Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
File:                     UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft (raw, json)
Hash identifier:          AQ36eKtyrxVYeFE25LH7VACJdt+oE2LL5UGuYvkivHQ=
Subject key identifier:   1B:E2:74:F1:55:4C:97:56:C1:9B:90:45:2B:D7:E6:A1:68:63:6A:47
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Certificate issuer:       /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial:       019F374E9BD295A5EB94A5E55226460EDAB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
Manifest number:          1998
Signing time:             Mon 06 Jul 2026 12:02:06 +0000
Manifest this update:     Mon 06 Jul 2026 12:02:06 +0000
Manifest next update:     Tue 07 Jul 2026 12:02:06 +0000
Files and hashes:         1: 1-r5h5M4z_etRHKub_p7uYkuua2k.roa (hash: 7956C8JjzEQ12pRs9Y4qeyvvm8jRcbkAr628jmTx/bQ=)
                          2: Grqr3zYOgPbnYQO8DA4VgsDDUrM.roa (hash: aJOAZYE1fZOQaAtwLCBBewOwLiqrU497TanU9W5w1Jg=)
                          3: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl (hash: hKhAurE74QISeMRP9x5Dj0wtBlkTy1sjx7lKhpS0nuY=)
                          4: iw5F2GqviAuCI8Yj5bZostsjf4s.roa (hash: nUPb8N6EAyjoLbqfkef2pSzNUsPnNcWng7BDtVUC41s=)
                          5: nF-YJnDe36GSTrMdE4OaqcL2ytE.roa (hash: Vy2/IceEB6KcpqIu9v4108H+Hr6sCPfLoeeW13cg1mQ=)
                          6: vH1QevNKFQddFeDMZ-jQc4mM4VQ.roa (hash: 4l/78DSO4hiILYf4bnV4O0t6abXmefY1wPnf8x4yQ70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 12:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:4e:9b:d2:95:a5:eb:94:a5:e5:52:26:46:0e:da:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
        Validity
            Not Before: Jul  6 12:02:06 2026 GMT
            Not After : Jul  7 12:02:06 2026 GMT
        Subject: CN=1be274f1554c9756c19b90452bd7e6a168636a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:ec:fc:51:9f:b9:18:c7:3f:f0:36:8b:d3:
                    3a:5e:20:5e:a6:ff:38:29:7c:c7:4f:73:6e:1b:97:
                    f0:db:91:1c:58:93:cf:e5:b2:16:13:12:b5:0f:45:
                    64:b2:5d:4a:6a:bc:29:79:50:c8:30:4d:b5:07:5e:
                    6b:40:d6:c4:2d:0b:64:5f:91:c2:26:b3:f5:07:31:
                    2b:44:31:bb:64:e9:5b:c7:f7:45:f7:99:a2:ea:32:
                    f9:67:23:0f:ac:18:a6:f0:58:3e:f5:1e:cc:5c:a6:
                    25:13:8d:f1:bf:16:62:08:de:29:d7:31:25:d5:fa:
                    a6:1d:1e:4f:28:62:07:bd:67:71:7f:a0:e8:27:f7:
                    c5:68:62:1c:c0:bb:49:f9:e5:54:11:11:2e:8f:5c:
                    91:74:9b:d3:d2:cd:b3:2e:46:24:2a:c4:6e:33:d0:
                    7e:16:96:89:75:5a:ba:74:36:94:94:fb:1a:10:e4:
                    4b:6b:5c:90:02:9e:72:46:62:19:f7:cf:63:2f:4b:
                    3b:9b:19:44:3f:19:d7:18:f2:eb:25:70:c7:7d:1d:
                    e1:99:a2:7d:a1:2d:e5:2c:90:80:58:c8:18:43:bc:
                    74:02:a3:23:2a:41:6d:72:c4:3e:01:f8:d5:5b:b8:
                    98:48:92:8f:00:83:0d:7b:7c:a2:dc:f2:f0:64:e1:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E2:74:F1:55:4C:97:56:C1:9B:90:45:2B:D7:E6:A1:68:63:6A:47
            X509v3 Authority Key Identifier:
                keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:1e:9c:a4:51:4d:65:d8:47:b6:10:b3:0e:f6:14:01:a1:87:
         a9:2c:20:0c:af:5c:33:1c:7b:af:c4:42:e0:ba:1f:76:2b:74:
         42:38:16:b6:85:45:8a:93:39:cd:ac:de:20:52:60:0a:ea:c7:
         51:cc:3c:7e:e8:63:c9:83:3e:54:b2:6e:3f:ad:eb:05:28:76:
         b0:ae:0f:ea:1a:9e:9f:65:45:c8:d3:da:78:6e:21:e7:81:d5:
         4a:c6:fc:e4:a0:e2:ed:49:4f:56:cf:fe:2e:7d:da:dd:90:f0:
         5f:3e:7f:3d:37:f9:88:42:e6:4c:bb:d5:02:12:3f:62:a0:9e:
         a4:fa:dd:05:65:89:c4:49:1f:b3:6e:92:ae:51:2c:1b:48:1c:
         1f:02:4b:08:7a:28:bf:60:d7:bd:e5:34:28:15:36:89:de:dd:
         e3:96:b1:91:5a:5c:8e:ef:99:5f:09:5c:52:05:4e:7d:30:9f:
         3d:23:ba:4f:be:28:f0:f9:57:86:33:04:29:42:23:3c:8a:97:
         5e:5f:78:c0:61:55:68:a7:64:b7:c0:28:d7:68:8b:b5:5b:b7:
         d9:ac:d4:76:83:2e:f2:0b:81:1e:8c:b6:4f:7a:30:e2:83:5c:
         5c:b4:5e:d1:6c:3a:ab:98:d9:5a:e4:83:64:7d:a2:3b:ba:b6:
         10:cd:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:57 2026 by rpki-client