Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
File:                     UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft (raw, json)
Hash identifier:          /opSpNQ458TDTp7FmtyTTcrKY10vYMl4cvfu9uY4Ujs=
Subject key identifier:   18:AA:40:B2:57:70:BA:E1:AD:F9:CF:E5:B5:ED:51:80:71:70:95:6D
Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Certificate issuer:       /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Certificate serial:       019FA14D5B367FCA400871806429BA9AF53D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
Manifest number:          19D4
Signing time:             Mon 27 Jul 2026 02:00:29 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:29 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:29 +0000
Files and hashes:         1: RvPXibU4IJdU5hTTfX_WgU4WFrs.roa (hash: BAJBHUxXZILofCz3HDfw/DI14FkTIJLYrtl/LlZ0ZAs=)
                          2: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl (hash: lTAIkGyn6pehsIqnUlbvDbUKLL9JYt1kAm2bhfwzQts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:5b:36:7f:ca:40:08:71:80:64:29:ba:9a:f5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
        Validity
            Not Before: Jul 27 02:00:29 2026 GMT
            Not After : Jul 28 02:00:29 2026 GMT
        Subject: CN=18aa40b25770bae1adf9cfe5b5ed51807170956d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:59:08:88:83:19:e2:24:aa:19:94:9f:e3:5b:
                    19:e7:54:23:30:ca:5b:4c:78:6c:0d:56:2c:98:c3:
                    53:79:0a:d1:a6:b8:5f:09:4a:7c:b5:38:52:12:70:
                    2e:6c:e5:23:3f:fb:ef:56:fc:75:03:0f:9b:20:4e:
                    56:1c:35:a2:f2:35:38:fc:97:2f:33:da:9f:3f:c4:
                    c7:1f:cf:07:c7:c0:9c:3f:ed:ad:c4:e7:2a:34:fe:
                    d5:de:6d:06:5b:72:60:83:cc:6d:00:29:b3:d2:c9:
                    98:15:16:30:23:ca:18:89:f9:af:69:32:d1:de:92:
                    fa:e2:e1:dc:50:d4:a6:04:e2:5c:c3:11:3f:9c:a4:
                    18:db:85:6b:96:38:b9:42:d5:16:bc:0b:34:3f:30:
                    eb:e4:7d:c8:fc:77:25:8a:a6:ec:00:ff:30:b8:a7:
                    bc:33:d6:f5:97:32:6c:1f:ba:79:3e:f7:e8:eb:ae:
                    91:13:b5:43:ee:be:d8:b4:ac:bc:79:64:24:a9:c6:
                    fd:3d:45:ff:04:74:64:04:6d:a6:44:c0:3b:73:b0:
                    1c:4d:6b:cf:d7:4b:55:3e:d4:ee:37:1f:08:6e:5c:
                    c7:50:d0:96:d8:bb:1a:b1:46:38:d6:4b:74:4f:36:
                    30:be:c5:e9:e1:0e:4a:b0:ca:28:9a:b9:93:da:68:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AA:40:B2:57:70:BA:E1:AD:F9:CF:E5:B5:ED:51:80:71:70:95:6D
            X509v3 Authority Key Identifier:
                keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:53:7f:36:f7:dd:1f:38:e7:f6:17:e5:93:d8:93:3a:dd:f5:
         23:45:50:08:cb:9d:95:07:b6:25:44:fa:ee:20:89:2f:99:51:
         e2:2a:e0:22:54:60:1f:49:93:5d:0f:38:d7:70:4d:76:d9:fa:
         c6:9e:4b:39:84:87:c9:09:4e:53:e2:4e:09:66:e7:5d:4c:7a:
         e0:c6:8e:4c:70:d3:d1:cd:04:74:d6:49:d8:15:54:52:48:9e:
         dc:df:58:78:8b:62:c8:a1:06:3b:ed:69:ab:ab:17:75:31:c6:
         2c:0f:45:51:95:36:de:9e:2c:64:06:29:e3:a9:eb:77:1c:2a:
         b0:e8:b6:a8:27:62:c3:2a:77:01:ce:cf:4b:d7:b1:5a:0c:54:
         c9:99:1b:c8:6d:f8:6d:b3:54:1b:98:a2:5d:88:0e:c1:4d:38:
         38:46:33:e8:2c:9f:91:5f:ab:9d:2d:bb:a5:9f:e7:cf:72:22:
         2e:d8:35:f8:e9:06:b4:bc:73:72:cb:d7:c1:6c:85:7d:23:5b:
         9a:09:1d:f0:f6:a7:2c:4b:06:87:2f:1a:6c:42:d4:08:2c:cf:
         34:f0:bd:3c:15:76:ec:e5:57:70:a4:20:fb:5c:ae:52:67:d5:
         77:b2:f0:4b:eb:c4:5e:f2:ce:f4:a6:9b:51:b3:73:0f:6b:d0:
         86:bf:fb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:50:35 2026 by rpki-client