Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
File:                     uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json)
Hash identifier:          OdYoc8KsX+tsnf478VQ244Gd8LRVmx2OpH/NzWQlce8=
Subject key identifier:   0B:C6:9A:34:95:A5:D7:7E:0E:DF:C2:A6:0E:5A:1D:32:1A:A0:A7:8C
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Certificate issuer:       /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial:       019F41D1DFAD4111B09EC32317B642BCBC6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
Manifest number:          19A0
Signing time:             Wed 08 Jul 2026 13:01:40 +0000
Manifest this update:     Wed 08 Jul 2026 13:01:40 +0000
Manifest next update:     Thu 09 Jul 2026 13:01:40 +0000
Files and hashes:         1: 9Q6nU6Ov__KOkTwmSpk1ZBP9x4s.roa (hash: zRA5CI+R45kbSe5Kp/RvwdAAuwY45TD/QhpgQ2cow9Q=)
                          2: 9zanIZ7MEeT1oHmM73KPnI3KUEM.roa (hash: Jme7qQGkxTK5eI1p9XNoTtTYwDVKr6hYwFmD3XiO9Sk=)
                          3: Et1_SdwbVg4dskwSsE8Bb6_r0BQ.roa (hash: fkDE9HZ2X/FoPpPBL/xBOgXNWoBnauSZriz8/UyefOQ=)
                          4: nJVTV_xC46i_jMWC0u5aQlLsYTI.roa (hash: 1PR1dDwuBSuvJYidaakEzx/AJjq3GTgS+XI3K+QB2/k=)
                          5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: 2D4+lYjrW2AijsZSYM3NXDDmTztWqoEhR0L0FRKfgZY=)
                          6: xUOg3UnR5NzZnsoqQTCM2z8QcuA.roa (hash: 1+/9Z/D/KU/a6AJWSS+7jp2T1wnZtSaOlAbOLEGldwc=)
                          7: yN-B2V0Dka04y-vFp5uchumgtKY.roa (hash: HJDoxjycVkfIV6zIX1nmMl83dxZXyYJ/bjTRUSF4UQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:41:d1:df:ad:41:11:b0:9e:c3:23:17:b6:42:bc:bc:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
        Validity
            Not Before: Jul  8 13:01:40 2026 GMT
            Not After : Jul  9 13:01:40 2026 GMT
        Subject: CN=0bc69a3495a5d77e0edfc2a60e5a1d321aa0a78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:3f:1c:e2:6c:ca:3a:49:ba:1e:2f:f0:0d:
                    c5:7e:e0:65:d1:b4:77:24:9a:e9:9e:e7:62:51:af:
                    ae:b7:2b:e8:b3:b2:f6:63:9c:e2:3b:e5:93:44:8b:
                    70:bf:8b:82:41:20:1d:56:de:c1:40:ec:87:dd:25:
                    19:78:55:ee:74:c4:cd:7d:31:ea:98:b2:f4:e0:07:
                    18:0c:4d:e6:31:f2:dd:07:96:16:1a:a5:3e:31:60:
                    dc:57:83:4e:44:a5:4e:b6:ae:3b:14:9c:26:a5:dd:
                    98:54:29:69:e2:2d:a4:bd:72:7f:2f:9c:e7:92:94:
                    66:0b:1c:a1:2b:30:85:95:eb:fb:ec:67:47:3e:c9:
                    99:9e:00:db:85:88:8d:6a:87:e7:c1:48:a8:6d:96:
                    f7:c2:aa:28:e8:21:54:e0:97:c0:cd:c9:ef:d6:f1:
                    ed:4b:ea:01:db:45:77:b6:4a:43:73:26:e2:70:5e:
                    44:e8:f9:91:21:99:83:86:74:c3:8b:51:97:0d:92:
                    c7:04:17:f4:fe:06:d9:5e:a4:3e:37:c5:92:26:ce:
