Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
File:                     uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json)
Hash identifier:          ui4rfCYoiGCnzJTIAxRAaNjiJyQeCprtVdQUtw03j4A=
Subject key identifier:   7E:4C:DE:C0:4C:51:C2:36:3E:0E:D8:37:9F:5E:17:B2:8C:A0:2E:EE
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Certificate issuer:       /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial:       019FA0A90127B63F885A3BCDF1105BDCD7AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
Manifest number:          0513
Signing time:             Sun 26 Jul 2026 23:00:58 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:58 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:58 +0000
Files and hashes:         1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=)
                          2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=)
                          3: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=)
                          4: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=)
                          5: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=)
                          6: KuCSaCEOTSfMj8uwOknmWfQSUeo.roa (hash: 3+MmnXuvI/JOfNZCrj8AZFjZyZJa2SF9JSTpsOfpZ38=)
                          7: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=)
                          8: PjcfmGvCF3Jo8bSPGEurQgZgvHI.roa (hash: nN0nspQjOZYATjn1JnM2nPvB9KoYFsNTbycrrE1wEhQ=)
                          9: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=)
                          10: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=)
                          11: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=)
                          12: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=)
                          13: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=)
                          14: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: +blCULWBEiP+3NRGpdpztvCVqgtL6iuGsq0goYtgSic=)
                          15: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a9:01:27:b6:3f:88:5a:3b:cd:f1:10:5b:dc:d7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
        Validity
            Not Before: Jul 26 23:00:58 2026 GMT
            Not After : Jul 27 23:00:58 2026 GMT
        Subject: CN=7e4cdec04c51c2363e0ed8379f5e17b28ca02eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f0:e2:0e:63:99:02:f1:46:a9:50:b1:04:b1:
                    14:52:50:2a:8e:97:a2:f2:8b:3a:f9:45:b8:c7:d8:
                    20:db:e8:30:78:c7:84:88:64:70:e9:64:b8:44:b7:
                    4b:39:0a:64:95:0f:6a:ef:ad:ee:d7:38:3d:36:b2:
                    9c:78:d0:49:f8:2c:e0:b1:ad:f5:6c:b9:0f:a0:1e:
                    d4:c8:f0:83:80:92:ac:bd:a7:69:bb:5b:d9:af:eb:
                    f5:97:2a:99:5a:2b:ef:a8:85:38:a9:cd:77:34:da:
                    6f:68:ea:75:fd:2f:59:5d:19:f9:92:ad:bf:d7:36:
                    0f:af:28:21:99:13:7a:67:ad:90:e6:0e:ef:0b:01:
                    a3:0a:ca:d4:ea:2c:a9:b4:05:6c:17:5c:3f:26:5c:
                    0e:bf:e6:76:07:09:fe:da:0c:a6:c2:f2:cc:32:1d:
                    c4:89:7d:97:d8:b4:e9:6f:ed:2f:ee:88:df:d2:8c:
                    88:98:9d:9c:d8:1b:85:b9:c9:7e:61:e8:72:3e:c2:
                    16:84:93:29:20:1c:c5:af:cf:74:04:e4:f2:bf:be:
                    a5:ad:13:59:7b:ed:79:ae:d6:9a:1b:b9:f1:e3:ec:
                    de:e0:bd:c9:af:29:7e:a6:2b:04:ac:b7:18:31:8d:
                    64:44:66:6d:3e:80:c8:27:9a:79:f7:88:75:af:f6:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4C:DE:C0:4C:51:C2:36:3E:0E:D8:37:9F:5E:17:B2:8C:A0:2E:EE
            X509v3 Authority Key Identifier:
                keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:03:c4:5a:c4:2d:24:49:bf:54:04:6a:e8:7e:7e:de:dc:21:
         4e:c6:16:b8:73:07:de:ed:57:cb:71:19:53:40:74:65:0e:b8:
         5a:e7:00:34:eb:3d:29:10:40:4b:38:e9:75:64:1a:60:0e:4f:
         e9:98:e4:ba:30:ca:17:2a:44:5b:7a:37:56:cc:45:cb:51:cb:
         36:be:db:9b:e6:51:fb:62:ee:82:23:d1:64:56:d5:ff:cf:76:
         59:65:4b:8b:c1:d5:85:05:79:96:49:37:8f:2f:66:94:10:66:
         e1:56:e0:ae:4a:04:fb:f5:0c:da:c8:d0:f9:ba:89:60:84:36:
         1d:45:ef:82:c9:1c:70:09:93:02:82:84:93:ed:b0:ee:86:be:
         75:25:21:26:d4:c8:ae:81:00:83:8d:15:76:ec:55:d4:50:9f:
         10:c8:fd:0a:12:58:b7:76:65:b8:b0:f7:99:73:45:fb:9b:24:
         95:bc:e2:ab:48:4b:de:53:1a:2d:4b:43:cd:60:10:42:2f:57:
         2f:f0:cc:24:62:6c:9c:81:f7:b4:a6:63:4a:e5:12:28:52:23:
         50:61:57:55:e7:a4:fa:f4:5d:d6:6d:48:c3:50:d2:ee:b6:63:
         12:40:37:f6:35:59:9e:85:34:e0:b7:a7:b5:c4:2e:5d:f7:8c:
         78:2c:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:24 2026 by rpki-client