Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
File:                     UvbBEDFTJEhSvLPiO23ioWuqen8.mft (raw, json)
Hash identifier:          X+bfkx8oIs9XkjyLdvkg+xoDt0rw7EM985LjIaTb+ao=
Subject key identifier:   C5:98:A0:82:B6:A6:3F:88:7F:9F:F9:D4:06:A5:50:F6:2F:9A:E0:45
Authority key identifier: 52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F
Certificate issuer:       /CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
Certificate serial:       019FA184A9B13B0EF50C142C7701E827AAD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
Manifest number:          141B
Signing time:             Mon 27 Jul 2026 03:00:53 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:53 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:53 +0000
Files and hashes:         1: UvbBEDFTJEhSvLPiO23ioWuqen8.crl (hash: 7ZU75I6IaEr4E7yrBVQRIIyZojFTVB+4ewdU3O2g4ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:a9:b1:3b:0e:f5:0c:14:2c:77:01:e8:27:aa:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
        Validity
            Not Before: Jul 27 03:00:53 2026 GMT
            Not After : Jul 28 03:00:53 2026 GMT
        Subject: CN=c598a082b6a63f887f9ff9d406a550f62f9ae045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:85:b0:cd:01:a2:7c:ba:b3:5e:67:35:ee:04:
                    9a:60:82:c8:65:90:24:80:68:79:ad:93:ab:f4:ee:
                    03:c4:7e:04:86:28:ab:32:2c:8a:a9:0b:0f:db:7a:
                    96:5f:f4:0e:23:e4:44:8c:b7:14:9e:3a:51:f8:6d:
                    04:ba:09:c5:41:38:76:1f:c5:90:66:0e:47:19:d9:
                    ab:f5:6e:5f:1d:55:27:be:8a:70:1c:28:d5:79:a1:
                    bc:34:b8:31:27:05:31:65:42:46:5c:ee:d0:92:cf:
                    5d:f3:8c:1e:41:b8:c0:e5:53:4b:70:2e:81:88:4a:
                    e5:cb:8a:5c:c3:8a:5d:1b:2a:d4:0e:cc:aa:e6:ee:
                    9b:d2:d0:a6:a9:22:e0:3d:70:65:7d:ba:88:65:78:
                    0e:a9:2d:91:03:6b:09:82:2a:ad:02:b9:1d:27:87:
                    ef:c7:4d:43:09:12:2a:23:97:59:b3:3b:c8:5a:18:
                    31:c8:bb:75:a9:b4:29:f1:7b:50:e3:ac:94:0c:f3:
                    71:6b:65:2f:07:10:e6:4f:c0:f7:8c:00:70:a7:f8:
                    cb:cf:42:eb:11:85:4f:70:97:82:d8:cb:aa:c2:36:
                    f0:e7:34:a4:fc:70:2a:89:d3:04:bd:ca:ac:5e:24:
                    0f:2e:28:86:d4:9b:bb:64:15:16:4c:1c:d7:73:89:
                    ee:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:98:A0:82:B6:A6:3F:88:7F:9F:F9:D4:06:A5:50:F6:2F:9A:E0:45
            X509v3 Authority Key Identifier:
                keyid:52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:58:89:40:22:1c:a4:4d:b8:4d:16:4f:0e:10:41:a1:f5:17:
         1f:93:85:8b:4e:47:1b:a6:49:63:19:f9:9b:99:73:8d:b0:b7:
         61:76:b8:74:56:0b:19:8f:9d:5b:f2:33:e2:e1:21:a2:9e:6b:
         fc:8d:a0:03:6d:d3:dd:9b:03:cb:39:93:8e:81:86:94:70:6c:
         b7:fb:ad:b4:b1:5b:51:c7:10:e2:e2:a3:08:70:8c:a9:1f:2c:
         0b:7d:99:37:e1:44:83:65:b3:96:c8:4d:2b:b5:0d:a0:a0:71:
         6b:32:81:5a:cf:28:29:45:d0:02:d0:ef:2f:11:12:63:f1:6d:
         b2:fb:53:4f:36:45:18:d5:6e:b9:94:b1:89:0f:39:5d:f9:84:
         cb:c9:aa:b6:3b:41:b7:f8:98:1e:3e:52:a8:f9:3a:74:5c:c4:
         75:2b:fe:e8:a7:13:30:bd:ec:ac:24:f4:34:a1:fe:ca:8e:b8:
         98:f9:d4:67:ae:21:46:e2:ef:29:e6:24:1c:fe:7d:36:0f:66:
         95:3a:70:7c:0f:60:0e:e3:b3:5b:78:4f:92:2e:c9:37:dc:e6:
         40:03:14:8a:27:2f:55:35:26:f5:e6:2b:40:ab:9d:20:ff:ff:
         36:14:37:fc:6f:dc:a2:be:d5:8a:60:48:00:9a:51:93:ec:a1:
         18:a1:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:30:47 2026 by rpki-client