Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
File:                     UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft (raw, json)
Hash identifier:          LxxjMxyZvjak5wVweK98T4KCQ7RD5cxiCQkwG7/zgy8=
Subject key identifier:   14:2B:B0:9B:FE:57:38:5A:B4:03:9D:28:EB:1E:7A:55:9D:45:0A:BA
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Certificate issuer:       /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial:       01A0024AF107DD65819132152049AD44F8B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
Manifest number:          1A24
Signing time:             Fri 14 Aug 2026 22:01:00 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:00 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:00 +0000
Files and hashes:         1: 189-AMpP1NIU3eX6E6TgSKDQxCw.roa (hash: 6qdFChm/yc6IeFFl2FMtTFYStfg0kPnB4dIgZqsOhNs=)
                          2: 7M-hWDkDn5Y2lJqJLzhCYzFSMBc.roa (hash: KXN7U8564EfllgkcnSlbq0Ol7VdnYcZ9gKliZSfccKY=)
                          3: Iz81YeF4Yaopqn4t0LL3OA1IuQs.roa (hash: U7q18MGaToAHycayT/bTwS2UUHwaN8gc3zIyXx5SQn4=)
                          4: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl (hash: 0nLjiwxQa8rnJlESTRUC4LuZQY0hMt0whwbPEtLqF1k=)
                          5: VQiElCspYygojHZx1e_d787gq8M.roa (hash: cYsGyxOGTSDbkK7Bo8Dcbyj6xyiZ7rpceD54Wi9Pnvo=)
                          6: XonmnFu_hl5fLd1NFTkRdlszSzs.roa (hash: nis1JSWNkVlYV4JdLmei0R+V1a6IX6+JXGHy2zIU2ZA=)
                          7: tO23-qMAsDBtU6MpF4WNQK1Xeg0.roa (hash: iFIhOTOP6nzdiLHdfwCuFc8wGiIOLQ6R04Q5J4q3fuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:f1:07:dd:65:81:91:32:15:20:49:ad:44:f8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
        Validity
            Not Before: Aug 14 22:01:00 2026 GMT
            Not After : Aug 15 22:01:00 2026 GMT
        Subject: CN=142bb09bfe57385ab4039d28eb1e7a559d450aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:e5:80:85:07:35:f0:25:fe:c9:38:23:bb:
                    8b:3c:49:63:a1:bf:b7:64:04:7d:e1:92:c9:5b:fe:
                    a5:2e:38:22:51:5c:c0:c8:ea:09:78:07:40:c8:61:
                    02:2d:da:83:36:26:d7:33:ab:c5:b6:ea:f8:10:f6:
                    65:cf:82:48:c3:a2:97:01:9e:22:88:d8:0a:47:8a:
                    cc:33:f4:e0:dc:6b:07:f3:4f:7f:65:66:47:cf:4d:
                    06:d9:f8:55:47:18:36:2f:d1:00:f1:0f:16:a1:94:
                    b8:12:81:ef:d9:b3:9a:6e:1e:53:98:6d:bb:5b:0d:
                    d0:bb:ae:76:18:7c:c9:47:17:10:4f:ff:72:8f:03:
                    04:13:c3:57:9e:04:09:17:2b:71:d7:85:f0:1d:cf:
                    38:5d:23:a3:30:10:b7:3e:f7:0b:95:dc:e7:32:5d:
                    6f:24:4f:0b:1c:7b:73:65:e8:ae:60:70:b2:49:23:
                    14:a9:d2:06:f2:9d:f6:ed:2e:45:19:48:eb:82:83:
                    93:bf:12:5b:d9:03:dc:f0:5f:15:99:88:de:02:ac:
