Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
File:                     uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json)
Hash identifier:          aKzBVVarpxMovq5ZxM9ZienqEKpJrzd5fLcnQdpnXkc=
Subject key identifier:   D3:07:C3:75:91:AE:AB:BC:24:74:FA:B0:3E:12:5F:18:0A:54:26:A1
Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
Certificate issuer:       /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Certificate serial:       019FAB631E4DAE1B5DF07FA05BDFA8A23D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
Manifest number:          0D08
Signing time:             Wed 29 Jul 2026 01:00:27 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:27 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:27 +0000
Files and hashes:         1: KP9ZK8Mm0n7oCIGFwbCMB_IJtD4.roa (hash: 9E7/dOsgEeSFLc8nXYfohFpko6PoMkA7jZYSR5wWOOU=)
                          2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: mITcG0PdLrSJArScmef+5k9Pv99pbDwN6Fl38B6ssAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:1e:4d:ae:1b:5d:f0:7f:a0:5b:df:a8:a2:3d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
        Validity
            Not Before: Jul 29 01:00:27 2026 GMT
            Not After : Jul 30 01:00:27 2026 GMT
        Subject: CN=d307c37591aeabbc2474fab03e125f180a5426a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:d8:b4:5c:9e:87:6b:ea:19:e3:6d:1c:06:
                    c8:40:99:25:d2:20:4e:b5:5a:66:ea:57:19:01:d9:
                    09:18:ec:ac:41:fd:1f:6a:22:b2:84:28:97:9c:db:
                    47:13:53:fe:c6:d7:72:ff:7c:55:55:7c:05:de:9d:
                    ff:7a:6b:8d:80:2a:89:f4:94:e1:9e:14:f1:90:37:
                    cb:93:93:b1:60:52:66:23:55:bc:9d:c1:84:d4:24:
                    6d:90:27:a6:57:7b:fc:ab:04:0c:94:b5:95:44:c0:
                    3a:0e:73:09:51:02:06:ba:73:2c:a1:7b:53:42:ce:
                    cc:7e:0c:d6:24:22:61:c1:f5:6f:38:b5:aa:fe:6c:
                    a5:64:6e:8e:9a:06:ac:f3:61:8d:5b:c9:ef:c1:4a:
                    4e:c5:42:7c:e7:fe:33:6d:f4:43:30:f8:8d:c8:0c:
                    c1:38:18:5b:92:22:49:30:11:92:fe:6f:3b:e7:18:
                    d3:63:65:e2:68:6c:8a:51:4f:60:25:57:32:da:6e:
                    73:7a:ff:50:12:06:7b:31:1b:88:70:65:7b:4a:7e:
                    46:a5:f1:d6:f1:82:d9:d9:43:3d:fc:a1:c2:3c:51:
                    8a:5e:37:c8:68:44:bd:fe:f9:3c:76:25:8e:52:3c:
                    41:24:34:3a:02:86:69:cd:74:0b:e6:93:31:12:57:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:07:C3:75:91:AE:AB:BC:24:74:FA:B0:3E:12:5F:18:0A:54:26:A1
            X509v3 Authority Key Identifier:
                keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8f:d6:a7:5a:8c:83:fa:19:4c:58:fa:b6:a1:d6:72:d3:72:
         7c:ec:05:ab:17:fb:fb:00:ce:0c:4c:ab:cd:a3:5f:72:b4:55:
         5a:54:b0:6d:5e:99:7e:f6:06:f3:20:33:f8:52:b3:ca:b0:11:
         97:be:8c:bf:cc:5a:f6:31:27:7e:89:5b:b4:c5:c6:e3:b3:c9:
         0e:4a:95:58:31:2e:5e:18:c8:ac:7b:fe:a6:50:6a:06:0e:22:
         c4:ef:55:7f:f6:09:f9:b6:90:81:e8:e8:1a:a3:42:c3:ee:cc:
         b4:01:9a:1c:b6:9b:ff:b6:2f:31:15:06:c7:1c:93:9e:81:03:
         be:9d:f8:a2:b4:07:4c:4b:97:e1:37:ac:8e:8f:ac:cf:66:46:
         85:73:27:6a:cd:1f:da:6c:0d:de:8d:76:06:27:60:08:4c:ee:
         65:c2:14:e4:9f:aa:a2:ce:03:89:70:ec:df:42:52:29:a4:6d:
         28:0c:cc:94:65:76:aa:fe:ff:e6:e3:93:1f:2c:c3:4f:81:46:
         fb:69:0e:4a:2c:18:8c:11:05:da:f8:fb:b4:86:e1:6d:4c:b6:
         0d:46:e7:2a:0e:a5:09:8f:47:bd:7e:19:fe:e7:fc:89:cc:b7:
         aa:6f:73:7a:2d:d9:01:32:c5:67:0a:c1:20:a6:24:13:14:e9:
         3d:f6:70:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:48:14 2026 by rpki-client