Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File:                     UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier:          splsvDcmgk81HrUv0XCe5Y2xkDD7Gtepn4lcr/fLKK4=
Subject key identifier:   27:0E:F4:D7:94:EA:BD:1B:63:2A:9B:8F:55:5D:1F:BC:9C:F0:C5:23
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       019FAA1A47489E94C4D4E0A87A75E097E5BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number:          0955
Signing time:             Tue 28 Jul 2026 19:01:16 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:16 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:16 +0000
Files and hashes:         1: 1Z9CK4rPbzAMA97TMp2bKUfntRw.roa (hash: LpR7I8xQuFg1r5Rgn2WWeCosLxa5m8Ntho2zm0Of2+c=)
                          2: BLM9s6E3uNgLbo5hUAJYzpxbAgk.roa (hash: 5Ht0651estCzoETFmaG2dTMoJGv16B5IZmwbZaHDuac=)
                          3: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: 9b0siNBJK7dTWUL7T5kMCp13R53/+/US6cNAvI/0q5A=)
                          4: aBkGIeHaROiVyf6y4zQUYjIbWLo.roa (hash: QrqArFPVF1/qMWn5zOGo4TUbL6WlcsofMlRqGn2AHJw=)
                          5: aq9niQ1ZlLfgZPSmUPOgIOI3M2c.roa (hash: dNTF2xB3WZEo4xS7rRBBdp1UPiHc48uFIsc0/3W0AY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:47:48:9e:94:c4:d4:e0:a8:7a:75:e0:97:e5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Jul 28 19:01:16 2026 GMT
            Not After : Jul 29 19:01:16 2026 GMT
        Subject: CN=270ef4d794eabd1b632a9b8f555d1fbc9cf0c523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:eb:78:22:ea:dd:05:29:c5:89:1e:7c:a1:
                    72:0a:40:ae:bd:f9:73:7a:85:a2:5d:11:12:39:6c:
                    c3:00:f1:e6:f4:fa:2f:b0:ac:6a:47:58:d5:c8:f0:
                    28:2d:e2:88:6b:bf:9a:4b:ea:f0:b3:82:eb:84:b9:
                    98:6e:50:e6:b5:91:50:7a:27:d0:7d:d9:0d:1f:3c:
                    a4:53:a8:81:5f:23:bf:64:16:c7:a7:3d:6f:24:01:
                    47:ea:59:21:5e:96:2c:1a:59:1d:b9:a6:f9:6e:6a:
                    17:78:25:d3:79:8b:f3:ba:b8:0d:f2:fc:e9:8b:62:
                    5a:b6:92:7b:8d:d5:8a:30:70:09:c0:12:7c:f0:c1:
                    55:6b:57:df:03:8c:40:5d:4f:77:4d:3b:31:c0:3a:
                    f2:dc:91:21:6c:95:98:4a:7b:d5:db:be:68:b8:69:
                    5a:60:c1:54:1c:c3:a5:cb:ba:19:8f:e3:51:85:48:
                    2e:cd:a6:e6:46:8e:db:15:4a:f0:a9:f0:e0:35:4c:
                    57:51:d7:a7:40:6e:d4:ce:85:cf:7f:23:24:76:7c:
                    f9:a2:40:35:10:38:50:82:53:64:2e:e6:df:fe:80:
                    0a:43:27:3c:60:5b:a4:85:1a:78:83:0d:03:81:0b:
                    74:28:bf:e7:66:d3:bb:6c:24:9c:17:19:0e:cf:ce:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0E:F4:D7:94:EA:BD:1B:63:2A:9B:8F:55:5D:1F:BC:9C:F0:C5:23
