Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
File:                     uhfrfV8E0nFV8gF4bzkPtAimquQ.mft (raw, json)
Hash identifier:          v1zmdeK+7+nCyPqgp0p6zcHjWIe5G0kdYaoyaUpXxF4=
Subject key identifier:   D8:53:DD:9A:52:FB:B6:3A:6F:C5:89:DF:6A:9A:3F:F8:3D:82:DF:BA
Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
Certificate issuer:       /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Certificate serial:       019FAB9AAF5D1AEE7CBB363DF837B5BD7058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
Manifest number:          020D
Signing time:             Wed 29 Jul 2026 02:01:08 +0000
Manifest this update:     Wed 29 Jul 2026 02:01:08 +0000
Manifest next update:     Thu 30 Jul 2026 02:01:08 +0000
Files and hashes:         1: 0yT0OXiNw9csRLbDIHPuRhRNJuA.roa (hash: V99TnpgsuLfThbZigceHdcceXYaalafIhYll4v0qF0s=)
                          2: uhfrfV8E0nFV8gF4bzkPtAimquQ.crl (hash: cSm9FAM8PtLyMir5Yr55dZtUaP6m+fiiHXDrE6+fhVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:af:5d:1a:ee:7c:bb:36:3d:f8:37:b5:bd:70:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
        Validity
            Not Before: Jul 29 02:01:08 2026 GMT
            Not After : Jul 30 02:01:08 2026 GMT
        Subject: CN=d853dd9a52fbb63a6fc589df6a9a3ff83d82dfba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:a8:22:ea:f5:2e:8a:e5:11:2f:2c:72:5d:
                    c2:67:60:fa:d0:6b:d0:68:83:85:af:d7:55:96:46:
                    cc:83:1e:25:22:0b:37:a9:77:b4:2a:85:db:b2:04:
                    e6:e2:ad:2a:7e:85:2e:2b:ed:2d:2e:bb:9b:91:4b:
                    98:b3:80:67:f5:54:e3:b1:e6:b8:34:6a:ee:7f:9d:
                    72:d0:9e:d2:01:25:ff:1a:b4:83:15:e7:73:2f:e3:
                    6c:ca:73:40:26:6c:41:11:51:0f:bd:45:29:5f:bd:
                    ea:b6:24:5c:8f:4f:9c:cf:2c:63:f7:d3:fb:74:70:
                    8c:df:4e:78:b7:71:7c:43:39:30:d0:bb:e6:c6:4f:
                    9b:f1:0b:f3:e1:1d:32:93:ba:a3:01:b7:b1:00:f8:
                    43:14:7b:b2:4c:43:15:c5:3a:50:26:57:ca:83:8f:
                    31:92:32:7c:42:b0:5f:99:12:96:64:67:ea:e6:e4:
                    24:34:bc:95:4c:51:8f:11:2f:b0:42:c7:0e:1c:eb:
                    f8:34:a7:b6:54:67:33:a4:c6:69:25:4c:e5:f9:bb:
                    8d:5c:01:83:c0:a0:f5:e8:b8:dd:0b:23:f8:be:4e:
                    82:b9:3d:b9:5d:0f:a5:b0:50:05:ca:f5:d1:70:5f:
                    85:38:bc:fd:25:6d:da:13:77:3c:bf:cd:e4:b6:8d:
                    64:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:53:DD:9A:52:FB:B6:3A:6F:C5:89:DF:6A:9A:3F:F8:3D:82:DF:BA
            X509v3 Authority Key Identifier:
                keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:22:b2:00:b1:eb:2e:0d:92:f2:72:8c:94:6e:81:5e:d3:ea:
         b5:44:4e:59:e3:b9:d4:27:40:bc:d2:0d:8a:0a:5e:17:75:24:
         f9:0f:c3:60:a6:95:c4:5b:4a:9d:b0:2f:32:da:77:01:98:91:
         39:5f:99:51:9b:7e:c3:e1:7c:cc:59:ba:8b:37:d9:b1:73:cd:
         d1:91:6d:7c:27:38:de:9a:11:09:b2:b6:d0:36:0b:9e:d2:de:
         d4:ec:bc:39:c7:01:76:81:34:a4:f0:c0:25:b0:46:9c:31:e1:
         7b:8d:85:7b:0c:c9:15:be:7a:c6:1b:d7:37:a1:6f:c4:f0:2b:
         02:ce:4c:c5:63:ff:03:17:99:10:84:f6:1a:a3:cf:66:65:a4:
         7b:e6:bb:e8:63:52:10:f4:69:58:4e:87:33:19:c1:51:ec:39:
         bc:80:4e:4c:b6:6c:ce:b8:80:56:e4:46:9c:9a:99:fe:1d:c4:
         2a:4d:fd:43:3c:95:ed:36:8d:4f:0c:b7:23:0b:af:b2:53:a3:
         59:8c:52:cc:85:15:28:17:f9:14:1a:f8:14:bc:f1:ec:e8:d3:
         40:88:91:30:f0:43:f5:0f:fa:20:57:fc:30:ed:c0:36:9a:0f:
         12:0b:f9:8a:04:62:93:1e:d8:91:df:cf:03:6d:a2:b9:bd:54:
         05:71:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:10:22 2026 by rpki-client