Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
File:                     UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft (raw, json)
Hash identifier:          YZd//Rrh0eBFvjF3lfy8BljnSAHJD7lRvjG+OYGb8EU=
Subject key identifier:   11:DE:A0:5C:7B:AA:04:86:33:D3:EA:5B:9A:85:B4:F8:AB:9C:35:4F
Authority key identifier: 50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
Certificate issuer:       /CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Certificate serial:       019FAB638F46059192D253D953976316272A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
Manifest number:          0920
Signing time:             Wed 29 Jul 2026 01:00:56 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:56 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:56 +0000
Files and hashes:         1: NRjE2ub-qyO1bTuX03Zvfc6I9B4.roa (hash: T1iZTA7aq3lUr9C6VWAbrTX5NRDe5+H29lpTIjZMGkc=)
                          2: UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl (hash: RueL7fsT2R3lqhdYtTZg7nM+1SfPHcdyBEU9oRua2OI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:8f:46:05:91:92:d2:53:d9:53:97:63:16:27:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5053c7da9c8fffea5ced97a7990200d4beee4177
        Validity
            Not Before: Jul 29 01:00:56 2026 GMT
            Not After : Jul 30 01:00:56 2026 GMT
        Subject: CN=11dea05c7baa048633d3ea5b9a85b4f8ab9c354f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:bf:3c:8c:5d:1f:bd:46:b0:b5:e1:b1:df:
                    f2:09:69:3a:75:35:33:a3:51:6d:bd:e1:77:75:88:
                    b2:d2:95:e7:3a:0b:ac:e4:c2:bd:0c:7b:20:8a:8b:
                    52:a1:29:bf:43:f5:2a:98:ee:80:b7:a4:80:64:8d:
                    55:e0:cb:55:1c:d1:55:88:9a:87:9c:cb:45:43:ce:
                    5a:9e:9c:10:11:fc:8f:fa:6a:8a:1a:05:6e:38:57:
                    5e:c3:f7:53:65:66:81:99:5c:c0:5a:34:30:09:9c:
                    db:39:7b:d1:93:09:21:35:67:dc:42:29:f2:b6:cd:
                    21:67:e5:21:40:61:6e:b5:4f:8f:66:8d:de:c7:31:
                    39:75:f7:d1:e9:b8:1c:9b:ab:a5:0f:c9:7e:5c:5c:
                    0e:9d:8a:b0:19:a1:cc:6a:b7:03:15:56:d4:5e:6e:
                    77:2d:d6:b4:4e:93:e2:a7:a8:a5:e1:ab:f7:a1:6b:
                    ed:88:19:95:3a:0f:a4:cc:ae:c0:db:aa:03:be:2e:
                    f5:5e:27:1a:b9:fd:e3:c1:d9:5f:ce:7f:58:1a:12:
                    e4:b3:a3:49:d3:5e:30:d5:d6:37:45:8e:04:4c:23:
                    95:2f:be:b3:af:cd:52:52:73:79:da:ae:08:16:b0:
                    f1:d3:4e:24:8e:b2:d6:82:8e:4d:d0:a3:e1:4c:96:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:A0:5C:7B:AA:04:86:33:D3:EA:5B:9A:85:B4:F8:AB:9C:35:4F
            X509v3 Authority Key Identifier:
                keyid:50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:dc:0a:81:59:f8:ba:70:d1:22:3e:b7:60:11:54:3e:06:
         8b:a9:69:ec:eb:ce:84:43:db:f5:38:1e:7d:06:b7:cd:60:b2:
         ae:c4:f8:0b:19:c0:d7:e1:2b:a4:f1:6f:c7:b7:11:71:67:44:
         10:9a:e7:cd:e5:78:e6:fd:9f:60:aa:66:96:7e:28:1a:b8:65:
         83:ee:0f:06:58:2f:31:c3:49:3a:cb:03:0d:bf:11:58:95:61:
         62:72:cd:e5:66:23:be:df:a8:58:76:8d:08:fc:4c:97:5e:b6:
         41:31:21:b3:88:f2:8e:37:8d:ca:df:06:a5:d7:d1:4e:cf:bd:
         26:b3:ba:71:8a:68:e3:e4:f0:52:d2:64:e7:b8:4a:88:70:da:
         84:85:47:b9:c6:93:db:59:39:d2:90:f7:f4:03:2b:44:71:10:
         fb:c1:43:11:9f:75:8a:82:18:82:e2:77:8f:7a:55:86:d6:b5:
         82:4b:de:c4:9d:0d:4d:e3:51:20:a4:ce:ef:77:35:29:4a:8f:
         ae:34:31:0c:eb:db:60:98:7f:c7:c8:f9:4c:db:ec:3c:bf:04:
         73:8d:1d:eb:4e:39:30:65:31:8a:c2:4b:56:4a:62:75:6f:dd:
         9b:1f:5a:9a:7b:12:4a:ae:14:90:4e:7e:59:f0:4b:86:c0:9c:
         bd:4b:3d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:47 2026 by rpki-client