Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
File:                     UHx3C7awjctNbqmwyWJyrzpvnHE.mft (raw, json)
Hash identifier:          jGMtYMe3klSZtt3WIjjfsnc9950zjkdj5z4N/cr1VDw=
Subject key identifier:   F7:A2:0D:77:F6:02:92:C8:30:EF:76:B8:55:1D:17:E8:8B:43:5F:58
Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Certificate issuer:       /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Certificate serial:       019F11C05E1DC7E3D8D1EBE6D9445FCA5D0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
Manifest number:          0456
Signing time:             Mon 29 Jun 2026 05:00:47 +0000
Manifest this update:     Mon 29 Jun 2026 05:00:47 +0000
Manifest next update:     Tue 30 Jun 2026 05:00:47 +0000
Files and hashes:         1: 1-qOjuIvYGjckksNPHVjpgwpDL5c.asa (hash: IDU7S6qcZcLrhRpcWw7crD/aj5dTeMeZ0RTCJFumpRA=)
                          2: 9DLIgBG0jvfuH8ou8TZjKoDe-ho.roa (hash: HpaZI7kuC6hl/mDsBhvQTtPfFBQMuUpypzbtW9UHoK0=)
                          3: UHx3C7awjctNbqmwyWJyrzpvnHE.crl (hash: fiRIJeB2ESF3+Fnohv+HoPzzaQuW5jLpTRToJ+3vwq4=)
                          4: WEtqNCrBdP1-xOqBUemEbeb1epY.asa (hash: HoM1BbtgBuk87uJLxu3lvRVRX6rEkL9yzf8EqEQYeqA=)
                          5: _rTEx-t_NdmfT_FVcasSap5SuvE.roa (hash: ENf9Zsg8pxzpa14iNxpPB+x6wfIxOC0IvZvTlmEuMS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:5e:1d:c7:e3:d8:d1:eb:e6:d9:44:5f:ca:5d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
        Validity
            Not Before: Jun 29 05:00:47 2026 GMT
            Not After : Jun 30 05:00:47 2026 GMT
        Subject: CN=f7a20d77f60292c830ef76b8551d17e88b435f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:64:8a:22:e1:7f:a6:c4:69:5a:7c:2a:8e:
                    f6:57:7b:d8:1a:1c:f4:c9:e8:2b:29:ba:4b:99:c0:
                    fa:59:90:3d:d3:6e:74:46:71:2d:77:d9:dc:ea:eb:
                    57:84:bd:6e:e5:49:7f:3c:89:05:f1:e1:8c:54:4f:
                    4d:55:a8:6b:2f:82:ee:c6:34:55:24:56:2c:46:af:
                    a0:d5:2a:d9:d8:62:7c:8a:04:26:6f:71:fe:76:a0:
                    8b:cd:33:21:50:1d:52:b3:87:47:9e:7c:26:bc:ea:
                    2b:4b:cc:23:6f:68:88:ba:1b:3e:74:fc:2e:52:c8:
                    7c:5a:a6:17:3f:4a:e7:8b:71:2c:f1:bf:d9:bd:9c:
                    72:cf:73:cb:ae:45:43:90:8b:3c:77:c7:d0:eb:02:
                    88:e6:db:fc:00:0f:fc:80:d8:1c:0a:eb:eb:aa:bd:
                    9d:06:38:fc:97:b1:e4:92:f0:93:97:85:e9:5c:9c:
                    f3:98:cb:f9:2c:2d:1a:a8:5a:52:a8:11:07:57:ae:
                    33:33:3a:d7:b4:8f:1e:35:8d:1f:08:bb:bf:91:6a:
                    b9:1b:4e:c7:de:a7:af:93:6e:af:bb:31:af:1a:12:
                    d4:b2:ec:17:de:89:05:96:08:13:c1:15:76:60:2f:
                    9d:da:3d:fc:d4:de:f2:bd:95:16:e8:00:36:75:41:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A2:0D:77:F6:02:92:C8:30:EF:76:B8:55:1D:17:E8:8B:43:5F:58
            X509v3 Authority Key Identifier:
                keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:37:05:9d:4c:94:80:13:e9:0c:bb:c1:3c:8e:22:ff:87:1d:
         0a:71:47:75:6a:a6:bf:7c:13:93:a6:dd:28:39:d4:17:6f:52:
         a1:43:e9:bc:d4:6d:04:67:84:aa:46:8c:b5:c5:32:fd:50:86:
         a6:bb:22:c2:1a:db:cc:58:4a:4f:1b:38:31:a3:4f:71:f6:98:
         dc:51:a1:c3:fb:e3:6c:da:0b:48:e3:0b:de:dc:d5:65:bb:fa:
         44:0d:2c:bc:5e:4c:cc:20:41:5a:89:57:b4:84:39:52:d7:8e:
         52:8b:d2:8c:08:12:ed:ec:aa:9c:71:08:1f:4e:9d:76:9a:a9:
         56:40:0e:eb:ee:f9:11:89:fb:cb:3c:47:fc:f7:ec:f5:8b:47:
         5d:79:a2:c9:b3:9a:ce:26:78:30:6b:1d:52:4c:eb:8d:5d:c5:
         d6:8b:e4:4d:0b:ba:81:7d:44:a5:71:29:17:ee:75:07:1d:3d:
         8b:08:3b:59:cb:08:a7:d6:b3:cc:21:c3:46:17:3a:5d:0f:e5:
         b6:fa:57:fa:2b:4a:55:e4:37:8b:7d:7e:6a:c8:f8:01:de:78:
         80:13:1d:56:fe:62:93:5a:42:01:b7:17:2a:e0:ae:cd:bf:a2:
         a8:06:bf:4b:51:ef:99:93:9f:b6:12:3d:3b:56:3d:a4:92:e4:
         94:6c:1b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:43:47 2026 by rpki-client