Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
File:                     UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft (raw, json)
Hash identifier:          g4JotYMdpVFP3Oiyv3V879SeoENrY2jTwZbl3WEYL50=
Subject key identifier:   BF:33:96:71:D6:9E:98:71:B7:87:A2:FD:F8:9C:D8:40:98:09:14:0C
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Certificate issuer:       /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial:       019FA184736E3F5B96BBD5E8C546CF473C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
Manifest number:          1B
Signing time:             Mon 27 Jul 2026 03:00:39 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:39 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:39 +0000
Files and hashes:         1: EJ834orq5XxkS33xyiAVciNKYTA.roa (hash: tsKZbbD2a26s9kJQXaOMNeI95YAO2ar9y5cHWx269UQ=)
                          2: O1bRHs3xt5FsIbl_ziUUS70e2Oo.roa (hash: GDAX7A9G25jk6iCRuWUSO9OYN1CP4Rha8hkEH61irKE=)
                          3: TVciBvbG1XVG5ssHlr4AadQK2fk.roa (hash: QwF4SWXY6yBXWUo8zo5vTIE9qB3GoAOkQodC/dlqVwc=)
                          4: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl (hash: 07HiMMQC9lBGE8ranOOU6FERFsFKtPdFdv/8pLM8RVk=)
                          5: hs3fngFJt1NiocNCIA7qGPYWsTU.roa (hash: ToEvpANK+Yu0KXslqAyftUZpThJvK58TLmLx0aI2m1A=)
                          6: slPI9aN-JbfbvX_GY814pCJ8UFA.roa (hash: EeGAyjsGw6lAKae9brKTE8ngKeD+Md25/vDKFnzwqig=)
                          7: tm-LFqSPmanwgI1syFmGkI6nKdc.roa (hash: lIW2bmaFFTJOzvB2HW/qgxs6vnJmoBOrm3elLnIZeZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:73:6e:3f:5b:96:bb:d5:e8:c5:46:cf:47:3c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
        Validity
            Not Before: Jul 27 03:00:39 2026 GMT
            Not After : Jul 28 03:00:39 2026 GMT
        Subject: CN=bf339671d69e9871b787a2fdf89cd8409809140c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a1:72:64:1d:dc:aa:7c:58:7a:b7:54:bf:db:
                    db:25:44:56:43:40:13:79:b6:15:23:13:c8:07:2c:
                    1e:a4:a6:6b:03:53:33:a5:e7:bf:65:6c:a2:dc:96:
                    d5:1f:9b:fe:58:5a:0c:27:7e:36:98:5f:67:cc:fd:
                    1f:11:ef:93:26:9b:01:3a:f9:32:ce:86:35:67:3f:
                    d7:f0:dc:bc:70:fe:c7:b2:81:84:8f:36:50:56:35:
                    16:f5:c4:3c:f1:1c:46:c1:76:61:ff:a0:c2:6b:66:
                    ea:38:65:ce:33:b4:12:84:65:05:f3:12:b1:b0:54:
                    7b:6f:87:7a:4b:93:60:1d:95:18:83:e7:f9:4e:eb:
                    60:2b:14:bf:2d:3f:57:97:af:e6:40:84:27:7b:7b:
                    84:80:08:3c:b9:cc:d6:1b:53:6c:61:b6:a9:eb:35:
                    56:5f:a4:7a:24:31:e9:93:06:61:58:5c:c4:e4:77:
                    0b:6e:a1:04:04:b9:ce:ec:b7:42:b3:d7:b6:37:e5:
                    1d:20:75:25:e6:18:6f:b1:8e:3a:6f:de:35:95:bc:
                    ab:73:7f:d2:ff:b0:48:6f:b3:c7:33:a4:47:6e:de:
                    bc:78:cd:46:aa:84:9f:50:bc:ad:61:d7:3c:bb:03:
                    4e:91:ed:28:cb:b8:3f:97:97:43:3f:45:58:e1:d5:
                    ec:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:33:96:71:D6:9E:98:71:B7:87:A2:FD:F8:9C:D8:40:98:09:14:0C
            X509v3 Authority Key Identifier:
                keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cb:77:e4:78:42:5c:a6:ff:75:ef:a0:57:cb:a1:91:ed:0b:
         78:b2:33:01:87:20:d0:24:7d:22:57:b5:a5:47:55:ba:1e:35:
         4d:13:43:94:db:8a:e7:e7:84:e8:f8:e2:82:b5:d2:dd:a9:9b:
         49:69:22:70:b4:df:32:45:1a:cc:a7:bd:bf:68:f0:50:70:c6:
         97:00:13:95:39:f4:82:04:94:01:ff:ea:50:90:bf:1c:93:57:
         24:1c:d9:cf:ee:e0:44:1b:a4:80:77:1d:e3:5e:0c:63:57:fb:
         a2:5e:14:21:ee:0b:ef:a0:0e:d6:c6:c3:a6:2d:b8:2f:1a:ef:
         f4:b5:99:4d:3c:52:12:32:10:60:85:52:dc:78:7f:98:10:e6:
         ed:fb:85:23:d4:c7:98:79:7c:dd:60:f1:ef:c5:e9:a6:89:25:
         44:f0:24:b9:f4:6b:31:92:87:a8:db:3e:4c:44:26:22:4e:3b:
         25:9f:27:42:d1:be:36:33:58:5c:b3:90:67:58:09:c3:90:e2:
         f2:ae:d4:52:c8:a6:be:00:7a:fc:e8:28:06:f5:37:56:9a:73:
         0b:04:8a:36:93:2a:4e:4b:20:99:b0:47:58:96:9d:28:24:3c:
         ea:3c:e0:de:c0:d1:33:65:4a:ef:98:4e:dc:10:33:bc:21:76:
         d4:2b:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:12:36 2026 by rpki-client