:d8:3c:4b:8b:8f:0b:
                    5d:0d:2a:35:77:f5:96:be:89:fd:ce:9c:fd:a0:49:
                    54:8f:fa:b1:43:f8:95:d9:4b:3a:fb:6a:36:c4:e8:
                    b0:dc:42:6e:7a:2a:b3:2b:bf:36:79:e7:87:58:20:
                    6f:e4:6e:de:0c:ff:e9:5d:c6:cb:1a:4e:cc:f2:83:
                    59:e9:79:5c:9a:99:ee:f9:79:3d:f9:83:57:9e:1e:
                    d9:45:a3:46:bd:05:ee:15:40:00:2a:b2:c5:0b:86:
                    05:5c:2c:d3:3c:00:0b:c5:7f:02:a4:9d:e0:09:28:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:94:25:00:89:2B:58:75:8E:9C:5A:A8:41:7B:C6:87:97:C9:CD:9D
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:68:ed:24:f2:52:4d:2f:43:02:7e:10:b7:5b:07:d6:25:b0:
         92:c8:2f:63:ba:b2:4c:3b:16:ce:64:b2:f6:58:6a:9c:8d:7b:
         3f:91:04:d6:a2:c6:84:52:82:a2:b4:8d:bf:5d:ad:12:4c:e3:
         d7:aa:97:d6:4e:dc:33:c4:92:2c:40:08:5e:bc:0a:a9:b8:d0:
         bb:4d:a7:c3:8f:bb:73:e2:f8:59:b7:aa:35:e7:9f:f8:c1:2e:
         6d:ac:e5:37:cc:04:5d:46:3d:e1:9c:d4:30:42:f4:ae:36:79:
         80:d3:71:7d:5a:b8:69:77:8a:d8:cb:22:8d:e5:cd:ea:37:d0:
         55:51:b6:c2:96:c5:e5:62:ac:58:d2:b9:bf:74:de:82:3f:9a:
         a9:be:16:11:57:9c:07:c5:ad:be:d4:a5:79:22:f2:97:a5:d2:
         37:96:d5:c2:e0:77:af:d7:34:31:76:69:3a:98:a8:ac:51:53:
         18:aa:b4:5e:cc:47:03:70:9a:d2:eb:e7:e9:69:4c:c1:ca:df:
         6d:1f:4d:d6:70:12:8f:6a:21:02:75:b4:9c:a2:24:1c:c6:40:
         a2:97:d7:2c:96:01:88:3f:42:b2:8c:0c:e6:af:ce:07:12:3b:
         5d:a6:09:f6:da:f4:9c:b8:ce:0e:06:68:78:37:2c:e4:c8:90:
         f7:97:e1:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s442tu/ueYE+oDmee0E1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi
MjczYTEwHhcNMjYwNzI5MDgwMDIxWhcNMjYwNzMwMDgwMDIxWjAzMTEwLwYDVQQD
EyhjZTk0MjUwMDg5MmI1ODc1OGU5YzVhYTg0MTdiYzY4Nzk3YzljZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxydpOG2Qoa8kcRYMiWnw1Fqg4sUf
egwiHaRxVvt5Fh/EeyQy9+d6MzHMbO+KDu23FbPmKJl/6mHhI8CePqhoKP0MDCun
sW4xAHnoCc1pZYdG9IB1ismoY3B1qSMR0iYnlowkTSea49EDHVtcHBejTtRx4Lu4
LnzOEjCXRhu+RRBO1RnKqLteqQOhfFAN3IXYPEuLjwtdDSo1d/WWvon9zpz9oElU
j/qxQ/iV2Us6+2o2xOiw3EJueiqzK782eeeHWCBv5G7eDP/pXcbLGk7M8oNZ6Xlc
mpnu+Xk9+YNXnh7ZRaNGvQXuFUAAKrLFC4YFXCzTPAALxX8CpJ3gCShFiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6UJQCJK1h1jpxaqEF7xoeXyc2dMB8GA1UdIwQY
MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt
MTNlZDYzM2Y5MjJhLzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh
LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmjtJPJS
TS9DAn4Qt1sH1iWwksgvY7qyTDsWzmSy9lhqnI17P5EE1qLGhFKCorSNv12tEkzj
16qX1k7cM8SSLEAIXrwKqbjQu02nw4+7c+L4WbeqNeef+MEubazlN8wEXUY94ZzU
MEL0rjZ5gNNxfVq4aXeK2MsijeXN6jfQVVG2wpbF5WKsWNK5v3Tegj+aqb4WEVec
B8WtvtSleSLyl6XSN5bVwuB3r9c0MXZpOpiorFFTGKq0XsxHA3Ca0uvn6WlMwcrf
bR9N1nASj2ohAnW0nKIkHMZAopfXLJYBiD9CsowM5q/OBxI7XaYJ9tr0nLjODgZo
eDcs5MiQ95fhCA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:22 2026 by rpki-client