Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File:                     UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier:          pItlQtpxV37W9jlQ8LtcDYmf64+UvdeXgH4KwI6JVz4=
Subject key identifier:   93:9A:18:81:49:07:85:EC:6F:33:51:3E:3C:1C:12:67:19:EE:57:9F
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       019FCDF026048A5CFD618F8D1EF4C71D96A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number:          12FA
Signing time:             Tue 04 Aug 2026 18:01:35 +0000
Manifest this update:     Tue 04 Aug 2026 18:01:35 +0000
Manifest next update:     Wed 05 Aug 2026 18:01:35 +0000
Files and hashes:         1: UjFdhEdt4WKlDSIUUurW21paKp4.roa (hash: fDRm4GJe+GCEFChs7oH68Gzn9XNFPr0wdWmaIX+37oo=)
                          2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: Xj4TslNE0V3p4Uo85zzV0ibe2O++Zdxs4Y2S0FfR1dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:f0:26:04:8a:5c:fd:61:8f:8d:1e:f4:c7:1d:96:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: Aug  4 18:01:35 2026 GMT
            Not After : Aug  5 18:01:35 2026 GMT
        Subject: CN=939a1881490785ec6f33513e3c1c126719ee579f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:46:da:82:2b:c4:90:d6:88:bd:a2:9d:ff:
                    c3:68:74:2d:27:c1:3c:c0:f8:3b:fc:48:44:79:a2:
                    be:83:b6:ee:1b:fe:67:86:19:06:c4:54:f6:b7:7a:
                    ab:b5:75:41:66:c2:3a:38:80:f0:f0:e9:ad:27:ea:
                    bf:2d:69:6e:aa:14:46:b5:aa:b6:16:ec:64:e9:48:
                    e1:67:0d:10:9f:52:cc:b0:b4:51:68:f0:f6:a0:c6:
                    de:76:4d:dc:a6:2f:2e:1f:fc:a8:67:71:f0:1b:8b:
                    22:71:df:5d:fc:1a:1c:be:ca:a9:f7:42:a7:0e:55:
                    c9:21:0c:55:3f:be:1b:4c:50:c9:9b:30:00:04:52:
                    68:d7:08:ff:26:c0:8f:ec:91:d4:f1:8e:b4:40:05:
                    8a:e3:3f:91:d7:b3:8c:0d:f6:76:ee:ea:3a:6e:09:
                    56:2b:b4:4b:f3:8d:7f:4c:58:d0:c3:9d:88:88:9e:
                    78:25:3c:b3:e8:b9:87:10:c2:89:52:27:14:8f:fa:
                    cc:99:08:84:25:b0:15:48:57:6b:a9:9a:7f:10:4a:
                    ae:29:f0:17:b4:fe:23:e7:c4:bc:da:c1:dc:36:8d:
                    94:1e:8c:48:46:6e:60:00:2e:b9:c4:11:7c:75:2f:
                    25:d5:53:a3:8d:2c:97:f5:a0:4d:aa:5d:15:04:d9:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9A:18:81:49:07:85:EC:6F:33:51:3E:3C:1C:12:67:19:EE:57:9F
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:95:08:82:86:b9:fb:7b:73:5f:51:45:73:ac:52:03:6b:b2:
         bb:cc:3d:34:84:6c:42:6f:20:30:88:72:31:f0:ee:f3:3e:31:
         07:cc:19:93:de:cf:0e:69:57:dd:0a:01:ed:52:1a:e1:3a:5f:
         ef:05:9a:dc:9e:18:76:4c:a7:66:a0:48:6a:01:5f:3b:cb:21:
         92:0d:39:5a:30:70:c7:3a:63:14:b1:03:4f:06:8f:ff:08:7e:
         54:5e:d5:c4:15:bb:3c:14:85:83:f8:3d:95:67:03:ac:5c:6a:
         03:fd:4a:ab:38:7d:07:45:a8:8f:e5:3e:18:9c:ff:57:8f:ed:
         f7:89:74:94:f4:33:6e:6a:ee:ea:8e:0e:6e:0d:79:a0:e1:2e:
         3e:ff:db:50:b8:a7:bd:f6:40:73:12:d4:86:df:3d:f9:1a:e0:
         b7:30:e2:fc:2f:b9:f2:9c:44:da:c9:08:e8:f0:bd:bb:5b:a7:
         73:0f:e8:bb:3c:3f:10:5a:28:76:39:17:39:b0:44:12:40:06:
         81:3c:ee:b4:27:5d:5f:ab:ba:24:a2:e0:49:57:76:ea:95:d4:
         69:be:ed:58:b7:5f:d5:ca:73:3d:30:28:96:3e:55:62:4b:76:
         85:60:c7:a9:4b:44:27:8a:06:4d:96:0c:8d:90:a8:54:21:08:
         e9:3f:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:09:05 2026 by rpki-client