Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File:                     UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier:          V2bze6yW6yX/accjoD3eizcZ/NTfWxbDKBPbur2wq2w=
Subject key identifier:   91:A3:A4:99:41:3E:51:2B:10:F8:AC:FE:25:3C:5C:24:02:39:3E:B2
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer:       /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial:       019FF8A3560115DA0BE0B95EEE40FE79918B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number:          03F5
Signing time:             Thu 13 Aug 2026 01:01:21 +0000
Manifest this update:     Thu 13 Aug 2026 01:01:21 +0000
Manifest next update:     Fri 14 Aug 2026 01:01:21 +0000
Files and hashes:         1: Abe8lBAp4ym_lOiJBaHo-ZSf0P0.asa (hash: ZwGIBcduzoBeABc5t5DJNgUmOBS/j6x3Hm/DWW0QamM=)
                          2: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: CMwf17pCnbidjnDR1mJuDAu5R3amLeg98bp2OYU61A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:a3:56:01:15:da:0b:e0:b9:5e:ee:40:fe:79:91:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
        Validity
            Not Before: Aug 13 01:01:21 2026 GMT
            Not After : Aug 14 01:01:21 2026 GMT
        Subject: CN=91a3a499413e512b10f8acfe253c5c2402393eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:82:db:7f:82:51:f0:6f:da:71:13:8a:7c:
                    ac:c8:6e:9e:15:09:be:5b:e7:b2:12:eb:7f:58:22:
                    ed:d2:da:ff:2c:47:4c:53:25:37:b8:01:c3:60:ab:
                    68:93:50:34:f8:d9:38:13:70:89:66:7f:04:d2:bd:
                    27:cd:a4:28:74:d5:a4:4f:4b:b4:43:cb:5c:a4:22:
                    5d:7e:b5:25:64:79:ca:9d:12:38:69:93:79:2c:3a:
                    01:77:76:9c:e6:52:64:39:cc:0b:a0:1e:40:52:41:
                    08:5a:85:72:44:03:bd:23:2a:e3:64:e3:8a:eb:36:
                    21:7c:67:fe:86:b0:df:3d:01:54:54:48:83:15:b4:
                    3e:88:c1:c0:a6:97:f5:5b:41:4b:90:32:87:90:5f:
                    69:6c:ed:54:25:36:7b:af:d0:24:90:20:40:11:42:
                    43:d1:2c:85:cb:e4:a1:92:f8:6b:7e:01:cb:be:11:
                    e4:06:f9:7f:6e:ed:18:f0:d5:3b:4a:d4:92:2c:27:
                    b1:f9:e7:99:43:96:9d:48:eb:bc:18:d3:83:f8:bc:
                    33:04:25:90:ad:1e:63:79:0e:ae:75:48:32:c5:d1:
                    6e:65:df:bd:0b:f0:1d:da:01:54:bd:2f:6a:0b:1e:
                    b4:f6:54:39:21:03:90:9d:a5:a1:89:f7:48:19:d3:
                    64:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A3:A4:99:41:3E:51:2B:10:F8:AC:FE:25:3C:5C:24:02:39:3E:B2
            X509v3 Authority Key Identifier:
                keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:cc:6e:22:76:93:1f:db:6d:20:4a:d3:d9:f8:07:d2:9c:ca:
         57:da:af:0c:38:cb:38:f8:56:55:49:ff:7c:ca:27:bd:11:01:
         76:3a:9b:0c:20:89:94:2d:2c:7b:b3:aa:2a:b8:e5:55:37:26:
         fe:f2:37:8f:42:8a:55:59:76:60:1c:3b:70:8c:9d:f5:47:d5:
         78:41:53:d2:6a:8a:30:1c:f7:68:38:c8:8f:ff:60:8f:98:d4:
         f9:28:aa:5a:fc:69:df:02:4b:cb:8a:ad:c8:3b:b4:2f:50:94:
         3b:03:a0:d5:7f:6f:93:20:71:7c:f3:74:31:47:62:87:de:a5:
         ea:88:1e:cc:cd:25:28:c5:0a:a4:ba:10:99:8e:a5:f0:f5:e4:
         dd:d9:d0:27:8a:7b:24:47:9e:c3:f0:42:7e:cc:f3:ef:6f:44:
         9b:e1:b8:8d:3d:fa:3a:6e:61:02:42:92:bf:7f:3a:cc:71:46:
         58:9d:35:fb:73:b7:7b:85:14:a4:a1:d5:f9:93:79:80:aa:d9:
         d1:86:61:55:bf:39:51:bc:b4:e2:4e:a6:32:11:83:77:aa:15:
         98:ce:1c:66:7f:85:b2:7d:22:7a:0e:f9:09:07:41:9a:b0:37:
         1f:90:91:83:69:a2:3d:0b:6f:58:8c:ab:86:e0:c5:61:25:35:
         51:1f:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:28 2026 by rpki-client