Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File:                     0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier:          YFcJpvKUanCqjA+VtwlBI42eYBBBR+AsgBnzeA+xooY=
Subject key identifier:   D5:1E:53:1F:AF:C0:23:05:50:B1:62:5C:74:AB:EF:6F:F5:4C:68:B5
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer:       /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial:       01A0024ABD1DDA23F8471922DB750D450DFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number:          107C
Signing time:             Fri 14 Aug 2026 22:00:47 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:47 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:47 +0000
Files and hashes:         1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: mvxiDS0n3npPsqjY/CYqfrxSD0T5KPSA+HD/Xt+hBts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:bd:1d:da:23:f8:47:19:22:db:75:0d:45:0d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
        Validity
            Not Before: Aug 14 22:00:47 2026 GMT
            Not After : Aug 15 22:00:47 2026 GMT
        Subject: CN=d51e531fafc0230550b1625c74abef6ff54c68b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c4:97:5b:09:d2:18:2b:e8:c4:f5:13:3b:7c:
                    41:ae:38:6c:02:e9:ba:6a:9b:04:7b:79:02:d2:0d:
                    38:f0:47:17:0b:d5:8d:95:73:ad:04:0e:67:47:c5:
                    72:de:3f:2c:72:73:37:e5:d7:11:52:52:f9:df:a6:
                    d2:84:bd:e8:3f:79:f6:d5:0b:84:d5:3e:6e:bd:03:
                    43:b5:b3:e4:10:22:2f:39:0a:af:a9:51:64:44:fc:
                    11:47:a8:0a:7c:b5:1d:6d:99:c4:d1:b7:fc:a3:3e:
                    d2:f8:bc:42:bd:8d:15:27:17:5d:7a:cf:43:10:50:
                    92:ea:cf:39:fe:fc:08:da:ca:9d:74:36:6f:3f:9a:
                    1f:34:f8:60:b5:b3:50:82:74:e5:ed:0c:7c:0d:d5:
                    b6:54:bc:fd:5a:c2:18:77:31:fd:bb:ef:2e:7f:7f:
                    b2:00:32:68:fc:ce:09:04:51:1f:40:ca:20:04:b0:
                    ca:17:36:48:29:98:b7:59:f5:3d:71:7f:49:ba:74:
                    2f:d3:fb:c2:c2:92:e4:39:f5:95:fe:32:8f:da:79:
                    41:df:b5:df:45:12:01:c8:63:20:03:f8:2c:b9:ea:
                    95:9c:22:9c:f0:2c:ac:54:7a:86:76:d9:85:dc:49:
                    46:4f:f7:66:d3:c2:4c:07:32:ef:42:5a:68:0f:3b:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1E:53:1F:AF:C0:23:05:50:B1:62:5C:74:AB:EF:6F:F5:4C:68:B5
            X509v3 Authority Key Identifier:
                keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:51:5a:21:6b:02:09:b8:3e:b1:c8:e6:9d:53:3c:42:86:dc:
         93:6d:ad:78:d5:79:98:9c:83:de:be:52:cf:c7:ed:3a:6b:e9:
         b4:ff:23:d3:22:ad:d7:39:35:c6:4c:bd:be:2c:d0:06:5d:ea:
         0e:59:5f:b8:da:94:0d:1e:70:9e:34:6e:ef:2e:e9:6c:a2:c0:
         33:0b:27:e2:bb:de:86:46:28:e3:b4:eb:9a:94:59:73:df:dc:
         3a:a4:a3:57:d5:a1:e0:65:89:6b:20:6e:26:15:7e:ae:22:43:
         a3:a7:41:d3:6b:a7:c4:96:ee:2c:c5:31:7a:82:77:35:de:2a:
         9a:98:19:1c:d7:40:3f:c2:84:34:58:2f:cd:da:2e:da:b5:d3:
         ac:5f:4d:af:31:33:40:59:ac:5e:ab:9a:2e:8d:14:9a:bf:8a:
         f0:6a:72:73:70:1f:e9:bc:78:4f:80:d5:70:16:2d:64:d1:71:
         a1:23:63:a2:a4:f1:91:13:00:74:22:88:27:69:85:39:80:97:
         43:8b:ad:a4:21:97:63:43:6d:a4:a3:66:0a:c9:fa:ee:0f:b7:
         0f:8d:0b:9d:8f:cd:b8:31:a0:bb:bd:7e:ea:1a:15:92:71:3a:
         b3:3d:8b:c0:c6:7c:e2:22:4e:e7:46:c1:33:c8:54:ea:66:31:
         43:9d:ef:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:33:24 2026 by rpki-client