Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File:                     UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier:          fdG+2PbBTcJMtHUTQrHTIzWLpBDhNyb6JEBSb9DpMA0=
Subject key identifier:   DB:8F:DC:91:11:C6:01:55:03:D3:60:93:64:C7:3C:BB:F5:B7:1E:60
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       019FA2CF409BC5159858C4BB45129879D5A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number:          19CE
Signing time:             Mon 27 Jul 2026 09:01:59 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:59 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:59 +0000
Files and hashes:         1: Fh1t7rzPIhJXnOEVD4FNHFJov6I.roa (hash: xyxnFW4AuKmT8OTwF87A3TgtZBfvGtO+UCiL5cJIqm4=)
                          2: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: 3OKO9UpA9sX6Uf8DOUZYEzWk4ST9QAdIwfuOqtph+EE=)
                          3: _FC9hMLG7SF2_l0VnWxgvnPruLU.roa (hash: /T+U+cTcUNtTkJxXrz2mxyyoddVM2fTKoj6v8XpQa6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:cf:40:9b:c5:15:98:58:c4:bb:45:12:98:79:d5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Jul 27 09:01:59 2026 GMT
            Not After : Jul 28 09:01:59 2026 GMT
        Subject: CN=db8fdc9111c6015503d3609364c73cbbf5b71e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d5:3c:2d:6e:9c:cd:f4:55:99:81:29:bb:44:
                    cb:21:6d:ad:e4:ce:8e:e1:51:b9:37:ed:75:7a:9f:
                    17:ed:e8:30:46:b9:e6:73:80:1b:57:34:2a:f2:ba:
                    03:31:f7:53:95:0f:6b:1b:1f:7c:a7:84:66:3e:a3:
                    5f:2d:21:dc:74:05:77:f8:38:70:4b:37:a1:b9:18:
                    e0:07:2e:7b:71:97:8b:6d:b1:8e:37:26:63:97:69:
                    c1:e3:53:36:3e:70:5b:46:d7:a2:8d:fc:85:d3:ad:
                    70:54:22:ae:d6:a5:44:63:90:ab:90:97:89:8e:a1:
                    59:b9:a8:99:93:11:f9:08:bb:67:10:6a:24:35:6c:
                    b6:bf:1d:fb:aa:fe:52:5a:4f:66:47:4c:6f:3b:11:
                    18:58:3d:aa:35:b1:49:bb:56:38:28:ef:2b:12:4f:
                    cd:06:70:2a:5d:5f:39:ef:50:2e:16:9e:fc:f8:10:
                    a4:65:32:b7:a9:cf:18:2f:db:33:a4:a2:4d:c9:d0:
                    f5:aa:73:c6:ae:ba:47:d9:16:32:1a:be:f1:7e:aa:
                    92:ba:71:c2:0c:b0:e2:b9:2a:d7:15:19:4a:ae:26:
                    b9:00:9a:78:09:f3:c3:b8:5c:79:f5:54:98:0b:49:
                    25:fd:9f:63:47:4d:a1:5d:55:7e:ad:d8:60:d3:54:
                    c6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8F:DC:91:11:C6:01:55:03:D3:60:93:64:C7:3C:BB:F5:B7:1E:60
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:cc:92:b3:59:78:b6:be:2a:d7:28:b6:77:f9:fc:4a:58:
         7b:1e:98:1c:00:63:b5:f5:ec:d2:d6:2c:bf:8d:14:a5:86:9c:
         1c:90:71:5e:67:e9:69:fb:58:a2:ce:12:f6:75:58:3d:cd:45:
         8d:48:de:2f:f0:49:a0:ca:29:fd:3f:86:77:58:a7:76:58:da:
         4e:c9:0f:55:22:48:06:17:c3:91:9f:5c:8b:aa:09:cc:7b:e3:
         0c:69:a5:ad:80:4f:88:63:4f:9a:15:24:76:40:ca:4b:2b:93:
         37:82:16:3a:e2:15:41:1d:01:c6:63:82:b6:67:f0:31:bc:99:
         b0:61:f2:48:48:0e:54:17:d4:a5:c8:7d:48:7d:07:f8:0a:42:
         66:37:ba:bb:c1:1a:fe:d6:17:20:57:31:eb:39:cc:c2:ed:85:
         3a:51:99:81:46:45:7d:a5:03:2c:64:73:e3:7e:22:28:b6:d4:
         a3:82:13:77:a6:4c:93:8a:b2:f7:92:bf:f2:ad:ad:7e:a0:04:
         7d:a8:50:ff:cc:10:fb:4a:dd:b9:39:47:57:32:7a:1e:5c:d5:
         31:cd:75:58:1e:31:52:5c:cb:f1:0b:8b:ae:14:c4:21:02:1b:
         4e:4b:82:d7:53:6a:75:4f:59:a3:db:0a:09:74:0b:d1:ce:67:
         a4:7c:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:14:22 2026 by rpki-client