Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File:                     UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier:          Yi/4EvpU210GSC5u9t45RkTUjfNKTcD5UtRl1X1Y9hg=
Subject key identifier:   BC:47:C8:FA:83:51:46:33:30:FB:B6:73:E3:11:11:4D:3C:06:B8:B6
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer:       /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial:       019FCC0207200ED92DD52D54E679E9C545A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number:          0918
Signing time:             Tue 04 Aug 2026 09:01:52 +0000
Manifest this update:     Tue 04 Aug 2026 09:01:52 +0000
Manifest next update:     Wed 05 Aug 2026 09:01:52 +0000
Files and hashes:         1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
                          2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: axqYdtDxN6fp5TmS61kLMuryfLXI2hlWqGkXH0h2AZU=)
                          3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:02:07:20:0e:d9:2d:d5:2d:54:e6:79:e9:c5:45:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
        Validity
            Not Before: Aug  4 09:01:52 2026 GMT
            Not After : Aug  5 09:01:52 2026 GMT
        Subject: CN=bc47c8fa8351463330fbb673e311114d3c06b8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:99:60:db:46:6e:0f:32:36:82:b3:48:a8:
                    50:3c:ae:0a:1f:9e:9d:51:76:f0:38:22:16:4a:e7:
                    00:b2:d7:8f:5e:a5:2b:ec:4b:98:aa:c3:8d:b2:f2:
                    76:78:94:1e:9c:56:42:d8:29:07:0d:d7:f8:5f:22:
                    10:9c:79:fa:db:01:45:8b:46:7e:51:d0:8e:52:2a:
                    19:0a:5b:75:f6:41:55:2d:5a:29:59:da:c5:0c:3d:
                    9d:f6:35:db:79:48:09:0d:08:4f:8b:fe:ea:21:60:
                    fb:ba:59:88:22:c0:f4:c5:1c:fd:53:3c:6f:fc:08:
                    88:cf:df:9f:d3:be:92:65:29:97:1e:40:5c:df:f0:
                    da:cf:d6:20:54:eb:07:15:7d:1d:e3:5c:5e:55:00:
                    cd:c4:ee:0a:59:f6:a9:2a:ba:93:06:29:80:8e:24:
                    4b:98:38:aa:5b:a9:95:17:21:da:56:e2:58:a6:86:
                    2d:8a:b0:ea:87:46:6b:07:02:50:ea:8e:07:f1:51:
                    8e:c7:2c:b7:cb:76:48:1f:ff:5f:ac:85:ed:fe:e5:
                    a0:86:1b:49:5b:86:10:df:8d:a6:ca:b8:bf:36:e0:
                    de:7b:96:0a:89:b1:b9:b6:4e:27:72:45:1c:ce:a4:
                    04:0e:2a:8c:58:03:70:e1:7d:98:da:39:e1:f9:d0:
                    ec:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:47:C8:FA:83:51:46:33:30:FB:B6:73:E3:11:11:4D:3C:06:B8:B6
            X509v3 Authority Key Identifier:
                keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:00:75:dc:77:8f:58:1b:71:14:61:21:e8:f3:ff:1f:d1:6a:
         ff:fc:c2:c4:01:1b:cd:73:5f:61:77:e1:03:4f:b9:1d:2a:4a:
         a9:c4:e5:cf:f6:1f:e7:c2:9f:7d:70:e9:f2:96:23:dc:3f:58:
         f7:68:bb:c9:91:1e:91:a3:7e:d7:57:51:a3:33:86:1d:f3:86:
         a0:18:33:e7:2d:97:2f:99:51:8b:07:26:88:c4:78:4d:8c:72:
         d6:0a:ca:1e:4c:64:90:98:a5:48:3d:c2:e1:8c:6d:ff:08:bf:
         d6:9d:6c:e1:ca:53:6c:d2:b0:1d:4f:8b:08:c1:91:c1:d9:e2:
         b1:c3:e4:c6:9f:69:5b:a2:a9:89:75:fa:34:ea:2b:ad:f9:ac:
         9c:9a:da:7d:05:df:17:e9:86:d9:56:b3:c3:be:a3:06:6c:c8:
         28:dd:92:f7:fb:3a:8f:a1:a2:2e:e5:d5:1c:72:9a:21:1a:6d:
         9d:7a:2f:9b:f2:c4:4e:7b:91:5a:97:25:a1:0e:07:15:cd:97:
         7b:0f:03:ee:86:31:a0:e4:b6:b1:a9:38:f3:74:2e:ad:2b:b2:
         94:d1:56:89:a8:d0:b6:7e:a4:ea:37:59:d2:8f:ad:68:75:5a:
         cb:4c:87:8f:2e:02:70:54:46:25:87:ad:97:91:d7:e4:79:01:
         b9:5c:46:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:03:19 2026 by rpki-client