Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File:                     UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier:          v045vPpRprMRa1pXpSmQPA4+eLl1JDDx3rpOkqSORt8=
Subject key identifier:   E2:4F:5F:42:9C:7E:A3:7F:B4:68:83:79:B6:BA:F8:AA:F6:9D:ED:5D
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer:       /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial:       019F82302559246081FDA063596D502AC013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number:          145E
Signing time:             Tue 21 Jul 2026 01:00:21 +0000
Manifest this update:     Tue 21 Jul 2026 01:00:21 +0000
Manifest next update:     Wed 22 Jul 2026 01:00:21 +0000
Files and hashes:         1: 610lUfbKAqkAzAw_mgQVL_MvKpw.roa (hash: Y6vB30I7ZhO4cnzek1W0dylwKGe+/gVJf/gvXQMZtgs=)
                          2: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: T8jpEq3+Si6/DVIIvbyqN40Z9z8Tcv6usNk2yN0iu3Q=)
                          3: zLRh9u6xLJnwtdY0ORDwft0JoyA.roa (hash: +NvH+iEfI87IdOFqZwYbFUot/dODFAweRpk/UBNPhTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:30:25:59:24:60:81:fd:a0:63:59:6d:50:2a:c0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
        Validity
            Not Before: Jul 21 01:00:21 2026 GMT
            Not After : Jul 22 01:00:21 2026 GMT
        Subject: CN=e24f5f429c7ea37fb4688379b6baf8aaf69ded5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:29:69:17:3c:b8:11:61:82:0b:d4:51:af:
                    fd:7c:3b:c7:d5:e8:22:98:07:55:1f:ef:07:f0:23:
                    8a:64:c9:41:cb:40:f5:6b:76:02:8a:e9:e7:60:3d:
                    58:9e:d1:70:c5:61:b9:17:d3:73:1e:55:37:e1:f4:
                    12:aa:e1:1f:81:c1:8f:64:a5:61:ed:34:ee:d9:15:
                    6a:0e:d6:2c:8f:f4:d5:ee:51:7c:2f:54:68:46:5b:
                    d4:1e:ce:97:41:2f:14:46:0d:21:72:ef:89:b6:71:
                    b9:f1:f7:3a:b9:6b:e2:b5:81:4a:75:78:9e:a2:a6:
                    b2:fb:49:22:01:73:08:41:49:18:00:2b:8a:be:38:
                    1b:57:86:7d:0d:98:b7:5b:ba:90:84:c5:81:9a:a2:
                    b3:5f:c7:aa:84:5b:e6:ee:33:5d:84:36:be:38:9f:
                    ba:9c:db:cc:83:b3:e5:49:d0:85:56:f3:e5:10:a3:
                    04:d9:4c:3c:c4:e7:93:45:01:e4:0c:8f:82:b3:33:
                    16:db:d0:e0:6a:7d:39:30:33:c5:a7:14:ce:60:b3:
                    3e:61:ad:4d:ad:6c:78:b6:7a:9c:2f:af:5d:3b:d2:
                    05:59:1a:49:11:44:bc:35:07:e5:a5:f0:d6:18:f9:
                    0d:ac:fe:3c:61:c1:2a:d5:40:2b:e7:f9:c0:c7:df:
                    5f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4F:5F:42:9C:7E:A3:7F:B4:68:83:79:B6:BA:F8:AA:F6:9D:ED:5D
            X509v3 Authority Key Identifier:
                keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:5f:c5:5a:f7:9f:c0:c0:53:62:5c:1f:95:66:b9:48:60:
         d7:2a:e6:7d:a5:9d:99:29:9e:05:51:ba:cf:47:1d:da:d3:ba:
         7f:0a:52:02:ce:ee:b4:7e:8d:09:88:d1:c9:c5:26:cb:4a:2e:
         c5:33:84:31:31:a8:26:5f:af:a5:ea:cf:16:8e:35:23:51:e5:
         28:2c:bd:79:e9:c6:1a:e7:12:b1:dc:c6:69:1d:af:7e:d7:f7:
         d8:ac:1c:91:ed:d1:4b:ce:02:f8:12:6c:10:5d:bb:28:e3:55:
         de:bb:c6:38:6a:de:13:cd:dc:d0:eb:c2:16:52:20:e1:9d:94:
         62:00:ba:39:42:c3:3c:18:e8:d3:c8:e8:9d:b5:91:90:50:99:
         fb:5b:3f:6c:f1:1e:dc:6a:36:18:0a:fd:f2:17:88:2d:07:27:
         c8:71:5a:4f:6b:69:6c:da:a6:80:c9:3f:68:79:57:a5:9c:52:
         46:93:a6:f6:a1:25:ee:93:50:68:fb:70:32:0b:7c:89:ed:d6:
         e5:2c:2c:45:f7:6d:31:cb:9f:54:ce:89:5d:61:cf:dd:67:ae:
         ed:29:a1:01:eb:fe:e7:ee:80:af:29:e0:cb:72:f6:d5:35:7d:
         32:f6:a0:60:09:e3:bd:15:51:c6:90:be:dd:30:46:d5:bb:17:
         2c:9c:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:51 2026 by rpki-client