Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
File:                     UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft (raw, json)
Hash identifier:          J5WAWR/aayutqgwHzyb9xkZ0rkWPPpIIMGWcSqEGXhg=
Subject key identifier:   44:A4:90:2A:33:AD:AE:02:83:67:E4:8A:F8:9A:01:A5:23:F6:8D:15
Authority key identifier: 50:10:9C:EA:34:8A:09:D3:90:17:0B:2B:50:FD:4F:2F:4F:A0:C0:71
Certificate issuer:       /CN=50109cea348a09d390170b2b50fd4f2f4fa0c071
Certificate serial:       019FA4BD4081F87A5CD1F89304ACC9697ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
Manifest number:          CC
Signing time:             Mon 27 Jul 2026 18:01:34 +0000
Manifest this update:     Mon 27 Jul 2026 18:01:34 +0000
Manifest next update:     Tue 28 Jul 2026 18:01:34 +0000
Files and hashes:         1: UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl (hash: zfEqxcfQKY0j+LM0Wfx2KvSwWPgUVhmDWqWQlQ6vAFU=)
                          2: VlDvPryAuk2PGBFGwuY-gCe_F5A.roa (hash: TJR1bUgs/pW0JpJ4B506N0MthyLFTUA8QuoRDNEKpko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:bd:40:81:f8:7a:5c:d1:f8:93:04:ac:c9:69:7a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50109cea348a09d390170b2b50fd4f2f4fa0c071
        Validity
            Not Before: Jul 27 18:01:34 2026 GMT
            Not After : Jul 28 18:01:34 2026 GMT
        Subject: CN=44a4902a33adae028367e48af89a01a523f68d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f7:21:60:31:f4:b4:5e:98:93:06:61:77:dd:
                    31:de:27:e3:9a:54:92:d4:b6:17:be:76:92:9a:3a:
                    a5:fd:97:fc:da:e2:a9:de:e4:55:ef:8b:f8:c0:18:
                    b3:b4:af:cd:56:03:ca:5e:9d:02:f9:70:ae:42:0a:
                    f1:bc:47:7d:ce:58:b3:c9:2a:eb:01:34:e7:f0:f8:
                    db:75:53:2e:23:e9:f9:2b:97:8b:72:f5:b1:dd:2a:
                    55:5a:a8:04:eb:be:cb:43:bc:2c:8b:03:df:90:e6:
                    0f:e5:1b:f1:76:f4:35:33:04:0b:56:a9:91:e6:5a:
                    44:4a:35:32:9c:df:69:9f:1b:44:4d:09:8b:ae:39:
                    75:75:5d:d5:ec:ee:58:ba:2a:e1:53:38:46:86:e0:
                    9d:2a:65:21:49:f0:d2:f1:91:b0:01:85:b9:b0:b8:
                    83:62:7a:af:e1:0b:4c:6a:e6:73:03:85:a3:3a:63:
                    9a:d8:82:67:28:31:ef:58:fc:99:61:f2:94:5a:8c:
                    64:fc:e9:89:64:12:22:5a:00:e2:a7:54:0a:31:63:
                    32:79:cf:7a:83:05:9d:3f:1f:dc:a9:a1:61:63:a0:
                    74:78:8a:13:c8:0a:49:fa:bb:dc:b3:3b:d1:95:ba:
                    fa:03:65:96:cc:d7:af:7d:c3:f0:fa:19:15:9e:58:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A4:90:2A:33:AD:AE:02:83:67:E4:8A:F8:9A:01:A5:23:F6:8D:15
            X509v3 Authority Key Identifier:
                keyid:50:10:9C:EA:34:8A:09:D3:90:17:0B:2B:50:FD:4F:2F:4F:A0:C0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:dc:1c:12:6b:bf:73:b6:02:05:e0:08:b7:1b:a7:9e:94:d2:
         67:2c:62:11:24:84:78:73:ba:c7:eb:f9:af:fa:30:9c:fb:d8:
         39:02:a2:19:78:94:f0:7c:eb:d4:d0:41:5e:0f:5f:32:05:89:
         d7:8f:cc:58:01:92:49:c1:14:35:5f:d8:1a:73:5c:9a:ae:ef:
         6a:4b:2e:1f:b4:19:b3:c0:56:8d:78:f8:7b:62:0d:f9:d1:0c:
         4b:83:d3:a7:8f:dc:da:5d:8e:ae:45:b8:fd:e2:83:54:2e:fc:
         69:ac:11:b2:4a:1d:5d:1e:c4:84:a9:02:5b:cc:09:34:f8:c1:
         d9:03:f7:01:d9:97:ca:71:d2:60:71:76:0a:a2:ed:c9:aa:13:
         14:67:f4:b9:e4:d4:de:41:ec:08:11:85:8e:47:e3:50:13:18:
         56:f5:79:9c:d6:bb:82:f5:b2:64:ea:c1:68:7a:a0:06:67:90:
         e4:f5:30:2a:67:10:d7:d6:a4:ae:c3:46:1e:1e:f1:47:13:97:
         ee:d6:01:b5:f7:18:21:9c:ae:cd:76:02:6c:59:26:69:65:e1:
         10:13:f2:d3:7f:cc:19:d2:f4:68:02:cb:14:14:37:09:b7:22:
         30:90:a7:23:85:26:7a:05:e7:5f:e9:ea:08:21:45:5c:e8:a9:
         0d:96:fe:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:32:31 2026 by rpki-client