Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
File:                     uHLaD5xsVoaj257hJKmQQrCogtE.mft (raw, json)
Hash identifier:          qEwxEi26HO70bvhk45BEfOhq06/lGkM8DPXA3/CU6K4=
Subject key identifier:   10:5B:5D:27:DA:B8:23:74:6A:38:52:72:AC:0D:30:40:CD:43:A7:19
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Certificate issuer:       /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial:       019F9E4C75337D107A9A62CF996595BC20B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
Manifest number:          19CC
Signing time:             Sun 26 Jul 2026 12:00:38 +0000
Manifest this update:     Sun 26 Jul 2026 12:00:38 +0000
Manifest next update:     Mon 27 Jul 2026 12:00:38 +0000
Files and hashes:         1: 4i8l1Q-FIgnv4ElEMlL-rxdJK5Q.roa (hash: FSXcacLcS9NFl9QL5QX0dsKZrr4j/cA0RvIb9VXgClE=)
                          2: 5z2ugNN4RBvN-s8lDFfAdlsr0vM.roa (hash: +MFvjCgMQZKr4AK37XrGX62GkhpOrU8EW9hs8ZLbdbE=)
                          3: 91jzPpyhLA-PAXeNm7LV01McVYk.roa (hash: zVfFgQK9yW19axQR7Z9c3CenPU09qBELr2O2n+U7UAs=)
                          4: uHLaD5xsVoaj257hJKmQQrCogtE.crl (hash: 5lua+emgzRf08o8k0JVi5Kkeuo5orl2pux2/NZGITJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:4c:75:33:7d:10:7a:9a:62:cf:99:65:95:bc:20:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
        Validity
            Not Before: Jul 26 12:00:38 2026 GMT
            Not After : Jul 27 12:00:38 2026 GMT
        Subject: CN=105b5d27dab823746a385272ac0d3040cd43a719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:47:ba:a3:1b:02:fa:b5:49:99:a2:5e:28:bd:
                    b9:e5:ee:93:d3:1f:3e:d0:2f:12:3f:4b:12:09:42:
                    f5:b7:3f:5e:25:1f:b7:5d:05:68:b1:60:6c:43:14:
                    97:9a:c7:85:5c:08:78:ec:7e:57:d3:83:88:4e:7c:
                    b8:6d:1b:7a:e1:ab:7d:da:f3:fa:ed:30:45:14:b8:
                    da:8b:14:04:1a:b4:ce:14:76:fe:de:0e:8c:d8:40:
                    d0:bd:75:91:7e:6b:d0:5e:ad:32:69:bb:ad:df:eb:
                    c0:80:aa:7e:f9:a2:c5:f1:3d:d9:30:be:67:df:4c:
                    ab:f2:39:8c:66:67:a4:23:3f:24:dd:fe:c6:af:0e:
                    e0:b4:30:41:08:9e:3e:45:9a:83:95:0d:31:7b:68:
                    e6:90:f6:3a:62:f4:a7:b4:a1:8f:c6:0c:8e:91:9c:
                    99:cb:cb:78:af:c4:51:22:f1:c7:e4:3e:27:5b:39:
                    25:71:37:8e:32:53:64:21:8c:22:18:63:fc:7b:0e:
                    dc:4d:20:f9:8b:bb:14:a0:c2:3c:bb:32:d7:e3:c3:
                    c8:c8:10:27:8d:34:80:67:c0:ef:7d:70:c2:55:10:
                    e6:00:b8:77:55:28:f6:97:9e:63:99:96:4a:88:29:
