Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File:                     Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier:          PhEx4o7F7TosBKvvyZwbvtSl7waFVSv0EhjdEPPYr7A=
Subject key identifier:   58:BD:1F:37:70:4A:AF:32:9F:DC:EC:86:31:60:03:ED:98:89:74:12
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer:       /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial:       01A004DDAC5511A989839C3CD66F69C8795B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number:          1924
Signing time:             Sat 15 Aug 2026 10:00:31 +0000
Manifest this update:     Sat 15 Aug 2026 10:00:31 +0000
Manifest next update:     Sun 16 Aug 2026 10:00:31 +0000
Files and hashes:         1: DkKDajpTHwTuNMIpxKTAMDGQDDo.roa (hash: X10Ua4dlXVpqCEjX6L/K3mZaPDpI5fuPVZc9nBQdT8k=)
                          2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: 0QSqya9pv1Tnl2dO8pPGk7jtYxRKdSgVhNtv3pK2zY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:dd:ac:55:11:a9:89:83:9c:3c:d6:6f:69:c8:79:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
        Validity
            Not Before: Aug 15 10:00:31 2026 GMT
            Not After : Aug 16 10:00:31 2026 GMT
        Subject: CN=58bd1f37704aaf329fdcec86316003ed98897412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:12:de:1c:d8:56:95:00:17:61:b3:27:9d:
                    f2:4f:69:63:3a:20:4f:b1:65:6b:9a:f7:32:f3:51:
                    f3:01:73:a0:dd:75:0e:ae:93:2b:75:32:6c:81:63:
                    30:5f:5f:5a:04:bd:ca:a3:d7:93:52:b8:a3:eb:aa:
                    55:2d:cd:bf:e8:e4:64:c2:28:be:6e:1d:94:d3:c4:
                    42:30:42:34:c9:cb:a2:11:c0:99:c8:fb:70:20:1b:
                    3d:83:41:98:0f:d1:a6:ec:c4:91:4c:40:1f:86:42:
                    a6:42:a6:83:99:11:3f:b4:c1:9b:01:fb:b5:d3:82:
                    98:a0:ca:5e:38:0c:4e:80:27:35:d2:be:67:ea:06:
                    3b:f4:39:9e:c9:a0:06:9e:52:d4:81:85:01:f7:aa:
                    9a:3e:9d:a1:61:df:74:d3:00:7d:0b:3f:70:fc:4d:
                    3e:93:31:9f:7a:99:57:99:b7:fb:15:70:8e:e2:6f:
                    7c:ea:21:14:25:e3:3e:d4:13:29:83:b0:98:62:00:
                    a7:f7:4c:82:2a:19:29:ad:3b:69:3e:3f:ef:bf:17:
                    d4:18:1f:36:36:fb:7f:47:ad:89:81:64:fd:f4:92:
                    2a:da:d7:c0:9f:1b:bd:89:15:8f:74:b6:fb:9f:eb:
                    3b:43:80:bf:ad:89:37:8b:ab:68:1d:d0:22:a6:1e:
                    1b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BD:1F:37:70:4A:AF:32:9F:DC:EC:86:31:60:03:ED:98:89:74:12
            X509v3 Authority Key Identifier:
                keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:27:cf:af:0f:86:fa:e2:ed:69:76:11:f6:5e:9a:e2:25:46:
         a9:02:e6:3f:c1:9a:2b:f3:27:1e:14:b5:e8:46:2e:a6:f8:6f:
         05:14:72:0f:62:77:c3:90:58:0a:95:a9:be:33:22:37:24:50:
         7e:b8:0c:63:19:ab:c7:b9:69:54:1a:61:eb:2e:5c:84:65:36:
         43:28:ef:e6:30:63:a5:c9:c2:b9:70:52:6f:7e:a1:a2:7c:43:
         58:2b:21:58:b7:4b:4b:40:f8:3b:c8:20:f2:61:97:db:31:81:
         11:dd:c1:ac:1f:7d:f6:bd:4b:f5:cc:ce:0b:79:0f:09:aa:75:
         24:8b:2a:f1:b1:d3:97:65:e7:b4:09:f9:2a:20:cd:e5:67:df:
         d3:63:59:93:dd:22:d4:07:ee:fd:2f:32:4d:3f:7b:72:e7:79:
         58:b3:d2:17:1e:c9:4f:f8:3c:d7:53:fe:9e:41:63:e7:05:46:
         fb:97:d2:8a:9f:e2:a0:b5:67:c3:d8:a1:d9:43:b4:d6:ff:4a:
         22:42:93:d6:f1:30:e8:34:f4:54:9e:e3:da:24:cc:42:e9:31:
         b2:8c:5c:58:c1:da:38:e3:51:86:1a:70:7e:c9:dd:c1:38:61:
         50:08:19:ee:bf:cb:27:27:19:8d:90:0b:17:c3:47:09:21:ae:
         00:e7:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 12:56:25 2026 by rpki-client