Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
File:                     UeY89ghzETR_MU8k4mlsf2zqbXI.mft (raw, json)
Hash identifier:          2CY1fPDqSfLSpNUg+/LPEqYEZESzPP/mvqtDFb2mmVw=
Subject key identifier:   56:88:BB:EE:AD:ED:B4:39:EC:29:12:1C:7A:7D:E0:C3:E4:2E:EB:D8
Authority key identifier: 51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72
Certificate issuer:       /CN=51e63cf6087311347f314f24e2696c7f6cea6d72
Certificate serial:       019F86E96B54B5C84F7CB545599925ED7492
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
Manifest number:          026C
Signing time:             Tue 21 Jul 2026 23:01:11 +0000
Manifest this update:     Tue 21 Jul 2026 23:01:11 +0000
Manifest next update:     Wed 22 Jul 2026 23:01:11 +0000
Files and hashes:         1: JXHSN0XBVUwoW8AtubMmU-q0y9s.asa (hash: elLKcX+ZMP8RfdAuhvJjIS83OGvA2GYeQrZA4qJpfz0=)
                          2: UeY89ghzETR_MU8k4mlsf2zqbXI.crl (hash: 8SbPVJsBiU9KCVCWL5FxDRRcESWaIanODchmQ337U+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:e9:6b:54:b5:c8:4f:7c:b5:45:59:99:25:ed:74:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e63cf6087311347f314f24e2696c7f6cea6d72
        Validity
            Not Before: Jul 21 23:01:11 2026 GMT
            Not After : Jul 22 23:01:11 2026 GMT
        Subject: CN=5688bbeeadedb439ec29121c7a7de0c3e42eebd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:06:96:d0:e3:21:02:29:99:21:41:ef:dc:
                    96:95:6b:27:28:f8:3a:71:2c:23:4c:20:56:fa:1f:
                    d5:ea:16:af:b4:08:cc:1e:d8:c6:cb:37:f8:51:8f:
                    8a:6b:cd:d4:4d:07:b3:37:e2:04:31:9c:e3:9e:61:
                    39:a4:72:bc:a6:24:10:7d:0b:df:b0:db:12:08:f1:
                    a2:53:47:12:1a:1d:3e:7a:b3:ae:e0:8b:ba:d1:7a:
                    d4:2c:c0:f7:19:e9:7b:e3:c2:5c:1b:fa:56:eb:d6:
                    e5:50:9d:37:85:f0:a5:d7:84:25:19:fd:fd:8b:08:
                    5e:04:f1:10:5d:be:90:e2:ff:13:f4:4c:b5:2c:72:
                    fc:45:06:7d:5a:f2:67:bb:8d:dc:cd:f7:6f:38:25:
                    3e:59:d5:b7:4b:63:70:74:99:a9:d0:11:0c:d8:73:
                    55:1c:3c:e2:b9:72:a3:e4:2d:56:d7:5f:a0:64:49:
                    72:15:1c:8a:58:06:9f:c3:26:81:a0:bf:a1:25:18:
                    23:98:b7:32:cc:97:a5:ba:d5:39:7a:1f:80:57:5f:
                    37:02:04:7e:f5:1c:ba:8f:24:0e:7d:ab:a4:7e:3a:
                    86:3c:14:bf:bb:c7:9f:46:8e:19:1b:a2:57:92:94:
                    c1:9b:99:6a:8b:14:83:db:5e:84:c7:96:c3:2c:4d:
                    9d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:88:BB:EE:AD:ED:B4:39:EC:29:12:1C:7A:7D:E0:C3:E4:2E:EB:D8
            X509v3 Authority Key Identifier:
                keyid:51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b8:0e:03:89:0d:a5:ff:70:51:b1:34:7e:42:4d:8b:67:fa:
         4c:ef:e7:83:d1:d4:d2:60:2f:c8:1f:50:cf:46:9e:82:31:5c:
         f7:7a:12:02:e7:58:88:a8:ed:b8:84:d1:1a:18:9f:1c:0d:50:
         62:7c:3b:f5:af:60:c5:7e:0d:e1:37:bc:7c:09:3a:24:e2:68:
         d9:7a:54:0e:d5:9b:8a:d4:4b:38:51:44:8c:3a:e9:27:21:d1:
         37:6d:60:7e:12:e6:ed:78:4b:4b:61:74:99:b8:09:30:21:28:
         f0:1b:4e:1f:57:d2:a1:de:45:f3:5e:5c:b2:23:95:95:5f:7b:
         21:87:4e:f8:dc:be:76:9e:42:50:d7:ef:fd:fa:d6:ed:1b:69:
         81:92:8d:07:11:49:39:b3:c5:68:52:57:15:f8:16:c4:03:95:
         0c:ec:9a:8e:70:7b:47:f7:2f:90:c2:39:ab:66:41:3d:67:b8:
         c3:5d:54:d1:e1:27:92:25:1a:b4:e9:1d:61:eb:0c:4a:5f:57:
         20:bc:ad:dd:c8:20:e4:46:37:6c:90:4b:ff:29:0a:36:84:24:
         bb:95:ca:99:04:ae:92:e0:a8:c7:73:9f:fe:1e:bf:72:a0:20:
         29:cf:d8:78:75:24:f0:b2:fb:17:7e:aa:2f:1f:c6:2f:33:95:
         a8:09:70:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 07:01:15 2026 by rpki-client