Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
File:                     UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json)
Hash identifier:          PA1vQ3/BkifKNLZd3W4IEY7ILFtH4LPXh7cjpqqfL7A=
Subject key identifier:   16:99:1E:8C:B1:57:BE:48:09:F1:36:DC:99:A4:F7:8B:A8:5F:99:1F
Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
Certificate issuer:       /CN=530841e82aa46d9959fc7811b25795c56cd50608
Certificate serial:       019F867B4A380512259C929F39BF808CDFA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
Manifest number:          19A4
Signing time:             Tue 21 Jul 2026 21:00:54 +0000
Manifest this update:     Tue 21 Jul 2026 21:00:54 +0000
Manifest next update:     Wed 22 Jul 2026 21:00:54 +0000
Files and hashes:         1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: qF+xXEHyycQ5rX4hzkZyrhAr/7Fcna50Dw87wpSDYC4=)
                          2: V-wJc1_T9ZdDaXQ8Bjgp6ZwH7Ko.roa (hash: 5Q51/s2uhZseLvK62BKwJY/vcbWTvSMuqDjEqNx+KWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:7b:4a:38:05:12:25:9c:92:9f:39:bf:80:8c:df:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608
        Validity
            Not Before: Jul 21 21:00:54 2026 GMT
            Not After : Jul 22 21:00:54 2026 GMT
        Subject: CN=16991e8cb157be4809f136dc99a4f78ba85f991f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:42:fa:da:9d:bf:75:ca:73:58:f9:2e:f1:
                    60:d1:b5:93:a3:26:80:7e:17:3a:64:b7:3a:b5:9d:
                    f0:76:c6:90:9d:26:87:14:53:59:98:fd:1e:c6:9c:
                    b2:3e:3c:86:c0:83:5d:17:67:d6:a3:a8:f4:0a:40:
                    75:95:b4:f4:5f:5e:04:3c:8c:31:cd:bc:9e:67:b9:
                    e0:94:c4:46:4f:80:96:0f:e5:2d:6a:f6:53:d8:55:
                    ad:15:e2:6e:66:b0:1d:0d:5e:dc:4d:f8:70:82:ac:
                    d4:66:ae:7d:1c:f0:4d:b3:53:cb:26:8d:25:f3:ef:
                    ec:37:ed:06:8a:16:c8:88:b5:c0:0f:d3:47:87:d4:
                    aa:cb:0d:03:7c:05:aa:be:14:4a:5c:10:8b:70:c1:
                    70:db:6d:67:68:6d:fe:58:7e:80:8a:20:01:9b:1b:
                    ea:37:89:8b:bc:a8:83:48:71:ca:1f:4c:9a:dd:10:
                    0c:e0:de:92:ee:9d:13:b7:78:1e:94:9e:e4:7f:c1:
                    ac:c2:1a:82:2e:28:87:e6:60:1b:7b:85:f3:6a:70:
                    2a:59:59:5b:c2:8e:02:9a:15:38:80:1b:b6:ef:2b:
                    59:ba:da:45:a2:64:34:d2:4f:45:7e:af:66:ae:84:
                    71:c4:c1:cd:0f:bb:e7:18:2d:47:a7:a9:df:e3:15:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:99:1E:8C:B1:57:BE:48:09:F1:36:DC:99:A4:F7:8B:A8:5F:99:1F
            X509v3 Authority Key Identifier:
                keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:2a:e6:3a:bf:cf:68:31:45:da:f4:ad:b0:54:41:d3:5e:
         44:c1:41:bf:40:3e:d9:9a:eb:5c:f9:1f:a0:1e:fa:72:56:66:
         ea:e9:2b:6a:e1:06:21:33:62:44:45:1a:46:6b:b2:02:bb:d1:
         f5:7f:01:e7:d9:51:e1:55:66:1d:2a:2f:83:ee:c9:cb:f6:1c:
         30:52:1a:7e:b9:d0:37:8f:26:1b:a6:2c:20:0c:4c:d3:12:5d:
         6a:21:f2:65:6c:92:fe:87:47:51:74:14:55:e9:72:48:e2:99:
         23:76:35:19:e5:be:cc:1a:2a:d9:b4:f2:31:1d:7c:ed:39:f0:
         12:87:79:21:1e:38:44:24:fb:9a:2f:48:14:5a:7c:ea:c1:1b:
         5c:09:53:6b:1e:3b:97:ed:24:4b:b4:b2:c8:1c:51:31:92:76:
         bd:34:d6:d6:c7:f1:13:a4:73:26:f7:6f:a2:3a:d8:34:02:1e:
         e0:c7:bb:3f:9d:c3:93:3f:ba:bc:90:79:d5:4e:2c:1f:fd:dd:
         24:85:00:bc:7e:c8:73:eb:86:29:01:c0:34:56:a5:15:f6:fd:
         4d:16:5e:73:b7:83:98:68:67:c5:a2:83:61:b0:f6:70:fa:1d:
         e2:de:49:3e:1b:66:ce:b6:ec:e0:1b:24:3d:be:9d:7b:ca:0d:
         43:de:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:39:32 2026 by rpki-client