Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
File:                     UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft (raw, json)
Hash identifier:          /7AlpoJ4Fty2ycZvs4WlysnvSylpIrUyZUJEcUH9cOA=
Subject key identifier:   C2:43:AE:39:E7:E4:FD:C0:52:C1:9B:F4:FF:C9:A5:F5:C6:8E:65:00
Authority key identifier: 50:10:9C:EA:34:8A:09:D3:90:17:0B:2B:50:FD:4F:2F:4F:A0:C0:71
Certificate issuer:       /CN=50109cea348a09d390170b2b50fd4f2f4fa0c071
Certificate serial:       019FAC76CF7F3E0D48EEC8E9FCE879973DE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
Manifest number:          D0
Signing time:             Wed 29 Jul 2026 06:01:35 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:35 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:35 +0000
Files and hashes:         1: UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl (hash: 02n2eyYKjGZzoEeLAyVMrmRz2EoQCBvJaX5TN1vB5Q4=)
                          2: VlDvPryAuk2PGBFGwuY-gCe_F5A.roa (hash: TJR1bUgs/pW0JpJ4B506N0MthyLFTUA8QuoRDNEKpko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:cf:7f:3e:0d:48:ee:c8:e9:fc:e8:79:97:3d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50109cea348a09d390170b2b50fd4f2f4fa0c071
        Validity
            Not Before: Jul 29 06:01:35 2026 GMT
            Not After : Jul 30 06:01:35 2026 GMT
        Subject: CN=c243ae39e7e4fdc052c19bf4ffc9a5f5c68e6500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:aa:ec:54:06:91:e6:c4:da:28:c4:1d:31:
                    93:11:81:a2:c0:97:fa:b2:35:5a:07:ec:66:a8:be:
                    82:17:5d:f9:66:79:15:2c:b1:0b:4c:bf:13:e0:f8:
                    6c:69:e0:e5:2f:57:10:f5:66:ef:9f:8a:f8:db:18:
                    54:48:aa:6c:d6:c7:0b:3f:d5:85:48:56:a5:6f:99:
                    fb:30:03:4d:e4:cd:95:1b:22:bb:0a:4e:15:da:aa:
                    dc:42:c4:21:ec:0b:98:0d:b1:9c:29:b6:da:b7:b1:
                    fd:a0:41:04:0d:34:e7:4e:f6:26:ba:7e:61:04:62:
                    ea:c7:23:8f:36:5f:2d:49:cb:22:83:c2:b6:69:b9:
                    bf:0f:cf:95:bc:0a:96:e5:4a:3a:89:4a:ba:46:05:
                    12:15:44:cf:bc:d8:65:71:72:2f:91:1b:79:5a:ab:
                    3f:38:80:17:53:cd:c2:c4:54:99:ac:40:34:ef:48:
                    12:ee:52:4d:42:7d:00:2d:e1:95:96:d7:ec:ef:66:
                    03:4a:a7:24:f3:1a:eb:6d:4c:fc:15:8c:e0:0b:77:
                    4d:fc:2e:30:cd:f0:01:d7:5e:f4:7c:af:0c:a1:a5:
                    60:12:71:02:e4:b5:ce:50:cc:f6:e9:cb:d4:89:2e:
                    c2:72:cf:3e:14:7c:92:2b:71:c7:55:12:88:22:80:
                    f1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:43:AE:39:E7:E4:FD:C0:52:C1:9B:F4:FF:C9:A5:F5:C6:8E:65:00
            X509v3 Authority Key Identifier:
                keyid:50:10:9C:EA:34:8A:09:D3:90:17:0B:2B:50:FD:4F:2F:4F:A0:C0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:91:d1:2c:ab:29:09:b1:de:1a:a2:99:41:39:89:ea:94:a6:
         55:02:26:dc:52:fc:0e:1d:db:87:6d:96:3b:2a:da:b1:b3:0f:
         7e:7d:f9:c2:08:a3:19:eb:be:32:c9:38:05:6f:41:9f:83:c0:
         dc:e7:9c:74:52:ca:4d:e2:42:6e:52:9e:3a:59:27:0f:04:87:
         9f:f9:34:06:d9:c4:51:14:49:9f:1a:29:fb:1b:27:1e:90:76:
         d1:a5:47:7b:45:a9:d1:6a:23:dd:8b:3b:26:83:5c:dc:bf:ff:
         f7:9b:6c:a4:03:8c:2f:50:0e:f4:1c:d5:e7:6d:c3:16:87:ab:
         9d:50:98:27:b4:37:4b:a1:49:f6:d4:5d:11:02:b3:e1:79:10:
         ae:df:05:a5:6e:5b:39:c2:ea:da:ba:44:b5:9a:cb:b1:f6:9d:
         8d:a8:a5:a8:f8:74:fb:92:a8:9e:70:f2:fb:d5:59:6e:9e:be:
         87:3d:01:c5:f6:f1:39:8c:09:03:a9:b0:15:4c:a4:50:22:25:
         e1:f1:07:09:32:f0:c2:de:38:3a:75:82:6c:5a:70:2d:ad:b1:
         8c:83:e3:e3:ff:5c:0a:93:c2:ea:c8:40:a8:42:78:82:ca:25:
         92:71:81:ce:ec:b7:7e:6a:21:16:d0:bd:ae:d2:5c:e5:e6:fa:
         91:6e:c2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:00 2026 by rpki-client