Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File:                     UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier:          2WIVYGI7E53+qPw5GLbR8yTOZN3cRwaQJ5r72Up/hKY=
Subject key identifier:   C9:8E:43:96:3E:ED:D2:0F:6C:28:98:03:69:80:9B:90:8D:97:FC:5D
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer:       /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial:       019FAC75B823AB00A5C6CD48CD9626697975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number:          1253
Signing time:             Wed 29 Jul 2026 06:00:23 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:23 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:23 +0000
Files and hashes:         1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: WVsbIf9jyuOSQdzF8TPcT2Ygdq8qtCaKKiliGABT8Vw=)
                          2: VrllH5lvxOXiEVVSba8nkT-lWmQ.roa (hash: MptkH7rNuQFXgV7cW16D7ZIxR771HBqFh8JOnOVzIAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:b8:23:ab:00:a5:c6:cd:48:cd:96:26:69:79:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
        Validity
            Not Before: Jul 29 06:00:23 2026 GMT
            Not After : Jul 30 06:00:23 2026 GMT
        Subject: CN=c98e43963eedd20f6c28980369809b908d97fc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b0:80:a3:e1:47:af:69:52:4d:a6:31:65:61:
                    f6:4f:a9:d2:de:66:f8:44:62:39:b2:36:bc:9f:db:
                    96:3b:03:07:7f:f0:f0:f1:2d:a8:70:c6:f4:76:6d:
                    17:14:59:c3:6e:2c:12:e1:a9:5d:12:0a:5e:33:f7:
                    a8:e2:bc:d5:2a:17:da:03:86:83:ac:50:6f:4f:01:
                    9b:75:fd:bd:20:a4:9e:d6:83:4b:2d:d2:f6:76:2c:
                    11:ed:51:43:54:ae:7d:10:5b:8b:1f:0f:f1:95:1b:
                    41:bc:85:99:59:6e:87:e1:51:80:1f:ce:72:38:dd:
                    7b:de:81:c4:40:74:a4:c5:1d:15:ca:08:b5:7d:3d:
                    0a:16:18:00:4b:f5:d6:d6:74:c6:f4:f8:36:ea:f3:
                    40:33:6e:33:dc:b6:3d:1e:9b:cd:9a:61:8b:b9:a7:
                    d3:ac:00:65:16:70:f1:08:43:05:49:b1:e3:03:1e:
                    b9:d7:5d:3a:b6:e1:08:d8:c0:63:19:8a:16:cf:99:
                    7f:7c:0d:4d:6c:ac:1e:55:42:c7:2d:56:2b:a8:94:
                    a2:5b:96:51:53:ae:12:e8:1a:88:5c:a6:1c:2d:cc:
                    39:1a:9d:8a:ab:a1:59:32:e7:5b:0c:dd:a2:8c:ba:
                    1a:ea:35:61:4b:0a:80:e1:8c:59:72:13:1f:09:65:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8E:43:96:3E:ED:D2:0F:6C:28:98:03:69:80:9B:90:8D:97:FC:5D
            X509v3 Authority Key Identifier:
                keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6f:c1:f0:67:ef:4e:b3:0d:ef:76:5d:5a:58:ef:3b:9d:a3:
         ec:fc:76:57:b8:d2:d0:e9:d0:ae:85:c6:ad:34:68:f2:80:30:
         e2:47:34:d6:ad:ce:fa:42:88:8c:a6:35:9d:f7:3d:f5:b8:e2:
         50:2c:42:2a:c3:b0:49:91:eb:c2:9f:17:5f:e3:9e:fc:00:c4:
         85:c4:7c:db:cf:be:a5:32:80:02:57:db:c8:3e:94:8d:34:9a:
         55:1b:3d:6d:5e:aa:7c:1d:45:ce:59:91:3d:02:1c:b9:cd:28:
         c5:82:d5:3a:ab:62:74:31:84:aa:a9:d1:0b:c1:78:e5:5f:12:
         a9:45:a5:7e:f0:33:f2:81:4d:e5:f5:4a:b6:dd:ae:7a:b8:9e:
         59:ba:26:47:1a:01:de:f8:89:71:5c:ff:db:04:34:d0:13:e0:
         ac:f1:18:50:dc:ec:b2:c5:00:3c:83:73:5e:c2:37:cd:8a:b4:
         53:30:ae:0e:6a:2c:11:40:d5:c0:53:a9:42:bc:9e:01:2e:07:
         1f:d0:d1:9f:90:f3:84:be:02:3b:e2:c2:96:68:64:40:4c:3f:
         95:9f:00:62:b4:3a:50:9b:60:9d:b7:f8:09:16:ca:aa:eb:e9:
         b5:6b:63:6a:90:83:90:c8:4b:ad:26:55:09:44:68:9f:88:dd:
         7e:41:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:13:07 2026 by rpki-client