Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File:                     uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier:          yqTKGoEqdX0qvpF0/iG2IZ7TB1oO02DAeMdFcYApQ70=
Subject key identifier:   47:79:1C:6D:AA:6E:D7:35:87:EC:76:23:CE:71:7A:23:5B:13:11:09
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer:       /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial:       019FAB9A4C7160F36A87223731E258E2E56E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number:          12FA
Signing time:             Wed 29 Jul 2026 02:00:43 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:43 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:43 +0000
Files and hashes:         1: 8B0Xvmidug3oJBFQNiVZ03LjllY.roa (hash: P1kj5JyGbpjO7k/9XiZFP26S2h0cS9e/Ah5VKAIZkgI=)
                          2: AwKBOhlF9uaXHOgDwaWxiRTycC8.roa (hash: ulOM++8A5dnNmN9Kuzc/O4/HWsO5q48Fbn6dGRtakzw=)
                          3: lkqdEp6LwoeInW4-nbYEOMBruSw.roa (hash: LFD9MHEpAP74xMJWDo+tJr71CtFOG7i1RauaAjnGFMU=)
                          4: pSuYpl6WxbthlcwSwOwfJ2eEOEM.roa (hash: 0ZM4/++BdSQLGaayny50tbB3TCayRFezzAq6CjxEPBs=)
                          5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: /A5puHP7Lgt5jkUcw8Lc60EHqiceLvAivxf7jxvAf7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:4c:71:60:f3:6a:87:22:37:31:e2:58:e2:e5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
        Validity
            Not Before: Jul 29 02:00:43 2026 GMT
            Not After : Jul 30 02:00:43 2026 GMT
        Subject: CN=47791c6daa6ed73587ec7623ce717a235b131109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:70:6e:dd:c9:3e:22:cb:23:3c:68:ef:a8:
                    e1:71:e9:31:e0:d1:e0:b0:32:f8:b9:e0:a8:b0:30:
                    fb:97:07:3e:83:6c:49:7c:d1:1a:ca:ae:df:3b:50:
                    24:3d:64:8b:3a:f6:cd:7f:79:96:52:9d:27:fb:57:
                    0b:77:27:00:ab:bb:49:1a:6f:0f:5b:4b:a3:06:34:
                    9f:a1:32:fb:f5:d2:70:a3:9f:f2:d1:0e:97:f2:06:
                    65:b7:d4:c6:35:68:f2:3f:76:61:65:77:a1:f9:db:
                    e6:4d:d1:a1:bc:5d:17:5d:95:85:09:16:b3:8a:6a:
                    a8:95:aa:e5:b4:ab:05:15:7b:c2:09:ba:73:92:ae:
                    a8:ba:a0:bd:d2:41:7f:d1:36:26:21:92:cf:c0:62:
                    f8:40:3c:35:c3:59:41:8d:bd:bf:19:d1:51:8a:1a:
                    b5:4e:61:eb:37:9c:d5:bf:9f:ce:71:aa:a9:34:e4:
                    b9:f6:4d:33:77:8e:c7:d9:20:69:7c:30:50:fc:f8:
                    a0:28:22:5b:1a:30:ff:3d:6d:24:40:01:ba:44:f6:
                    a0:c4:71:03:7e:eb:74:48:b1:b8:93:82:0c:31:37:
                    4c:4b:ee:36:ca:ca:14:d8:54:f5:c1:f4:04:ed:24:
                    6b:99:01:a2:2b:24:12:ac:d4:7b:94:1c:87:ed:24:
                    db:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:79:1C:6D:AA:6E:D7:35:87:EC:76:23:CE:71:7A:23:5B:13:11:09
            X509v3 Authority Key Identifier:
                keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:d0:1f:58:ee:ad:c4:15:6b:f2:4b:d9:84:86:fb:f7:b3:12:
         99:db:5e:74:f5:24:11:5b:48:7f:69:21:bb:e8:99:32:f6:95:
         d4:ac:e7:26:9e:9e:f0:37:a5:d6:ed:e5:66:dc:98:7c:3b:69:
         b1:92:ff:7c:91:18:1c:07:92:a2:49:50:99:d7:dd:fc:6b:92:
         5f:ce:f6:6a:42:c3:79:ab:1a:7a:4f:e2:ae:55:78:c9:97:2e:
         c5:68:50:d2:eb:cc:8e:64:bf:f0:b2:48:5d:b1:74:9a:d0:3e:
         f6:53:97:12:17:fa:ac:92:ba:b2:ab:df:45:bd:c0:ab:90:c2:
         c9:55:ba:09:c9:73:1d:0e:c6:19:62:43:7e:c6:d6:3c:0f:7d:
         ee:2c:9e:7b:64:e2:b5:23:4f:64:cc:39:a5:a6:85:b8:54:1f:
         3d:df:1b:50:b7:ad:7b:ad:53:5a:6e:2c:1e:1e:06:c0:8e:26:
         48:ab:ea:ea:61:61:c4:ff:0a:1e:f8:5d:84:0f:26:b3:b3:c3:
         75:f0:45:90:0b:ab:f1:00:aa:37:05:2b:9b:72:12:e2:84:52:
         ee:f1:c3:7f:b7:81:15:8f:01:e6:05:82:99:b8:94:32:20:a3:
         d4:51:d7:06:4e:cc:81:9e:61:fe:0f:4d:28:1b:27:0c:92:ba:
         45:bc:8c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:10 2026 by rpki-client