                    72:14:37:d3:aa:9a:1d:06:bd:9f:86:9c:4d:7f:b3:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5B:5D:27:DA:B8:23:74:6A:38:52:72:AC:0D:30:40:CD:43:A7:19
            X509v3 Authority Key Identifier:
                keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ee:b5:42:1c:68:08:c4:b7:e4:0d:f1:bc:12:9d:9c:c8:62:
         24:20:1b:9e:50:7f:4a:a6:d2:34:63:3f:bb:c8:56:ce:60:a3:
         39:d8:79:47:63:d3:e8:b9:98:1a:1f:ec:be:f5:08:43:88:c2:
         8e:23:08:5c:01:07:11:f0:0c:a1:d7:ea:3a:c3:f8:ca:89:1b:
         1d:18:8f:5a:1a:45:d1:f5:dd:c5:88:78:c6:9f:e0:f3:72:3f:
         82:58:aa:91:ac:39:28:c6:fc:00:1f:41:16:d4:3b:11:96:06:
         69:a8:85:60:d7:74:f2:d1:a4:a7:64:de:d4:e0:60:a1:27:eb:
         4c:7b:f9:ed:41:26:71:44:8c:8c:52:ff:06:6c:47:64:77:af:
         af:85:77:0a:db:5e:1a:44:32:25:b4:e2:1d:d6:94:6c:c6:32:
         6c:9b:c0:33:5b:22:ad:75:56:5d:c0:40:83:9b:67:54:4c:47:
         e0:96:b1:29:c4:9f:56:c5:ef:66:4d:8b:f4:21:13:f4:9e:26:
         ef:e5:44:c6:db:6c:16:51:d5:6d:35:d5:ab:92:30:1e:1b:75:
         87:35:63:14:c0:20:d4:cc:aa:08:22:db:2e:6a:61:36:46:24:
         fa:d4:aa:0b:12:a1:27:f3:3e:2d:41:4b:6d:f2:5f:b7:ae:ca:
         0c:7e:e3:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+eTHUzfRB6mmLPmWWVvCCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NzJkYTBmOWM2YzU2ODZhM2RiOWVlMTI0YTk5MDQyYjBh
ODgyZDEwHhcNMjYwNzI2MTIwMDM4WhcNMjYwNzI3MTIwMDM4WjAzMTEwLwYDVQQD
EygxMDViNWQyN2RhYjgyMzc0NmEzODUyNzJhYzBkMzA0MGNkNDNhNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30e6oxsC+rVJmaJeKL255e6T0x8+
0C8SP0sSCUL1tz9eJR+3XQVosWBsQxSXmseFXAh47H5X04OITny4bRt64at92vP6
7TBFFLjaixQEGrTOFHb+3g6M2EDQvXWRfmvQXq0yabut3+vAgKp++aLF8T3ZML5n
30yr8jmMZmekIz8k3f7Grw7gtDBBCJ4+RZqDlQ0xe2jmkPY6YvSntKGPxgyOkZyZ
y8t4r8RRIvHH5D4nWzklcTeOMlNkIYwiGGP8ew7cTSD5i7sUoMI8uzLX48PIyBAn
jTSAZ8DvfXDCVRDmALh3VSj2l55jmZZKiClyFDfTqpodBr2fhpxNf7NVbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBbXSfauCN0ajhScqwNMEDNQ6cZMB8GA1UdIwQY
MBaAFLhy2g+cbFaGo9ue4SSpkEKwqILRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMt
ZTIzMTAzYTg4MDUyLzEvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMtZTIzMTAzYTg4MDUy
LzEvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+61Qhxo
CMS35A3xvBKdnMhiJCAbnlB/SqbSNGM/u8hWzmCjOdh5R2PT6LmYGh/svvUIQ4jC
jiMIXAEHEfAModfqOsP4yokbHRiPWhpF0fXdxYh4xp/g83I/gliqkaw5KMb8AB9B
FtQ7EZYGaaiFYNd08tGkp2Te1OBgoSfrTHv57UEmcUSMjFL/BmxHZHevr4V3Ctte
GkQyJbTiHdaUbMYybJvAM1sirXVWXcBAg5tnVExH4JaxKcSfVsXvZk2L9CET9J4m
7+VExttsFlHVbTXVq5IwHht1hzVjFMAg1MyqCCLbLmphNkYk+tSqCxKhJ/M+LUFL
bfJft67KDH7jWw==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:28:14 2026 by rpki-client