Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
File:                     UTTRMgZFZE4urzaFh51pP3JSLHY.mft (raw, json)
Hash identifier:          cHGyScvPtazOevVysEQr+/UBpp+d1MxkYwPdTJ6Sf+Q=
Subject key identifier:   73:C0:3D:FA:DD:C3:21:72:09:B1:69:91:34:9E:5B:D5:DA:15:E3:E3
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Certificate issuer:       /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial:       019D3A8AF52A5DE86856FA60647E70258285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
Manifest number:          167A
Signing time:             Sun 29 Mar 2026 17:01:18 +0000
Manifest this update:     Sun 29 Mar 2026 17:01:18 +0000
Manifest next update:     Mon 30 Mar 2026 17:01:18 +0000
Files and hashes:         1: GpAYSqSBnbVI2jkqmZjF4cqN00c.roa (hash: watcT2RtTX9xWmhyi/0Z0eqDamt+a0rTkZyma9vwbuw=)
                          2: UTTRMgZFZE4urzaFh51pP3JSLHY.crl (hash: lXd8DZRE2qjJz5iLq4AR04W/IgInxqS8TNyjtVHH5Us=)
                          3: gmjG60yO-dM5NBY95RTYVC92dCU.roa (hash: dL9a0J4WqVdYe7nzF2w3AJROlcgyQJx3wd5YtcwcZ6U=)
                          4: n11sLe7Mij0tIk_cwXwqcrYI4nE.roa (hash: mIg+KoW9zx0USKuS5S4U3XDpJKvtCU9K4ikguJjTQms=)
                          5: wyt5ptFXgbMrupCNzfQ3MMlFH4M.roa (hash: wsSbFZeuuJRkMGSymeRGA6zSq6ntn49Ubzt9NPIc7xY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:8a:f5:2a:5d:e8:68:56:fa:60:64:7e:70:25:82:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
        Validity
            Not Before: Mar 29 17:01:18 2026 GMT
            Not After : Mar 30 17:01:18 2026 GMT
        Subject: CN=73c03dfaddc3217209b16991349e5bd5da15e3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7f:8c:53:36:74:5b:43:72:f9:f3:0d:02:9c:
                    eb:88:8a:b3:6b:33:4f:d8:45:5e:b7:9d:9c:42:bb:
                    65:44:26:88:53:fe:51:39:39:36:5d:7b:35:6c:33:
                    bf:01:d2:54:d1:d1:e7:cb:4e:b4:c3:fc:39:7d:2f:
                    25:1c:b9:93:16:b8:b4:9b:86:12:38:28:40:92:31:
                    9a:ef:ae:97:0e:fb:38:fa:98:70:9d:a9:4a:67:26:
                    bf:da:45:f5:88:e7:56:cf:43:80:8b:3e:b5:e9:38:
                    17:73:60:d9:b7:5d:01:6a:b6:6d:cf:15:b2:dc:b1:
                    c3:cf:be:ce:ac:bb:27:92:a8:d7:10:56:8d:0d:a8:
                    38:41:5b:3b:f0:0e:84:54:57:ae:f9:0e:29:93:f2:
                    9b:2b:cb:73:d2:49:94:28:fb:bb:fb:04:e3:da:25:
                    81:9a:92:2b:25:28:f9:ca:8d:f9:34:3f:ce:e0:ab:
                    24:76:bf:4c:a2:01:2c:2c:87:95:a4:b9:f1:5a:3a:
                    13:90:aa:a8:55:34:27:4a:f0:9c:2b:46:68:ce:4d:
                    44:92:91:4d:d4:25:0e:70:91:a2:3a:fb:15:2e:bc:
                    95:8f:fc:13:4e:f8:6c:75:87:7d:1e:bd:97:7d:89:
                    fe:63:a2:06:a5:78:56:08:31:90:90:5a:f9:8b:2d:
                    9e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C0:3D:FA:DD:C3:21:72:09:B1:69:91:34:9E:5B:D5:DA:15:E3:E3
            X509v3 Authority Key Identifier:
                keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:95:78:f9:7b:d5:92:76:47:ff:9a:82:f8:ff:5e:94:c9:8e:
         2b:49:9c:5c:d3:54:68:e4:58:4a:46:a4:24:c7:44:16:ad:c2:
         0c:75:20:1c:6a:f4:68:0c:2e:3f:1a:91:b8:96:95:30:58:96:
         7b:ab:b2:41:3f:5a:ef:a8:9b:9c:de:bc:34:d2:be:d1:d0:df:
         36:fe:2f:f1:97:6c:58:56:b7:1d:cc:90:65:ce:ab:8b:26:08:
         6a:7d:85:47:ca:73:70:8a:e3:6a:1f:05:8c:ca:cf:39:76:71:
         30:9d:94:4f:ea:6a:9f:81:16:bc:4f:26:45:ee:6f:3b:80:fa:
         cf:ad:b9:50:ea:36:35:9e:3b:81:2e:cd:0e:32:dc:7c:1c:dd:
         23:d3:1c:81:3f:02:fa:9a:27:e0:37:ea:ce:a0:9a:15:a0:4c:
         44:a1:2a:cc:0b:a7:ed:b4:db:14:c4:f3:15:26:5c:4b:32:f4:
         82:9a:14:65:92:42:8e:9d:29:15:1b:4d:23:b0:1d:d7:e9:22:
         a1:56:13:e7:aa:f4:fb:85:e1:65:78:ec:ec:09:42:00:b2:67:
         cc:b8:4a:f5:26:4c:16:fd:b1:1b:3a:55:16:10:49:cd:cd:a3:
         cc:71:48:5c:4a:47:c4:fd:1b:34:ce:f2:b5:28:37:55:e4:1c:
         26:dd:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:20 2026 by rpki-client