                    59:13:dc:d9:4e:1b:a5:61:43:65:12:4d:ad:73:bb:
                    1d:57:f2:74:2c:8a:29:ea:cd:13:53:98:04:aa:13:
                    91:3d:9e:d7:dd:3e:59:bc:df:d2:64:82:6c:30:35:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C6:9A:34:95:A5:D7:7E:0E:DF:C2:A6:0E:5A:1D:32:1A:A0:A7:8C
            X509v3 Authority Key Identifier:
                keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:26:0a:65:de:04:f6:f2:89:ba:db:ff:e9:db:89:ba:a2:06:
         9f:a5:eb:07:62:42:39:25:7a:89:b6:fb:39:97:59:f1:dd:e2:
         16:0e:79:96:74:6d:83:ea:f3:67:b7:84:4b:f9:f5:11:64:03:
         33:ca:96:67:68:23:f0:fc:fd:f6:75:fd:94:79:ab:9b:a9:a6:
         ff:8a:ca:df:32:0a:df:4b:b3:d7:1b:26:c3:3d:31:46:d6:f1:
         97:21:4d:17:ac:ea:b9:a9:3d:94:c4:8d:57:bb:cd:33:10:a6:
         20:d9:ce:7c:3b:98:85:82:97:04:5a:0f:23:13:20:c7:13:dc:
         d7:7f:eb:94:ea:f2:bf:6a:d2:97:ff:6b:bf:03:fd:82:f7:4a:
         96:99:d6:fd:c3:68:65:25:88:b5:06:60:18:66:f5:28:b3:c8:
         c9:69:12:5d:40:3c:0f:9d:2e:99:4c:e7:3d:4b:5d:7b:f3:db:
         ee:9d:ad:0f:db:5b:21:92:c8:f2:28:c7:da:d7:1a:b2:1f:ea:
         47:f6:dd:9b:ba:28:3a:5f:6d:ee:25:ef:1b:92:f6:54:69:1e:
         56:d0:b9:58:dc:63:9f:eb:a2:ec:79:0c:50:1d:54:d5:65:e6:
         24:ff:56:0b:6e:80:4b:98:3a:2b:fe:e9:c4:8b:b9:7d:59:e5:
         56:b4:16:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9B0d+tQRGwnsMjF7ZCvLxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDI1MWM0YmZkNTI2ZGEwNjJkNGNlMmFmNTZiNmU0NmU5
MjUxMTcwHhcNMjYwNzA4MTMwMTQwWhcNMjYwNzA5MTMwMTQwWjAzMTEwLwYDVQQD
EygwYmM2OWEzNDk1YTVkNzdlMGVkZmMyYTYwZTVhMWQzMjFhYTBhNzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz8/HOJsyjpJuh4v8A3FfuBl0bR3
JJrpnudiUa+utyvos7L2Y5ziO+WTRItwv4uCQSAdVt7BQOyH3SUZeFXudMTNfTHq
mLL04AcYDE3mMfLdB5YWGqU+MWDcV4NORKVOtq47FJwmpd2YVClp4i2kvXJ/L5zn
kpRmCxyhKzCFlev77GdHPsmZngDbhYiNaofnwUiobZb3wqoo6CFU4JfAzcnv1vHt
S+oB20V3tkpDcybicF5E6PmRIZmDhnTDi1GXDZLHBBf0/gbZXqQ+N8WSJs5ZE9zZ
ThulYUNlEk2tc7sdV/J0LIop6s0TU5gEqhORPZ7X3T5ZvN/SZIJsMDUH9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvGmjSVpdd+Dt/Cpg5aHTIaoKeMMB8GA1UdIwQY
MBaAFLjSUcS/1SbaBi1M4q9WtuRuklEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAt
NDJiM2Q2OGI1Njc2LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAtNDJiM2Q2OGI1Njc2
LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciYKZd4E
9vKJutv/6duJuqIGn6XrB2JCOSV6ibb7OZdZ8d3iFg55lnRtg+rzZ7eES/n1EWQD
M8qWZ2gj8Pz99nX9lHmrm6mm/4rK3zIK30uz1xsmwz0xRtbxlyFNF6zquak9lMSN
V7vNMxCmINnOfDuYhYKXBFoPIxMgxxPc13/rlOryv2rSl/9rvwP9gvdKlpnW/cNo
ZSWItQZgGGb1KLPIyWkSXUA8D50umUznPUtde/Pb7p2tD9tbIZLI8ijH2tcash/q
R/bdm7ooOl9t7iXvG5L2VGkeVtC5WNxjn+ui7HkMUB1U1WXmJP9WC26AS5g6K/7p
xIu5fVnlVrQWyw==
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:40:50 2026 by rpki-client