Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File:                     UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier:          geaOkxGI/97Ydq0Nm6uQ7ogrr6cKbpnWwp7BrqiUBTc=
Subject key identifier:   69:55:CB:D0:98:E5:42:C9:42:FB:2F:73:11:48:2E:78:2D:93:F2:AD
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer:       /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial:       019FA297304E63F10E049DF958B4A466CA05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number:          0618
Signing time:             Mon 27 Jul 2026 08:00:44 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:44 +0000
Manifest next update:     Tue 28 Jul 2026 08:00:44 +0000
Files and hashes:         1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: N3B5xoMXVhtKrhLMn9FG1qN/BydBl3b1hp3A0YvluNQ=)
                          2: xTwRZ6Mz0DZziLxUVhlhyoH_Gr4.roa (hash: 87G44kYU+NhJk4PPN1w3dfZMV/JFeh7+LhgClnnb7tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:97:30:4e:63:f1:0e:04:9d:f9:58:b4:a4:66:ca:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
        Validity
            Not Before: Jul 27 08:00:44 2026 GMT
            Not After : Jul 28 08:00:44 2026 GMT
        Subject: CN=6955cbd098e542c942fb2f7311482e782d93f2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:20:b4:14:78:77:42:66:4f:03:d4:87:24:30:
                    e0:42:b0:3d:fe:fc:a7:a1:fc:ec:03:5d:fb:e7:56:
                    60:b6:b4:f5:19:76:1a:c3:43:97:01:ec:4b:0e:3c:
                    62:f2:7f:d1:50:f9:c3:b8:fc:a5:13:4a:99:5a:1f:
                    8e:f6:fb:fc:47:3f:93:75:ed:f1:35:32:e5:8b:62:
                    b3:ae:0d:2a:eb:f6:c4:cd:1a:fc:95:8c:53:fd:f6:
                    5b:7d:94:d0:5c:0d:51:a8:9b:27:0a:c2:8d:15:0d:
                    e5:8d:e1:c7:47:28:03:da:2b:f3:b8:75:f7:3a:37:
                    76:2f:6f:66:e6:27:c6:31:3e:0f:43:5a:f6:07:58:
                    fb:d1:ce:c5:a5:9c:94:32:57:23:e1:72:0a:72:22:
                    d0:ee:8d:b1:c3:78:ff:c0:8e:34:04:ca:de:cb:c6:
                    23:bf:5e:f9:26:3a:94:88:46:99:04:83:b2:02:12:
                    34:fe:13:02:42:5a:52:4e:6e:d6:c7:5c:00:29:a1:
                    73:73:16:94:eb:5a:35:da:34:0d:d6:8c:ef:f8:b1:
                    a2:60:63:f1:12:f8:86:59:13:dd:bb:7c:73:b5:61:
                    58:d8:9f:6c:6e:ea:1d:9e:88:6c:9d:5b:c8:9a:06:
                    b5:a9:2d:2d:26:6d:f3:df:1a:36:32:fc:dc:9e:49:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:55:CB:D0:98:E5:42:C9:42:FB:2F:73:11:48:2E:78:2D:93:F2:AD
            X509v3 Authority Key Identifier:
                keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:59:0b:8a:ac:85:fd:3c:41:22:1b:31:44:4f:08:a2:7b:a0:
         b0:56:0b:18:a4:70:89:9b:d0:9a:41:00:52:71:28:51:63:72:
         ab:75:a7:01:91:c3:29:48:ad:91:b0:72:43:9b:36:b2:d9:8d:
         e8:36:a2:af:87:8c:27:7b:ca:da:a3:84:f5:96:0e:7e:63:9e:
         55:4b:9e:37:37:66:d9:7c:9e:7a:3e:90:6d:6b:a8:4b:42:86:
         87:b7:3c:98:d1:e5:f5:b4:76:48:d9:07:44:9a:df:b2:81:39:
         c3:c6:b5:80:26:ff:31:c2:f9:01:fb:5d:8d:a5:b7:25:53:ac:
         f2:5b:53:fa:6c:cc:bc:94:04:c3:2b:45:35:65:67:6a:de:59:
         b9:ec:1e:d3:8b:ec:b9:ae:22:3a:83:bc:e2:6b:8a:b0:78:ef:
         81:b3:d9:18:a8:60:56:86:de:ff:ba:15:cb:0d:4e:93:3d:47:
         f0:81:da:76:ef:9f:2e:69:3f:6f:3e:fd:11:8c:77:d9:a7:45:
         32:67:66:81:aa:1e:06:0b:2d:74:42:77:9f:fe:7d:d4:42:3d:
         fb:16:eb:24:71:f8:10:4e:21:a1:66:37:7a:45:b4:09:8c:38:
         f5:a5:fd:5a:19:ca:06:7e:2f:85:ec:cf:f9:cc:c3:5e:c6:e0:
         fa:ea:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:07:20 2026 by rpki-client