Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File:                     uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier:          k0BGUbbLEzMExZnY5crt17Y7JZvKvLGAK6qYojgqtKA=
Subject key identifier:   37:88:17:57:42:3A:31:A7:16:94:8C:8F:A3:A9:4D:8C:8B:46:91:C8
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer:       /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial:       019F9EF19379EBB6E5BC64D05ACBE4C8156B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number:          1129
Signing time:             Sun 26 Jul 2026 15:00:59 +0000
Manifest this update:     Sun 26 Jul 2026 15:00:59 +0000
Manifest next update:     Mon 27 Jul 2026 15:00:59 +0000
Files and hashes:         1: lWdEpowAzHConUoYGbrc4-nSOV4.roa (hash: 9/NPZ8xgxrX7894j4qUQTxzBQ0X/YCJM81igBGzxaPE=)
                          2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: AcYs3Y/4pqg0RbywPVSQ+q9YJXPB499k3iYeCPFXxeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f1:93:79:eb:b6:e5:bc:64:d0:5a:cb:e4:c8:15:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
        Validity
            Not Before: Jul 26 15:00:59 2026 GMT
            Not After : Jul 27 15:00:59 2026 GMT
        Subject: CN=37881757423a31a716948c8fa3a94d8c8b4691c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:48:90:ea:6c:7c:a4:21:67:a7:0e:b6:dc:fe:
                    ca:18:67:9d:a1:ad:a2:0a:0e:8d:68:48:99:1c:b0:
                    7f:d4:b4:86:a8:4c:3d:af:f7:43:d4:56:70:98:4d:
                    72:b2:29:4e:a2:1d:80:12:4c:9e:87:f2:d8:07:a2:
                    3a:5d:46:97:93:8b:c5:87:6d:b4:ae:5e:5a:21:91:
                    5d:fc:38:ae:e0:3a:58:a1:c0:6a:89:0c:e1:62:16:
                    cb:93:24:b2:1a:f0:33:58:19:f9:b2:97:21:35:69:
                    35:69:df:7a:43:19:aa:45:03:32:5c:ae:71:57:3e:
                    5d:45:b5:a9:3d:84:e8:e2:6d:76:c5:89:d0:9a:c7:
                    ce:2a:23:63:05:b5:05:2c:d0:fc:88:06:28:aa:c7:
                    22:2c:9b:55:ef:ac:ec:52:fe:9b:11:6e:a9:65:c4:
                    f9:5c:bb:3a:9e:9d:02:9b:17:75:5c:e9:06:d1:18:
                    f4:d9:5b:40:98:5d:f2:37:18:a8:e0:5a:dc:50:37:
                    4c:37:38:43:54:f2:dc:13:d0:65:0c:91:1b:9b:ee:
                    19:4a:f9:3d:93:1c:a2:85:6c:ac:d8:a5:70:c3:f7:
                    c9:c5:8e:1f:3b:b8:6f:bc:2b:d3:b8:24:63:95:5b:
                    70:d4:38:d4:6d:c8:f5:7f:85:d7:07:a9:f4:b6:03:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:88:17:57:42:3A:31:A7:16:94:8C:8F:A3:A9:4D:8C:8B:46:91:C8
            X509v3 Authority Key Identifier:
                keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:52:ea:ac:59:0e:3a:62:74:80:02:36:3e:6f:3f:04:bc:52:
         d6:ca:75:f3:be:80:39:d1:2d:15:95:11:28:dc:f3:fd:af:b6:
         59:bd:a8:2a:ee:d6:72:db:95:1a:a9:9f:53:51:3e:95:8e:92:
         a6:9f:3d:26:57:21:62:ef:59:a6:b9:6e:6d:c6:fc:04:e3:7a:
         e1:00:7f:53:9c:ea:58:90:1b:ed:3a:fb:55:ef:a9:1e:f6:4a:
         58:30:9c:b6:7b:3a:41:2b:1c:e3:55:14:3c:8c:a1:9b:7c:a4:
         54:61:78:33:34:7b:e0:72:50:6e:70:5b:08:bd:51:2a:2a:85:
         a5:d2:fd:ac:27:1f:60:9d:a0:10:82:94:f1:bc:a5:20:53:96:
         82:be:0c:40:99:f5:dc:b0:0b:2c:e7:f2:0d:d5:b9:7a:08:2d:
         22:4a:c8:5e:5a:18:22:fd:ff:cb:73:7d:89:c8:05:9e:85:dd:
         99:3c:71:f1:33:15:ef:c0:85:25:8c:a5:80:d7:58:40:c7:16:
         a2:20:6a:8c:85:b6:e4:70:d4:dd:26:50:d0:d3:50:d4:55:81:
         e2:a8:9f:1f:f7:40:73:7e:5d:91:cd:78:d4:ed:e8:37:96:c3:
         51:10:2e:44:dc:89:3b:08:b8:51:53:4d:a9:e0:73:6b:82:51:
         94:88:a5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:54:06 2026 by rpki-client