                    a4:9d:16:43:0a:40:37:9a:38:6c:df:bc:9f:50:b1:
                    d5:2c:b3:3a:71:27:e5:d8:1b:55:07:1e:9a:48:91:
                    2d:68:e4:a3:a4:e0:a2:0a:86:e9:6a:22:68:6d:a3:
                    c6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2B:B0:9B:FE:57:38:5A:B4:03:9D:28:EB:1E:7A:55:9D:45:0A:BA
            X509v3 Authority Key Identifier:
                keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:37:37:46:33:2a:e8:c8:9e:7d:18:ac:0e:69:1b:70:4d:a8:
         1d:82:68:af:c6:84:d3:a2:d2:a6:c4:21:e7:97:a6:8b:d9:a0:
         76:5d:02:bc:b2:15:54:a4:c2:e6:1b:dc:9d:52:a5:1c:02:84:
         5b:c9:73:f7:37:2c:7e:91:e3:e1:02:cf:ab:39:17:b2:b3:62:
         f2:8a:54:e5:32:7f:16:cf:ca:15:a2:07:96:73:bd:0d:0a:92:
         c1:0d:c3:68:65:75:94:60:e4:86:cd:4d:f8:69:a2:a2:31:26:
         dc:5f:31:bf:f1:b1:b3:79:4b:7b:d5:58:01:f7:36:da:a2:6e:
         f5:ab:4a:ad:65:7e:b8:8f:a6:71:0d:98:6c:b7:83:8f:5f:2f:
         bc:d5:df:22:a7:2c:74:e6:0b:b4:59:52:c7:1e:75:a2:f5:d4:
         a4:8a:6e:6e:ba:c1:39:67:79:6c:54:25:a5:51:bc:99:0e:d2:
         ef:2d:00:8b:a4:e1:d8:42:ba:93:3d:25:57:75:c5:9c:88:93:
         39:31:55:54:d2:14:06:e5:84:b0:f2:cf:d1:79:67:e8:08:a2:
         60:b0:af:ec:ba:aa:99:97:3b:7e:26:44:25:0e:64:58:de:f6:
         72:e7:f1:e5:3d:34:8c:3b:1f:ac:7b:59:b8:c6:19:72:6b:6d:
         21:fd:67:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSvEH3WWBkTIVIEmtRPi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzFlNDI2ZjU4ZTQyYWUzMGU1NmNkYjdmZjRkOGY5ZGRk
ODViMzAwHhcNMjYwODE0MjIwMTAwWhcNMjYwODE1MjIwMTAwWjAzMTEwLwYDVQQD
EygxNDJiYjA5YmZlNTczODVhYjQwMzlkMjhlYjFlN2E1NTlkNDUwYWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8blgIUHNfAl/sk4I7uLPEljob+3
ZAR94ZLJW/6lLjgiUVzAyOoJeAdAyGECLdqDNibXM6vFtur4EPZlz4JIw6KXAZ4i
iNgKR4rMM/Tg3GsH809/ZWZHz00G2fhVRxg2L9EA8Q8WoZS4EoHv2bOabh5TmG27
Ww3Qu652GHzJRxcQT/9yjwMEE8NXngQJFytx14XwHc84XSOjMBC3PvcLldznMl1v
JE8LHHtzZeiuYHCySSMUqdIG8p327S5FGUjrgoOTvxJb2QPc8F8VmYjeAqyknRZD
CkA3mjhs37yfULHVLLM6cSfl2BtVBx6aSJEtaOSjpOCiCobpaiJobaPGcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQrsJv+VzhatAOdKOseelWdRQq6MB8GA1UdIwQY
MBaAFFDB5Cb1jkKuMOVs23/02Pnd2FswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMt
MDYzY2U2Y2Y0NjBkLzEvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMtMDYzY2U2Y2Y0NjBk
LzEvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzc3RjMq
6MiefRisDmkbcE2oHYJor8aE06LSpsQh55emi9mgdl0CvLIVVKTC5hvcnVKlHAKE
W8lz9zcsfpHj4QLPqzkXsrNi8opU5TJ/Fs/KFaIHlnO9DQqSwQ3DaGV1lGDkhs1N
+GmiojEm3F8xv/Gxs3lLe9VYAfc22qJu9atKrWV+uI+mcQ2YbLeDj18vvNXfIqcs
dOYLtFlSxx51ovXUpIpubrrBOWd5bFQlpVG8mQ7S7y0Ai6Th2EK6kz0lV3XFnIiT
OTFVVNIUBuWEsPLP0Xln6AiiYLCv7LqqmZc7fiZEJQ5kWN72cufx5T00jDsfrHtZ
uMYZcmttIf1nuw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:30 2026 by rpki-client