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f1:2c:c6:36:1a:cd:67:96:54:0f:5f:8a:d2:47:d4:7d:74:
         61:8e:87:c4:30:de:bd:e2:f4:8a:54:f2:98:63:a4:25:6d:c5:
         cb:5e:45:d8:28:6b:da:b7:1a:0b:58:b0:c7:70:ee:de:93:81:
         d6:30:a8:4a:02:d4:b0:0c:44:ab:9e:3f:65:15:91:f0:12:34:
         39:5e:04:eb:06:8d:11:c5:f0:53:80:0e:18:7f:cb:c7:ed:d6:
         f7:61:9d:dc:e5:f0:ad:1f:77:ae:e1:f5:27:8b:d8:69:98:7d:
         1b:d6:d9:e2:bc:51:a8:13:21:98:23:5b:9c:bb:9b:13:30:72:
         bb:18:00:32:ca:c8:8f:e7:f3:30:e5:82:06:16:74:ef:3e:09:
         4b:c4:e1:3a:c4:6d:2b:7e:85:dc:81:60:3f:51:89:ae:87:c2:
         32:ac:99:01:2d:70:7f:45:d0:b9:a7:83:0b:81:ba:f4:89:f8:
         a4:e4:2f:0c:0d:44:fc:a4:cd:17:9e:9e:5d:07:49:8f:66:3e:
         09:c0:37:ac:22:49:14:9b:32:b8:9f:f8:f8:c1:d1:87:78:9f:
         d5:aa:9a:13:dc:45:66:bc:09:a4:73:14:37:b6:91:a8:be:7a:
         5c:10:78:f6:f6:ed:11:28:6d:99:28:fa:15:49:dc:95:ea:b8:
         b5:ae:3f:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGkdInpTE1OCoenXgl+W8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZjRiMGIwNDY5ZWIwZDA3MTk5NGNkODIzOGYzNGJlZjAw
YzZmYmUwHhcNMjYwNzI4MTkwMTE2WhcNMjYwNzI5MTkwMTE2WjAzMTEwLwYDVQQD
EygyNzBlZjRkNzk0ZWFiZDFiNjMyYTliOGY1NTVkMWZiYzljZjBjNTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcTreCLq3QUpxYkefKFyCkCuvflz
eoWiXRESOWzDAPHm9PovsKxqR1jVyPAoLeKIa7+aS+rws4LrhLmYblDmtZFQeifQ
fdkNHzykU6iBXyO/ZBbHpz1vJAFH6lkhXpYsGlkduab5bmoXeCXTeYvzurgN8vzp
i2JatpJ7jdWKMHAJwBJ88MFVa1ffA4xAXU93TTsxwDry3JEhbJWYSnvV275ouGla
YMFUHMOly7oZj+NRhUguzabmRo7bFUrwqfDgNUxXUdenQG7UzoXPfyMkdnz5okA1
EDhQglNkLubf/oAKQyc8YFukhRp4gw0DgQt0KL/nZtO7bCScFxkOz84xfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcO9NeU6r0bYyqbj1VdH7yc8MUjMB8GA1UdIwQY
MBaAFFH0sLBGnrDQcZlM2COPNL7wDG++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWZTd3NFYWVzTkJ4bVV6WUk0ODB2dkFNYjc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kM2FiMjgtN2Y0Ny00MWYzLWIyMzEt
Nzg4NDRlMTAxMTMzLzEvVWZTd3NFYWVzTkJ4bVV6WUk0ODB2dkFNYjc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kM2FiMjgtN2Y0Ny00MWYzLWIyMzEtNzg4NDRlMTAxMTMz
LzEvVWZTd3NFYWVzTkJ4bVV6WUk0ODB2dkFNYjc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPEsxjYa
zWeWVA9fitJH1H10YY6HxDDeveL0ilTymGOkJW3Fy15F2Chr2rcaC1iwx3Du3pOB
1jCoSgLUsAxEq54/ZRWR8BI0OV4E6waNEcXwU4AOGH/Lx+3W92Gd3OXwrR93ruH1
J4vYaZh9G9bZ4rxRqBMhmCNbnLubEzByuxgAMsrIj+fzMOWCBhZ07z4JS8ThOsRt
K36F3IFgP1GJrofCMqyZAS1wf0XQuaeDC4G69In4pOQvDA1E/KTNF56eXQdJj2Y+
CcA3rCJJFJsyuJ/4+MHRh3if1aqaE9xFZrwJpHMUN7aRqL56XBB49vbtEShtmSj6
FUncleq4ta4/IA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:05:29 2026 by rpki-client