Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.mft
File:                     uCvv_EOR1bO71f1LD8Mq9dsgBso.mft (raw, json)
Hash identifier:          jX7Fl0j3KsTaoHQq/vHw15rqgxO1WOODJ3ZlZLJOeOg=
Subject key identifier:   45:B5:FA:2B:BD:BF:83:DD:F4:38:F6:6B:ED:2B:E4:E6:5D:32:F5:5C
Authority key identifier: B8:2B:EF:FC:43:91:D5:B3:BB:D5:FD:4B:0F:C3:2A:F5:DB:20:06:CA
Certificate issuer:       /CN=b82beffc4391d5b3bbd5fd4b0fc32af5db2006ca
Certificate serial:       019F859FB1C2C3DC310D10E2AC606D2DD7E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCvv_EOR1bO71f1LD8Mq9dsgBso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.mft
Manifest number:          C4
Signing time:             Tue 21 Jul 2026 17:01:03 +0000
Manifest this update:     Tue 21 Jul 2026 17:01:03 +0000
Manifest next update:     Wed 22 Jul 2026 17:01:03 +0000
Files and hashes:         1: h999oBc_Ubyy3tWteXIdyux39CE.asa (hash: 0WOdwZSGvRd1euU11+hvxV0JRY683wHRvIzcRdjG+ao=)
                          2: uCvv_EOR1bO71f1LD8Mq9dsgBso.crl (hash: oLla6TYOsbazwNL5sPtkxTpMSVeig35L5AH30q12BLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCvv_EOR1bO71f1LD8Mq9dsgBso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:b1:c2:c3:dc:31:0d:10:e2:ac:60:6d:2d:d7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82beffc4391d5b3bbd5fd4b0fc32af5db2006ca
        Validity
            Not Before: Jul 21 17:01:03 2026 GMT
            Not After : Jul 22 17:01:03 2026 GMT
        Subject: CN=45b5fa2bbdbf83ddf438f66bed2be4e65d32f55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:ba:f4:e8:ed:0c:65:37:8c:67:91:4e:64:
                    d7:c4:6a:e2:39:f6:ca:fc:8c:17:c3:f6:05:9b:ec:
                    fe:6d:87:26:84:7a:3e:41:6f:d2:9f:1f:f1:e6:fb:
                    7d:7e:55:ba:25:fe:1a:da:cf:be:0d:d8:55:1d:81:
                    1c:f0:db:56:bd:de:14:bd:f7:ff:b0:14:63:f3:18:
                    da:c4:68:08:2a:4a:01:19:3b:9e:cb:5b:25:2c:8b:
                    d0:45:8b:91:ab:8b:74:69:2b:13:c0:d4:9c:3f:bf:
                    5f:df:93:35:6b:ae:ff:e2:b8:63:f3:c3:2c:70:37:
                    12:44:38:8b:27:6d:5f:b5:a3:22:94:72:23:b2:c2:
                    d8:b1:87:af:af:d0:55:db:65:52:d2:8c:1b:9f:47:
                    a6:d5:21:25:24:1d:03:e5:d4:12:fc:78:51:ed:5d:
                    42:3b:96:f2:fc:b0:d0:63:01:47:b2:7b:4c:02:b9:
                    e2:16:c9:6e:fa:02:18:01:aa:ba:a6:ea:ba:a2:eb:
                    ee:b0:23:0b:4b:b7:1c:b3:ed:b6:8b:89:85:ad:cc:
                    85:fa:28:e7:87:65:fc:ef:af:22:5d:d8:8b:18:ae:
                    f3:b9:9f:1b:0e:18:fd:21:a8:70:ab:ff:76:d7:46:
                    d2:21:57:e0:0c:5b:f1:ef:ee:01:20:f2:66:56:75:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B5:FA:2B:BD:BF:83:DD:F4:38:F6:6B:ED:2B:E4:E6:5D:32:F5:5C
            X509v3 Authority Key Identifier:
                keyid:B8:2B:EF:FC:43:91:D5:B3:BB:D5:FD:4B:0F:C3:2A:F5:DB:20:06:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCvv_EOR1bO71f1LD8Mq9dsgBso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b5:0a:9b:3b:a4:7a:f7:16:01:63:4e:b5:e4:aa:e7:cb:ab:
         5d:7b:66:c2:8e:82:51:ac:4f:3e:d3:84:63:63:53:b9:7d:fd:
         21:02:95:3a:e3:e9:cc:1e:81:46:b2:3d:81:dd:cf:5e:24:7e:
         74:84:0b:f1:c5:18:40:5d:84:6e:d2:f8:38:8e:f9:7b:2d:0e:
         63:9e:85:b7:69:0e:70:41:c6:5a:7f:0c:07:78:d1:a6:74:2c:
         0c:d6:0a:86:01:b9:5b:cd:e6:59:ba:a9:84:10:6c:bb:22:df:
         c3:c1:8e:f3:56:8f:44:fb:39:fa:52:1d:82:52:6f:3d:83:34:
         27:6d:74:ef:4d:89:03:d5:45:73:aa:37:b4:d0:87:a1:34:78:
         56:47:ba:25:33:6e:31:6a:13:2b:e3:98:88:c3:a2:7b:ad:27:
         16:96:e9:a0:f1:cb:19:0c:37:95:df:eb:ad:f2:f5:1e:99:b9:
         ae:c3:27:ee:19:7e:65:58:31:9c:db:6a:fe:c4:97:f5:d1:55:
         eb:a4:88:e4:36:74:68:a8:f5:8b:57:ad:14:fc:26:36:e4:18:
         27:64:7d:ce:f4:4a:00:b2:67:1e:bf:f5:bb:9d:4f:88:26:de:
         e9:8e:3d:58:ad:f7:1e:d2:c2:e8:f7:5b:3d:41:64:a2:c2:23:
         3a:95:0b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:14:48 2026 by rpki-client