Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft
File:                     Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft (raw, json)
Hash identifier:          Nw7X7Eq3TFPBLoqQce1l5rCBVxPYonyLKm9PvlsUNuk=
Subject key identifier:   DB:32:5C:FB:68:1E:FD:A3:C6:54:B5:0A:27:FD:EF:81:5B:F8:CA:AE
Authority key identifier: 51:DC:78:07:E8:4A:F5:23:93:0F:E0:23:E5:C5:AD:AF:DF:E1:D4:D5
Certificate issuer:       /CN=51dc7807e84af523930fe023e5c5adafdfe1d4d5
Certificate serial:       019FF8359704960F77BB4BAD70B4AF9D6BDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft
Manifest number:          35
Signing time:             Wed 12 Aug 2026 23:01:29 +0000
Manifest this update:     Wed 12 Aug 2026 23:01:29 +0000
Manifest next update:     Thu 13 Aug 2026 23:01:29 +0000
Files and hashes:         1: Udx4B-hK9SOTD-Aj5cWtr9_h1NU.crl (hash: 1j705YxHsUjGDFAO1O9Nkn6qTRsUpbmM3dGtsDcEv8Q=)
                          2: gZ3wq_mAZJreWQuC_PJ4XCaGV4U.asa (hash: Sp5lTfywYFRQNmdnEzEg/9nc4vL2w4AX0dUfvEF9Wy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:35:97:04:96:0f:77:bb:4b:ad:70:b4:af:9d:6b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dc7807e84af523930fe023e5c5adafdfe1d4d5
        Validity
            Not Before: Aug 12 23:01:29 2026 GMT
            Not After : Aug 13 23:01:29 2026 GMT
        Subject: CN=db325cfb681efda3c654b50a27fdef815bf8caae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:04:d6:fa:19:f2:cb:d8:be:25:b7:0b:58:
                    95:c1:27:52:e6:aa:24:0f:69:62:45:e7:36:5c:f9:
                    4b:e0:05:a6:c9:6c:9b:c7:5a:78:b8:92:18:6a:ba:
                    7d:6d:6c:e5:7b:d0:31:5f:11:bf:fa:59:c4:6a:2e:
                    e9:50:9b:42:78:cc:bc:2c:69:f6:22:61:b7:54:51:
                    29:62:f5:59:9b:6d:44:36:df:22:c5:57:95:51:f5:
                    59:3e:22:62:99:f2:cf:ce:a7:18:cc:be:91:02:e7:
                    25:d6:fb:b3:02:86:e2:0a:e7:eb:da:97:f8:19:8c:
                    1e:0f:6c:da:6e:0a:c7:91:ab:0a:de:b1:39:c2:67:
                    9b:1b:3a:03:16:ef:58:61:66:36:a2:8d:db:c7:89:
                    c7:0f:2b:f0:eb:50:21:9e:08:c4:77:7b:ba:52:ca:
                    0b:e6:ed:90:82:59:83:67:2f:64:a6:24:7a:32:d1:
                    f6:ca:3b:af:51:b8:a3:d5:35:ca:9a:2b:e5:d9:55:
                    41:c1:da:d4:98:bf:64:23:d7:58:e6:0f:37:3b:9b:
                    13:34:4e:12:fe:db:37:c8:62:a8:a9:19:90:fb:41:
                    2f:22:4f:0d:38:70:6e:c6:ac:76:4e:ed:d2:74:c1:
                    e0:1b:1d:65:e1:f1:13:ff:f2:b9:38:98:5f:ea:34:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:32:5C:FB:68:1E:FD:A3:C6:54:B5:0A:27:FD:EF:81:5B:F8:CA:AE
            X509v3 Authority Key Identifier:
                keyid:51:DC:78:07:E8:4A:F5:23:93:0F:E0:23:E5:C5:AD:AF:DF:E1:D4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:3d:4f:78:23:56:7a:dc:e8:07:66:c1:f0:6d:59:a7:b3:20:
         bb:fd:1d:df:7c:27:1b:82:0a:83:e2:dd:54:38:47:2c:fe:f4:
         17:7c:5c:d5:65:77:17:de:a5:87:01:4a:e7:63:85:80:71:df:
         53:08:c9:bd:b3:7f:71:2d:f4:3d:22:eb:1a:f4:6c:b2:18:97:
         e5:0f:79:d5:c9:ba:47:62:95:58:98:3a:9a:ca:af:3e:ce:76:
         a2:dc:bb:e7:6e:3d:5b:27:31:95:bc:b8:a9:25:c3:fd:e1:fc:
         57:bf:f7:b8:34:23:59:da:76:b8:c6:d9:94:a0:ec:7c:18:23:
         76:4f:82:09:28:e2:bf:78:95:69:6f:fc:91:37:67:02:bd:e0:
         ea:64:db:11:dd:5a:99:25:36:dc:c3:7f:3b:a1:78:e0:1e:e8:
         73:97:b6:02:d8:80:2f:81:73:99:18:af:3e:31:b5:01:6e:20:
         24:00:89:f6:88:c5:e6:93:2c:e1:c6:5e:74:5b:83:f7:d6:ec:
         88:9d:c2:9c:84:04:32:e0:fb:cb:0c:d5:f9:49:86:d4:b5:7d:
         8c:8d:00:bb:10:a3:ce:af:9d:28:8b:e5:38:e1:88:56:fc:71:
         f1:5b:00:85:3e:15:8f:c0:23:64:e7:dc:ba:ed:67:b8:e8:8e:
         d0:02:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:33 2026 by rpki-client