Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File:                     U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier:          /T8DKNrBphdMGZFo4DgwLpW/cEX8yqlj3lUqbHHff8w=
Subject key identifier:   24:69:0F:A0:76:49:59:A3:E7:1D:2B:C1:5D:AC:DD:17:B4:98:34:12
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer:       /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial:       019FA29758494199044D787F23FA6D20656F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number:          19D8
Signing time:             Mon 27 Jul 2026 08:00:55 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:55 +0000
Manifest next update:     Tue 28 Jul 2026 08:00:55 +0000
Files and hashes:         1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
                          2: CRXS8yJabkFe9zngcADmlt5Mjh8.roa (hash: V+gmBDqtYsm9sl2kIiueYpvE2PqUIfwWQ+IMlLrBBzI=)
                          3: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
                          4: QbAALDYZ_RGHs07gYUQih_CDJyk.roa (hash: +Uv/ugRA2zDra5XT10jpvOYMi9ZmxhbMWKYPoPRN5bM=)
                          5: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: Uxg6PSRwmEm7qChOdBfyWsF9xwXnoJ38XprxPbXqR1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:97:58:49:41:99:04:4d:78:7f:23:fa:6d:20:65:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
        Validity
            Not Before: Jul 27 08:00:55 2026 GMT
            Not After : Jul 28 08:00:55 2026 GMT
        Subject: CN=24690fa0764959a3e71d2bc15dacdd17b4983412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:b7:da:30:d3:e8:b3:f3:3d:82:23:3e:a0:
                    96:1f:57:e6:df:6a:7c:fa:68:56:40:a2:00:0d:ae:
                    b9:07:4f:88:4e:a9:fc:e6:2b:87:55:f8:b2:02:20:
                    3e:51:0b:fd:0c:00:99:ad:9e:f6:7f:bd:af:d6:5e:
                    0c:dc:c5:9a:b8:bb:96:20:72:b3:ce:7b:23:5e:f7:
                    c0:72:b7:4f:59:b0:d8:80:91:52:53:de:9a:76:7d:
                    19:c5:27:2b:b5:17:48:13:2c:f3:f7:bb:65:c2:4d:
                    29:d9:30:77:ff:ea:16:60:fb:b6:9f:ff:88:68:7c:
                    a6:6c:ac:b4:d9:9c:5a:66:70:a1:ae:df:56:93:a4:
                    2e:a4:ba:b6:2c:94:2c:78:4d:99:f0:87:d7:26:0c:
                    c8:bf:d2:d9:cc:b5:39:52:d0:b6:b4:16:e1:88:1f:
                    9e:3d:5f:16:ce:6d:50:38:8e:02:1b:40:33:e7:be:
                    53:aa:34:07:38:8c:c6:30:83:5a:62:61:35:82:b9:
                    5c:e8:74:40:e5:e9:e2:7a:fb:e1:40:c3:4a:c0:14:
                    a0:0e:4d:b2:00:ae:45:73:0b:34:a4:b6:56:25:1d:
                    c0:43:a4:30:39:b9:07:8a:09:69:b6:e7:97:32:d4:
                    91:7f:81:b4:ed:b4:da:be:97:fc:86:ae:1d:1d:df:
                    19:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:69:0F:A0:76:49:59:A3:E7:1D:2B:C1:5D:AC:DD:17:B4:98:34:12
            X509v3 Authority Key Identifier:
                keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b1:5e:d0:4c:e3:db:67:16:65:d5:f3:af:c1:18:5e:91:93:
         31:6b:37:19:3d:fa:7b:6c:04:7b:1a:19:54:b6:e5:f5:4c:99:
         f4:ae:cb:6d:90:3e:70:30:5f:d8:b6:c1:0d:06:18:99:f2:be:
         89:0b:20:b0:9b:61:f5:3e:35:43:15:67:18:a7:4d:95:3b:ef:
         f6:96:53:f7:7a:77:45:c5:f3:a3:01:6d:cf:22:0a:a8:6d:7c:
         61:a6:6c:b0:a1:b5:a9:19:5e:f4:87:63:6e:ae:76:c6:ef:db:
         34:23:a2:79:8a:6a:1c:60:53:96:d4:39:c4:7b:53:9a:e7:5e:
         c0:3d:b8:c3:cb:eb:39:f7:29:e2:31:65:1c:c6:82:48:48:4c:
         eb:d8:87:6d:44:09:ae:7f:25:8c:60:4d:29:59:58:fa:73:ef:
         f4:3d:69:01:40:c0:e9:be:9d:fc:eb:b5:a4:89:d8:68:23:58:
         43:a0:3a:86:b1:56:fa:18:98:0e:57:bf:97:06:56:e0:73:24:
         ae:98:a3:54:f3:4e:76:c0:df:b0:7b:4c:ad:86:98:2f:15:42:
         05:41:5e:02:24:bc:ea:65:98:c8:17:de:dc:28:0c:0e:46:4f:
         7f:a6:63:69:81:62:db:01:ca:97:4e:a6:77:05:e2:de:2a:aa:
         de:14:38:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:24:47 2026 by rpki-client