Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
File:                     UlG0CzMZisWh7fUP_whigWAzXf0.mft (raw, json)
Hash identifier:          YzNHPp50adLwVzOZHo5y4+ZaJ2PQt4ZwTqyNu2URia4=
Subject key identifier:   A9:80:CA:2D:E4:CF:8F:0F:33:1A:BC:9C:2C:F4:E0:D7:B5:EE:74:2C
Authority key identifier: 52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
Certificate issuer:       /CN=5251b40b33198ac5a1edf50fff08628160335dfd
Certificate serial:       01A00281C8DCA165BB7B2DAF45A59C09AEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
Manifest number:          1900
Signing time:             Fri 14 Aug 2026 23:00:55 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:55 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:55 +0000
Files and hashes:         1: 1nMpDLYuPfBQOmpt5pYO3-mYgaM.roa (hash: qFQcqHmma1oo39YlL2XWPJ/NbS5gxpG0P6PjvZW9cyM=)
                          2: UlG0CzMZisWh7fUP_whigWAzXf0.crl (hash: pAErNw9miBdgbE9w1doXYyomqqTbvTT+7iHMTdiAYK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:c8:dc:a1:65:bb:7b:2d:af:45:a5:9c:09:ae:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5251b40b33198ac5a1edf50fff08628160335dfd
        Validity
            Not Before: Aug 14 23:00:55 2026 GMT
            Not After : Aug 15 23:00:55 2026 GMT
        Subject: CN=a980ca2de4cf8f0f331abc9c2cf4e0d7b5ee742c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:08:05:0d:ed:7d:aa:5c:ae:ae:72:80:6b:6b:
                    aa:d5:ea:de:01:1d:74:e3:ac:8b:a5:c2:7f:8a:5c:
                    01:80:7d:2a:c4:46:09:32:01:6e:dc:76:8f:97:4e:
                    c8:37:b0:40:c1:e1:26:fa:09:59:45:19:b2:21:4c:
                    2c:29:ee:1f:3c:90:35:1e:5a:a2:b8:31:be:db:a6:
                    b0:2d:5c:02:55:ad:9d:51:50:fb:8a:d6:68:e6:e2:
                    52:a0:f1:05:57:60:3b:60:40:27:2b:b9:42:fe:d1:
                    00:1b:26:04:a1:61:fe:76:f2:df:8a:f4:cc:30:e5:
                    0d:fe:d6:84:36:46:c5:02:4e:54:1b:17:b1:b1:2e:
                    7b:39:95:ee:d8:ff:5b:60:a2:c0:83:a0:da:f4:ca:
                    0d:5f:c7:ae:14:e3:8a:91:a1:51:22:a9:65:f5:0e:
                    6c:2d:11:ee:4d:94:fb:b7:fe:be:3c:0b:c1:49:e1:
                    73:bb:bb:2d:9a:68:ec:f0:86:31:37:bc:8a:62:8e:
                    53:23:8c:f0:22:8f:d3:69:13:f0:d2:28:0c:c4:b0:
                    d9:6e:46:68:3f:41:d5:89:a2:22:3c:3b:9f:0b:e5:
                    47:95:31:85:d5:fc:c5:49:06:6b:c4:bc:a8:0d:39:
                    ab:be:e1:04:31:5a:b6:ae:43:18:02:21:1b:56:76:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:80:CA:2D:E4:CF:8F:0F:33:1A:BC:9C:2C:F4:E0:D7:B5:EE:74:2C
            X509v3 Authority Key Identifier:
                keyid:52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c3:f1:32:ab:1c:df:83:d5:d5:43:fa:c1:96:af:65:25:b6:
         85:60:cb:31:d3:f5:e5:11:b2:e8:69:88:a3:d2:2d:90:c3:32:
         c0:b0:19:46:c3:2a:17:29:ae:2f:3e:0a:62:c1:c8:c1:c9:bc:
         e0:a1:b3:7b:8b:2c:b9:d9:5e:56:6c:78:85:f0:4e:06:9e:41:
         b8:bc:f8:dd:6c:f0:02:5b:1a:1b:a4:64:cd:8f:c9:59:11:c8:
         df:2c:93:4e:83:5e:b6:6b:6f:79:32:ce:8f:8b:82:90:1a:5e:
         d6:73:ba:3f:3f:50:75:a8:b9:14:72:4f:f0:20:74:20:8d:ac:
         31:e3:73:2e:44:ba:ca:6e:d4:42:0a:b6:20:e9:a5:32:c8:56:
         d2:0f:5c:c3:55:8c:ce:65:8a:cb:ed:c9:19:b0:12:50:49:62:
         de:d8:7e:dd:0c:d0:51:19:e2:79:d4:27:cb:57:0c:a7:22:3c:
         9f:ca:33:24:c8:e7:7a:1c:65:02:74:6f:7f:42:64:94:55:97:
         ff:34:dd:ca:c0:d0:68:5e:8f:ce:24:35:9b:4a:ab:7a:9c:81:
         7f:a1:ec:88:62:b9:d2:d6:21:7d:1b:01:81:2a:42:30:fc:f7:
         c1:fd:1b:a0:22:ac:59:06:c1:be:f0:a1:b0:25:9e:c9:a0:b3:
         f1:05:9c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:03:48 2026 by rpki-client