Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
File:                     UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json)
Hash identifier:          gamhLrskG4T6lL4Xc1stfc1pRtcVZvGDgT0H2Uqmp/M=
Subject key identifier:   E8:25:49:57:92:02:2A:41:63:68:85:D3:05:C7:BA:C6:A1:05:F0:4B
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Certificate issuer:       /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial:       019FA8D04B458584CB32D5FC917913A0AC40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
Manifest number:          1A11
Signing time:             Tue 28 Jul 2026 13:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:50 +0000
Files and hashes:         1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=)
                          2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=)
                          3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=)
                          4: ItLnYEbliO9uy4pN2f9Nx-cbnMU.roa (hash: SC8dz/gz97zrc/Tqdl9uM99+iCk/s/X41bIC+YpTYTI=)
                          5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=)
                          6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=)
                          7: NFAuHU7LF_HyqchSKTj8EafONIY.roa (hash: 6n1a8gPcx7eZe6weWqKlrMFgR6RhTx10TMdXBJFAWF4=)
                          8: U2EVUUWlWvbUAILqaxAgK8pY0KE.roa (hash: P61yHP4ZBPMnRJW1hcXnzx/7WhRn7HOpJpj+yy4Yx4A=)
                          9: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: TM0E0Qw3rTrHB7ec93St9P0bkWm8Koif73KKKO01J4s=)
                          10: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=)
                          11: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=)
                          12: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:4b:45:85:84:cb:32:d5:fc:91:79:13:a0:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
        Validity
            Not Before: Jul 28 13:00:50 2026 GMT
            Not After : Jul 29 13:00:50 2026 GMT
        Subject: CN=e825495792022a41636885d305c7bac6a105f04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:db:51:7f:ea:c3:7d:67:dc:c0:5b:a8:29:
                    2b:0c:0e:16:09:4d:73:aa:bd:a6:f2:22:1f:f9:e0:
                    63:d2:7e:e8:5e:c1:91:bc:f0:b9:05:64:b4:b2:15:
                    ef:fe:f0:31:1f:4f:e2:ea:87:fc:da:f3:74:29:5e:
                    6b:88:c7:3a:f8:9c:64:0b:5a:ee:d3:45:44:d8:b9:
                    f3:24:b6:36:43:7c:a5:dd:59:7d:7e:d5:7e:14:dd:
                    0e:d0:90:d1:32:8f:66:4a:9d:ed:7c:30:7e:56:f6:
                    6c:3a:19:63:4d:2d:46:88:9f:ac:cb:29:91:ed:98:
                    0e:7b:5c:dc:8e:24:b1:36:b9:dc:06:ca:bb:f2:d9:
                    47:fe:17:58:db:72:6a:e7:c1:68:17:12:2c:7e:00:
                    5c:0e:1d:12:64:e8:b5:a0:f2:f7:ce:fb:de:ec:17:
                    d0:b9:ef:cf:18:54:70:50:ee:b9:8f:09:6c:3d:98:
                    71:b7:b5:99:45:ea:6a:51:f0:80:aa:f4:8c:37:54:
                    08:e1:af:ae:df:c4:94:de:f6:ee:ed:42:5b:dd:bc:
                    5a:d5:74:98:62:3c:3d:ed:91:34:50:d9:03:f4:d5:
                    61:e7:6a:88:97:81:42:bb:2f:79:ae:95:7e:e4:b9:
                    86:0f:33:5f:f6:7f:00:ea:9a:74:78:7d:fb:55:ad:
                    4c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:25:49:57:92:02:2A:41:63:68:85:D3:05:C7:BA:C6:A1:05:F0:4B
            X509v3 Authority Key Identifier:
                keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:ac:5e:f1:28:d4:ee:56:6b:99:9f:98:73:9b:de:f6:3d:
         d6:bd:2d:34:a8:0c:30:61:a4:29:92:23:15:40:3e:f0:75:f9:
         2f:88:e6:39:09:d3:4c:d1:e5:81:a1:e3:8d:9e:f2:52:5f:df:
         90:e8:a4:81:3c:54:3d:bd:28:d7:fe:84:7a:c1:ce:f4:0f:b6:
         89:86:6e:b4:06:c1:74:6f:c3:df:85:15:04:59:e9:b3:57:f8:
         e6:4c:17:be:45:72:27:54:d7:28:18:e5:2c:21:90:13:19:c8:
         73:87:d3:50:3e:61:22:9f:cc:9b:e7:56:78:4e:1d:db:ee:d0:
         ca:e0:eb:16:9f:06:d9:43:f8:38:a1:3a:80:16:7e:24:82:8f:
         56:7e:4c:e7:df:3a:5e:83:4b:e0:2a:b6:40:f5:bd:47:3e:a8:
         d9:cc:20:6c:3b:49:92:ee:22:68:83:ce:26:19:87:17:0c:aa:
         81:ae:a2:cb:de:64:af:14:20:26:b2:e5:30:73:f4:6f:89:5d:
         b4:aa:50:df:7e:a3:16:52:52:e5:da:60:b4:1d:14:48:25:76:
         9d:aa:34:1d:d5:e8:8e:c1:25:23:10:ed:f2:71:df:48:25:92:
         47:87:e9:e2:bc:59:35:5a:8e:b7:1e:0b:64:fe:f9:e4:cf:38:
         9a:dd:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:24 2026 by rpki-client