Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File:                     uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier:          wp2Mli4My7L7Xp2a1oUMsZGR0jZISQlR2ezColS5Sc0=
Subject key identifier:   23:85:0A:6A:7C:80:63:05:14:9B:ED:37:E2:08:C4:20:55:BE:ED:3F
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer:       /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial:       019FCE5D743A95790907F4B51FC673F81F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number:          130C
Signing time:             Tue 04 Aug 2026 20:00:58 +0000
Manifest this update:     Tue 04 Aug 2026 20:00:58 +0000
Manifest next update:     Wed 05 Aug 2026 20:00:58 +0000
Files and hashes:         1: 8B0Xvmidug3oJBFQNiVZ03LjllY.roa (hash: P1kj5JyGbpjO7k/9XiZFP26S2h0cS9e/Ah5VKAIZkgI=)
                          2: AwKBOhlF9uaXHOgDwaWxiRTycC8.roa (hash: ulOM++8A5dnNmN9Kuzc/O4/HWsO5q48Fbn6dGRtakzw=)
                          3: lkqdEp6LwoeInW4-nbYEOMBruSw.roa (hash: LFD9MHEpAP74xMJWDo+tJr71CtFOG7i1RauaAjnGFMU=)
                          4: pSuYpl6WxbthlcwSwOwfJ2eEOEM.roa (hash: 0ZM4/++BdSQLGaayny50tbB3TCayRFezzAq6CjxEPBs=)
                          5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: Y/u1U1BOhjh0RvExLWS5WEBbsRU8TK9vCdPuZlmGw6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ce:5d:74:3a:95:79:09:07:f4:b5:1f:c6:73:f8:1f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
        Validity
            Not Before: Aug  4 20:00:58 2026 GMT
            Not After : Aug  5 20:00:58 2026 GMT
        Subject: CN=23850a6a7c806305149bed37e208c42055beed3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c2:f1:80:1b:cc:76:f6:db:c3:57:72:8e:a9:
                    2f:d2:81:96:ef:d5:99:09:48:ac:fa:f0:89:93:7f:
                    5c:e1:84:2a:b1:2d:47:cd:fc:3d:0a:68:e5:4f:fc:
                    0e:a1:a0:a6:47:fa:60:d2:9a:6b:6e:0e:35:a8:99:
                    77:95:aa:0a:74:7d:df:7a:e7:f6:3a:3f:52:05:aa:
                    1c:f2:11:fa:2d:f9:64:37:f3:1f:8a:7e:b2:a1:7b:
                    1c:90:d7:43:86:c2:92:49:9b:51:98:1e:45:04:66:
                    95:87:92:77:07:a5:a5:dc:9d:d3:59:33:ec:85:d1:
                    4b:bf:6a:fa:11:a1:71:59:e8:9a:d9:af:91:6b:7b:
                    26:1a:8e:fa:03:9b:26:9b:44:49:6e:85:95:2c:9d:
                    40:d9:df:0c:6d:a1:0e:f7:84:40:bb:ee:0e:1c:7f:
                    54:43:52:2e:a2:82:5b:bb:04:49:a1:31:d4:95:37:
                    56:6a:5d:68:53:19:28:9a:b1:22:01:95:62:dc:31:
                    13:53:4a:4a:7e:37:9d:f8:92:e2:d7:96:2f:1f:34:
                    c6:4c:9e:cb:45:8a:bf:9d:c1:bf:32:11:62:12:5f:
                    f9:f5:aa:c5:63:91:f8:b8:ca:42:87:63:06:68:c2:
                    8f:91:77:83:d6:bf:19:6e:a2:ea:4c:5a:85:89:4d:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:85:0A:6A:7C:80:63:05:14:9B:ED:37:E2:08:C4:20:55:BE:ED:3F
            X509v3 Authority Key Identifier:
                keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:7c:da:91:0d:51:58:03:4e:26:d5:6b:76:7b:ce:e4:c5:01:
         5e:ba:d4:a3:4c:9d:0d:a1:3a:2f:c3:fd:2c:05:b0:f4:44:9a:
         ad:05:0e:5f:a3:f7:74:ad:92:4b:7b:c3:fc:c4:e7:92:74:0b:
         ff:a8:4f:4f:a4:b5:19:5f:3c:c9:1e:b9:7f:f8:3f:e2:6c:75:
         86:c1:5e:8c:e7:23:e9:90:50:55:b3:d0:19:ee:c1:fe:37:f6:
         92:db:f4:f1:32:78:93:d4:2b:fd:ab:61:8b:a8:ae:9d:70:65:
         20:5a:90:35:65:6f:6f:92:a5:ce:1d:77:96:d0:6b:8b:a1:55:
         1e:33:42:95:33:8e:85:cb:38:1e:53:37:80:01:a4:22:2c:30:
         7a:d0:e6:d3:83:7a:b6:81:f0:4e:9f:56:5b:6d:24:2a:a3:12:
         c4:61:d6:6f:69:2b:02:58:d6:49:b0:a3:2f:4a:95:0e:b5:4a:
         da:b9:9a:8b:21:1f:f0:97:6c:ce:90:1f:25:f4:e4:35:c8:f6:
         05:bc:0e:3d:72:29:1a:ef:e2:0a:d1:03:70:d6:2f:4d:30:bc:
         37:d1:05:16:00:97:8a:b9:08:1c:92:c3:59:14:09:cf:2b:71:
         0c:f4:bc:39:ce:5b:62:96:ef:bd:82:7b:12:39:f6:6e:0f:91:
         ea:25:e5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:52:53 2026 by rpki-client