Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File:                     UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier:          TdiJP+DOSLDRnq8oskzl6SIL37cQftOIYwkQTJbnZA8=
Subject key identifier:   78:F0:8A:26:BD:FD:EE:4B:86:9A:39:AD:F2:AF:9B:CA:9E:8B:70:A1
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer:       /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial:       019FA1164751C391CC567957A7DFD9DB7614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number:          19CF
Signing time:             Mon 27 Jul 2026 01:00:19 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:19 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:19 +0000
Files and hashes:         1: R5_iJAHMim0AgymJSQ6r4wQbiHw.roa (hash: EQeRHkG43biXk81xozYoB7VEoug0HoUQn327W+HkcVI=)
                          2: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: sTE1FMk/6JXAhh9J+vwSvdkn/gFezg3fNboa+MI7g9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:47:51:c3:91:cc:56:79:57:a7:df:d9:db:76:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
        Validity
            Not Before: Jul 27 01:00:19 2026 GMT
            Not After : Jul 28 01:00:19 2026 GMT
        Subject: CN=78f08a26bdfdee4b869a39adf2af9bca9e8b70a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:a9:58:ce:20:77:96:38:ef:a1:26:af:b1:
                    0e:ab:57:7d:f6:c9:c3:b0:82:82:9c:67:a8:f2:1c:
                    7a:cb:d4:de:d1:ea:84:7a:b9:b1:d6:f7:df:32:ea:
                    18:5b:62:0f:c7:e4:a0:e5:fa:48:e8:4b:13:c3:65:
                    67:7e:17:24:5a:fb:83:22:24:4d:68:96:9a:7b:d8:
                    9b:3c:b4:cc:09:ec:42:1f:39:74:70:88:51:8f:90:
                    66:a3:9b:89:d5:06:9e:e6:fc:d6:b1:97:de:b3:85:
                    10:8d:c7:49:b5:0b:2d:8d:95:b9:03:4e:69:c1:42:
                    d7:c5:cc:49:97:66:7a:f5:fc:1d:34:01:bc:58:83:
                    a1:28:e2:e5:cf:ef:5a:85:6d:23:8b:7a:84:39:d2:
                    41:50:b4:f5:3b:c9:4b:3e:3d:61:79:ad:1c:fd:ba:
                    38:e2:d7:67:26:4f:4a:54:fc:3b:ae:9b:fa:b5:3b:
                    ab:9f:9e:a2:56:15:05:86:a3:63:c8:0b:40:f1:e7:
                    fb:ee:30:ae:c9:1d:fb:27:90:35:bc:1b:4a:5c:41:
                    b9:82:7e:28:7f:49:fa:81:c3:4b:89:7d:8f:b8:b2:
                    d3:09:08:cb:e4:a8:ea:2a:a3:28:59:36:b2:af:da:
                    df:da:df:84:74:61:02:de:98:e5:2b:ef:af:d7:0b:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F0:8A:26:BD:FD:EE:4B:86:9A:39:AD:F2:AF:9B:CA:9E:8B:70:A1
            X509v3 Authority Key Identifier:
                keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b1:64:3d:b6:d7:a9:58:58:f1:9b:24:d7:88:d5:2e:d3:7e:
         05:57:20:7c:41:e8:3e:39:e6:27:e3:ee:bc:f7:fd:95:12:fc:
         d8:fb:0d:b8:86:47:aa:98:7d:39:39:53:65:45:89:a5:a4:73:
         c5:06:d8:a5:1c:67:d3:1e:89:46:55:d4:51:02:56:63:d3:b7:
         62:0a:59:64:2c:b9:36:99:cb:09:d4:dd:f0:48:5f:3a:ed:40:
         70:60:0c:35:43:38:ee:ee:b2:82:d8:75:df:39:63:a1:12:f4:
         fc:62:4d:98:a0:48:fb:fd:b1:e3:8c:02:a4:ad:2f:75:aa:db:
         91:51:42:7e:23:fb:c0:1b:8e:81:6e:f7:fe:ea:dd:e3:94:57:
         58:3f:a7:da:d0:19:0c:28:af:4a:dd:32:da:13:55:ab:e1:7d:
         bc:d3:ce:62:96:82:2d:e7:b3:d8:2c:a1:a6:cc:9b:50:fa:bd:
         53:90:54:54:14:20:0d:bf:fd:26:ec:4f:c4:88:b2:10:8f:fe:
         6b:19:6a:9f:0b:e1:95:7a:13:02:f3:b4:f8:5e:df:07:92:2b:
         55:11:2e:8f:53:b5:ae:f3:37:83:5e:07:e7:08:c4:7f:3d:7c:
         16:80:09:70:20:ab:8c:c6:5e:52:fe:b5:05:87:8d:da:91:22:
         40:12:76:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:22:55 2026 by rpki-client