Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
File:                     UOFyIqIvyVedfQldXUP42w7OVyk.mft (raw, json)
Hash identifier:          4uTGqDmgcTC0FBqZVarWsBfw8AJwhJq19UhsMrrTa4U=
Subject key identifier:   45:0F:CD:63:39:D1:86:38:8A:55:0F:F2:5F:56:75:A5:D6:C3:28:38
Authority key identifier: 50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
Certificate issuer:       /CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Certificate serial:       019FACE4338179955E481AC9B5BEFD80F7A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
Manifest number:          C3
Signing time:             Wed 29 Jul 2026 08:01:04 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:04 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:04 +0000
Files and hashes:         1: UOFyIqIvyVedfQldXUP42w7OVyk.crl (hash: 7kahREYfJWw13iWI7LNJE6kibeHcqeTHLJtSWmn04P0=)
                          2: bXnYhv42SK3J_ZuBABFK8IDz1yo.roa (hash: //woNvHZB41M+uDAGPVK2inhLGWjh8SUvLT/ycnfsRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:33:81:79:95:5e:48:1a:c9:b5:be:fd:80:f7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
        Validity
            Not Before: Jul 29 08:01:04 2026 GMT
            Not After : Jul 30 08:01:04 2026 GMT
        Subject: CN=450fcd6339d186388a550ff25f5675a5d6c32838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:11:3a:ab:eb:56:a7:37:67:d6:22:5f:eb:
                    f3:9f:ef:0c:b2:39:aa:f1:5e:c1:d0:6d:95:94:00:
                    13:4f:f5:c4:1d:aa:24:4b:50:9d:18:4f:a9:ce:96:
                    97:7e:1b:bb:40:94:ef:ca:e9:a1:8f:8c:e9:78:9a:
                    ce:bb:09:a7:93:8c:cd:5f:66:c5:5c:11:96:7a:c5:
                    bb:cd:8c:1c:3f:29:55:dd:af:d7:fa:d4:12:9f:e3:
                    6f:29:2a:98:8e:78:f7:ba:ad:94:a5:c3:ad:a7:05:
                    71:0c:5b:1e:d7:26:0e:aa:ee:b8:71:3a:42:ff:6f:
                    a9:3c:2e:e7:94:e1:f1:8c:d2:6d:3d:3d:4e:f9:94:
                    26:20:7f:ea:c2:41:b2:05:84:e7:b4:e0:be:a4:f4:
                    00:d8:61:d0:6a:bd:f9:56:bd:f7:7f:d8:c5:23:f9:
                    a1:37:4f:e8:6a:58:61:db:b5:60:e8:3b:6a:10:ff:
                    fc:21:2e:4d:a8:e1:1a:f5:8f:5b:ba:31:01:56:df:
                    a3:c2:5d:73:2e:e6:47:31:be:5c:83:67:6e:f3:89:
                    76:44:f8:4b:9b:f5:cb:58:47:43:25:ce:eb:e2:71:
                    9d:db:57:e7:d0:22:92:f6:ee:71:8e:aa:c3:7e:bc:
                    66:23:ce:f6:0f:c8:d6:3f:e9:7d:54:a6:37:10:45:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0F:CD:63:39:D1:86:38:8A:55:0F:F2:5F:56:75:A5:D6:C3:28:38
            X509v3 Authority Key Identifier:
                keyid:50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:38:46:92:8a:52:18:18:06:c9:26:45:ee:ba:8e:fe:b2:
         43:c6:70:83:74:74:da:a6:7e:9a:00:36:b6:0e:ac:36:5a:ae:
         f6:d6:6f:e6:d4:2c:88:f3:95:81:b0:a2:96:b0:1c:86:21:4a:
         91:65:09:b7:f4:8c:d4:b3:cb:30:f6:7f:d8:fd:e8:63:c7:0f:
         49:79:d0:78:f8:91:58:f0:cc:0e:7b:79:af:6e:9f:c8:cd:56:
         97:fa:e3:32:4b:86:0d:23:07:2e:d9:ac:60:c1:e0:cf:9f:ed:
         1d:40:99:53:b3:78:10:11:17:2f:11:41:ed:e7:0e:62:cd:94:
         a9:e2:d2:b1:b8:a8:e0:34:b4:db:aa:72:f1:32:44:3e:82:87:
         01:1d:48:56:80:45:50:2d:82:8d:40:ea:d6:2e:18:ac:b8:cc:
         a8:02:ba:47:0d:f7:a8:fc:c3:de:81:79:ee:73:40:e6:20:e3:
         fa:75:c7:cf:23:0d:ae:44:12:54:08:b5:66:c0:0b:4a:0d:72:
         f0:95:65:78:91:d2:a4:25:0b:28:a7:15:81:86:62:49:d3:6a:
         dd:dd:ce:25:e4:86:10:41:86:6c:f6:cd:f9:11:b0:50:33:24:
         58:dd:d6:c0:97:25:df:15:4d:30:7f:45:b8:f6:79:7b:aa:d8:
         b2:5d:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:10:34 2026 by rpki-client