Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File:                     ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier:          0aJzQRvIV7TcDtXi6jce+UbweX6AFLJECFXfEfKVnvE=
Subject key identifier:   71:6E:FB:2E:D6:08:2C:5D:0E:4D:1E:F8:49:E9:A9:95:BD:D0:1B:C3
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer:       /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial:       019F27A436B874AB172AD73A0559601A1A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number:          1990
Signing time:             Fri 03 Jul 2026 11:01:41 +0000
Manifest this update:     Fri 03 Jul 2026 11:01:41 +0000
Manifest next update:     Sat 04 Jul 2026 11:01:41 +0000
Files and hashes:         1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=)
                          2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: KptysI91zv4qQE9HC3zNPbArxl/bYPBQ072cPljlawQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:27:a4:36:b8:74:ab:17:2a:d7:3a:05:59:60:1a:1a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
        Validity
            Not Before: Jul  3 11:01:41 2026 GMT
            Not After : Jul  4 11:01:41 2026 GMT
        Subject: CN=716efb2ed6082c5d0e4d1ef849e9a995bdd01bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1b:52:1b:c3:36:56:b6:1f:c1:d4:9f:7f:99:
                    46:1e:48:17:d3:fd:bc:3f:2a:5d:e5:58:ef:f7:51:
                    29:21:38:c5:a6:1a:0e:61:5a:e8:6a:8f:d9:e5:0b:
                    71:db:48:52:f0:4b:42:cc:6c:5a:d5:7f:ee:4d:0f:
                    f8:ea:86:17:74:af:c5:ee:1c:62:c2:69:d6:19:66:
                    bc:cb:ef:10:45:ab:13:56:ca:87:d8:f7:e0:6f:0e:
                    67:c7:bb:b8:25:1f:18:a2:1a:f4:5c:18:15:0a:6e:
                    cc:d7:8c:7f:fe:88:66:89:5a:b8:bd:2e:fa:15:9e:
                    cd:e3:64:19:6d:18:96:02:a7:3e:4f:a8:8c:2d:b4:
                    31:e4:2d:00:61:37:6f:ca:7c:52:24:c5:05:f2:f9:
                    92:fa:54:6a:72:80:82:75:e2:fd:8b:85:2f:3f:39:
                    a4:57:67:5f:e0:92:9a:b7:98:91:a8:98:ae:b5:ca:
                    d8:5e:7b:18:7d:1f:1a:e1:2e:d2:41:a6:d8:f2:3a:
                    d1:d4:cf:b7:80:26:cc:4a:66:9c:ad:33:41:06:1b:
                    4c:b8:17:d6:2c:b5:fd:46:42:bd:7a:e9:7f:73:55:
                    7e:ff:aa:cf:5a:f0:1b:0a:d2:d2:f4:de:56:e5:3c:
                    91:a9:f5:b0:e7:e4:00:b1:ee:53:71:c4:c6:68:fb:
                    dc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6E:FB:2E:D6:08:2C:5D:0E:4D:1E:F8:49:E9:A9:95:BD:D0:1B:C3
            X509v3 Authority Key Identifier:
                keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:76:36:f8:cb:d2:df:81:f7:c4:da:c5:74:d0:31:b6:8e:0e:
         41:18:6d:5c:1f:a3:51:91:66:8b:e5:79:fd:ac:a8:e1:1c:72:
         2c:de:32:ae:d4:37:66:b5:30:97:6a:8a:f1:b8:1e:aa:90:18:
         55:2d:5f:eb:1c:46:9a:ab:3c:bd:e2:99:83:31:2d:ce:d9:2d:
         ed:4f:74:96:b7:e4:b9:9f:12:8c:3c:cc:d4:cc:da:f3:b5:eb:
         8f:6b:ec:f0:b0:01:2b:e2:97:35:0e:06:9d:39:eb:e5:51:41:
         2d:6a:f9:92:20:55:3c:74:06:8e:2e:69:de:88:ca:e0:24:de:
         25:9e:94:22:0b:be:5a:a1:bf:8d:b7:55:b7:fa:c1:f8:45:d0:
         9e:d8:48:75:b4:3a:55:9c:fb:65:5d:4d:99:07:33:0a:0d:c8:
         50:fc:bc:96:55:02:cc:62:26:a4:1e:30:6e:cb:6b:32:60:60:
         14:d4:41:90:a6:00:cc:35:4d:4f:d6:96:88:ba:f1:aa:4f:1d:
         cd:72:eb:bc:da:86:70:92:23:7a:f0:5b:23:5b:b0:2a:96:e6:
         65:83:1a:19:96:87:28:ac:8b:cd:18:d6:e7:d6:96:9e:13:37:
         08:ad:e8:f6:2f:04:79:7a:39:91:8a:0f:08:2d:04:c6:79:12:
         50:2f:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:39:01 2026 by rpki-client