Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File:                     uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier:          UGqx5HpcFgeywwXQ/2TDCFXKE4lzSw1RdTXnmDQRhA0=
Subject key identifier:   43:03:74:7D:E8:FE:5A:7E:57:06:07:BB:17:8E:06:B1:41:A7:96:82
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer:       /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial:       019F8568DF5518AEBB806E0979486DAE9015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number:          1122
Signing time:             Tue 21 Jul 2026 16:01:10 +0000
Manifest this update:     Tue 21 Jul 2026 16:01:10 +0000
Manifest next update:     Wed 22 Jul 2026 16:01:10 +0000
Files and hashes:         1: S-yBnbW2TPRdHm8Bvnkb6SKNP-E.roa (hash: thzWzHkRBVrBpMkyMju39NgzMSOUf/2SSYied1BZFaw=)
                          2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: Cu/DUH7ot5LfuYbGazm12L/SSbfMqDHm0d2WSMaegW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:68:df:55:18:ae:bb:80:6e:09:79:48:6d:ae:90:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
        Validity
            Not Before: Jul 21 16:01:10 2026 GMT
            Not After : Jul 22 16:01:10 2026 GMT
        Subject: CN=4303747de8fe5a7e570607bb178e06b141a79682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:17:04:3a:14:55:af:65:be:e8:a6:70:9a:
                    18:05:0a:17:83:ee:f0:b0:cd:09:de:d8:ad:4d:28:
                    96:48:e5:68:c1:be:ad:25:72:bd:24:fc:15:37:b9:
                    05:4a:44:0c:06:74:3d:79:f3:e2:33:24:8b:88:06:
                    7a:4d:48:af:4c:40:99:3e:e0:03:22:b4:17:2a:7c:
                    34:52:64:fb:6d:3e:bd:8e:cb:b3:3c:44:82:9a:dc:
                    32:29:4c:6d:34:84:19:47:59:01:72:cd:91:cd:3c:
                    2b:12:1c:df:58:04:a6:43:a4:2c:7d:ec:f6:01:ac:
                    c3:23:3f:89:c1:fd:de:97:4d:e8:f0:78:29:00:aa:
                    90:2f:1c:c8:75:81:37:68:0c:74:77:a6:38:14:4c:
                    ab:e4:6b:0a:57:6f:1e:d8:8c:ab:6d:c8:3b:2d:36:
                    68:05:67:63:f7:09:22:21:02:e5:d8:0b:71:3d:87:
                    5e:59:c6:d1:8b:79:48:cf:f0:39:e3:21:8a:84:f3:
                    5a:75:76:e8:78:12:c3:7f:22:e8:73:cb:e0:64:ad:
                    73:69:27:53:87:2c:58:e5:2f:af:2c:58:d7:20:d5:
                    86:6b:cf:13:a0:26:e3:0c:e8:b5:9a:76:4a:51:1d:
                    e4:aa:3f:a0:1a:ac:97:8c:27:ca:21:87:5d:31:7f:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:03:74:7D:E8:FE:5A:7E:57:06:07:BB:17:8E:06:B1:41:A7:96:82
            X509v3 Authority Key Identifier:
                keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b3:4e:17:4f:29:08:20:0e:5f:f3:03:df:6d:08:18:58:f9:
         1c:70:6a:02:ab:8a:22:51:23:29:fd:13:e3:73:34:2b:78:1d:
         52:ee:25:f5:a6:58:f5:9a:3d:24:d3:2b:ba:f3:05:cd:fb:02:
         1d:2a:a9:0e:65:4e:02:90:e0:c3:ce:81:a2:24:f9:1e:bb:79:
         17:1c:c4:c8:07:6f:ee:16:5a:cc:67:94:93:d3:64:0a:47:09:
         45:c7:02:e4:84:6c:81:f5:a8:a3:ec:8f:59:6b:93:8c:73:6d:
         1f:43:3b:ab:e2:39:0b:16:af:85:31:1b:a8:2c:3b:a2:f8:92:
         4c:6e:56:b5:3c:15:c8:7e:1d:4c:55:ba:37:a0:b9:5e:c1:87:
         c2:48:da:b1:00:6a:b0:a2:0c:e3:b9:b1:9e:14:75:4c:63:8c:
         8b:3d:85:37:52:28:81:b1:7e:c5:f8:e4:f8:25:10:5c:c5:24:
         55:c1:dd:63:fc:dc:e1:ef:08:fb:00:34:66:3f:1e:e5:9d:02:
         1f:68:6a:67:43:63:27:3c:a7:e4:1b:f4:79:83:8b:81:a5:39:
         10:c7:db:35:4f:75:a3:30:e8:ed:bb:c9:48:a6:67:ab:0a:66:
         b9:b5:80:f8:34:6f:67:fc:ad:6e:70:39:04:51:1c:d7:88:71:
         53:22:93:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:49:51 2026 by rpki-client