Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
File:                     Uwt27wq1VbyLB2H2BopE4QsrMfc.mft (raw, json)
Hash identifier:          DcOAbiDrmpgle+7IrzIqinWGUd3W5OK4S8KGH/O8fL8=
Subject key identifier:   89:8F:06:AC:C3:38:FA:AF:F4:E4:B5:65:2E:9C:8F:75:09:78:FC:BE
Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
Certificate issuer:       /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Certificate serial:       019FA2CDD6AB89C615E5CE45D73C9B39FF20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
Manifest number:          19D0
Signing time:             Mon 27 Jul 2026 09:00:26 +0000
Manifest this update:     Mon 27 Jul 2026 09:00:26 +0000
Manifest next update:     Tue 28 Jul 2026 09:00:26 +0000
Files and hashes:         1: 7qtrZvTgn0cpSEVLml8fcuthLe4.roa (hash: S4nLPxNgM6/xYB2o4ZydmxvSiUoLNOsPi+E4YsX/E2g=)
                          2: Uwt27wq1VbyLB2H2BopE4QsrMfc.crl (hash: Y8sDImd4Fs8TFiY4J5YqotUW+U72G8RRlln1ctGUrZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:cd:d6:ab:89:c6:15:e5:ce:45:d7:3c:9b:39:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
        Validity
            Not Before: Jul 27 09:00:26 2026 GMT
            Not After : Jul 28 09:00:26 2026 GMT
        Subject: CN=898f06acc338faaff4e4b5652e9c8f750978fcbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:da:51:9c:94:92:a4:65:fa:c3:eb:d0:cd:d2:
                    df:ce:89:e4:d8:f8:5d:72:d4:78:7f:e4:fd:e3:46:
                    fc:54:c6:69:2f:c6:39:7c:e3:f4:b1:f3:60:3d:7a:
                    55:63:e4:bd:65:e3:11:ce:8e:20:ff:a7:fd:c0:c9:
                    31:08:ad:31:49:c4:03:a1:39:d5:0e:2e:b7:3b:10:
                    4b:9d:cb:7c:77:35:9f:8a:5e:92:33:8c:e2:58:b9:
                    99:26:d3:2b:e7:41:02:f5:f5:8a:e8:96:43:bd:6a:
                    0c:14:26:36:11:f9:e1:72:79:76:59:30:e4:b5:81:
                    a6:17:06:26:cf:9d:19:15:d4:06:e7:b4:61:05:0d:
                    d6:8b:77:c5:58:0c:e0:61:89:15:dd:29:c0:79:4b:
                    94:2d:7a:b7:6c:24:6c:7a:78:89:c8:b5:0a:80:02:
                    db:9c:6a:f5:c5:74:54:bd:ef:f8:39:91:05:68:55:
                    80:71:92:0c:1b:c1:16:d5:34:94:64:eb:90:56:62:
                    c5:72:32:36:0f:55:d7:d9:09:f2:e3:18:e1:e0:9d:
                    a0:12:ad:bb:b3:40:cd:d4:99:7d:fe:15:51:22:72:
                    44:7d:d1:ac:eb:33:16:32:29:e3:08:d4:f8:cc:49:
                    06:5f:13:90:97:25:57:4b:ae:f8:cf:b0:13:bb:8b:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8F:06:AC:C3:38:FA:AF:F4:E4:B5:65:2E:9C:8F:75:09:78:FC:BE
            X509v3 Authority Key Identifier:
                keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:84:c8:7c:82:66:0a:f4:dc:40:be:84:11:ea:a9:a2:21:08:
         2d:21:ac:d8:cd:ca:81:f5:11:43:bf:55:ab:a0:ce:3b:c6:62:
         7a:37:7d:48:a9:28:dd:26:f7:6b:4a:a1:b6:a6:b4:6d:2c:ec:
         ba:66:a8:b5:b3:c5:f0:ef:6f:63:86:9f:23:be:b2:42:db:b8:
         a1:a3:6b:e5:b6:52:c2:7e:cb:66:da:61:bc:5a:d5:1f:47:3a:
         09:af:63:62:ac:48:54:8b:da:5f:f6:eb:f7:ae:35:c8:02:28:
         cf:3f:70:bb:fb:ac:18:60:0f:64:5a:ea:5c:9b:ba:1e:64:09:
         d2:1b:36:2e:8d:e9:5b:6b:8b:33:8e:5b:a2:e5:8d:a0:05:e7:
         bf:80:85:a1:73:7e:85:87:cf:44:84:72:8a:15:fb:59:6a:c7:
         ed:89:ce:cc:d4:13:c0:b5:ee:96:99:34:12:64:21:7f:15:a0:
         6e:71:cf:9d:2f:19:80:c9:99:b7:b7:54:52:32:96:96:d9:4c:
         33:a9:87:30:29:05:d5:de:1c:f1:66:47:67:96:0b:62:71:b0:
         1e:0b:68:d6:9e:3c:86:b0:9a:ce:54:9c:9e:92:12:08:46:b1:
         47:ce:02:24:77:e1:77:4e:fb:a4:de:60:7c:a3:f6:45:4e:f6:
         8b:67:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:47:55 2026 by rpki-client