Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File:                     UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier:          lr9VlYCyljuA0lc8n4BCnH9N28YiL3k1bPAPsSwe40o=
Subject key identifier:   B6:84:9E:A8:81:C6:5C:A3:B6:62:1D:CB:7D:E2:2F:BA:1F:17:C1:F7
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer:       /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial:       019FAB2CA1A76293C5DEA20340310A6D1017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number:          0907
Signing time:             Wed 29 Jul 2026 00:00:56 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:56 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:56 +0000
Files and hashes:         1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
                          2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: 5kEw5AhTq+xHl4Vk78c2wTZx3cAZICJquFN9rBCccgg=)
                          3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:a1:a7:62:93:c5:de:a2:03:40:31:0a:6d:10:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
        Validity
            Not Before: Jul 29 00:00:56 2026 GMT
            Not After : Jul 30 00:00:56 2026 GMT
        Subject: CN=b6849ea881c65ca3b6621dcb7de22fba1f17c1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:d4:aa:23:8b:76:40:33:e5:bb:20:57:9e:
                    c4:d4:e9:69:4c:ae:0b:d0:41:0d:3f:02:cb:99:59:
                    09:00:c1:d5:e4:c0:07:03:93:09:c0:b1:95:43:e8:
                    24:98:9a:e0:7e:a2:e2:29:f0:41:ec:c1:cd:b5:94:
                    0a:c1:15:50:1c:c4:ed:23:ea:c0:0c:bb:63:60:e7:
                    c2:09:f9:96:82:ea:ee:55:b9:ae:37:c2:d8:d4:02:
                    23:a0:66:61:c4:5d:2a:84:3c:0c:b3:84:ed:b5:92:
                    4f:e5:b9:7a:fe:2a:86:0b:f1:a1:5e:12:c3:08:5c:
                    00:7b:d3:a1:d7:61:d0:1e:93:07:96:25:6d:97:97:
                    ef:b9:bc:d0:4d:db:96:df:26:21:2b:0a:51:96:51:
                    85:a7:53:23:c5:5c:36:7f:0a:2e:ef:23:eb:a7:3b:
                    c8:fe:24:eb:b2:d9:2f:e3:a1:62:7b:34:04:f9:9d:
                    ee:76:5d:e1:fb:86:5f:59:10:b9:f9:a6:15:16:ec:
                    9f:d1:4c:5a:d4:9c:37:48:08:90:35:06:92:81:45:
                    33:3a:79:bd:a6:b1:ad:82:ba:18:e9:8a:2e:ee:27:
                    63:bc:8a:31:55:9b:9c:79:e8:c3:be:69:9c:8b:4b:
                    5d:93:b7:78:e5:cb:14:53:b9:00:22:1b:ff:b8:3c:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:84:9E:A8:81:C6:5C:A3:B6:62:1D:CB:7D:E2:2F:BA:1F:17:C1:F7
            X509v3 Authority Key Identifier:
                keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:49:d4:52:75:66:91:9f:a9:31:6e:83:98:22:9c:78:f6:70:
         f4:cd:f6:7b:63:52:48:88:6e:98:80:76:63:fa:3a:39:d9:cc:
         93:14:dd:35:70:0c:e7:09:c2:a8:cf:3d:20:e0:64:3f:9d:bf:
         40:98:28:bb:43:2c:8f:aa:a3:6f:65:71:8f:c3:c2:ea:7f:26:
         d3:77:05:bf:05:54:3f:db:af:ad:9a:85:4c:79:54:2c:35:f8:
         0c:36:76:4f:40:9d:c8:42:fa:c2:51:5a:42:71:48:b3:fe:4a:
         93:32:7a:98:8d:c9:80:14:dc:8a:e7:fa:ac:77:7f:6b:49:3e:
         43:81:6e:a6:33:82:45:d7:c6:be:e3:57:9b:a5:02:ec:07:b8:
         ab:9f:cd:57:6a:8b:b2:34:ac:18:b7:97:a8:1a:a4:7b:16:ef:
         70:f5:bb:8f:72:88:8d:37:1b:2b:ac:9d:86:4e:ab:2d:42:ed:
         d3:00:61:38:82:60:27:e0:c4:a2:32:11:36:68:f1:08:36:55:
         4e:89:e1:93:9b:52:03:1c:3d:3a:93:49:40:4f:71:35:07:14:
         e7:24:fa:5b:31:62:67:59:57:cc:a5:25:1d:a6:46:bb:54:06:
         d2:d7:71:5e:b6:17:b7:d9:a9:8a:9c:73:e6:f1:48:28:67:75:
         a6:f0:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:16 2026 by rpki-client