Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File:                     UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier:          1ADY26qM36ny3wtEOFatpulmL4USlsdXIwrQH0djIm8=
Subject key identifier:   0F:0D:84:1F:42:BA:31:AC:DA:E5:A0:D4:1B:FB:D7:BE:43:DE:CA:A8
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer:       /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial:       01A08E3227FAF5FEDA824D4C77D8B7AD1205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number:          0692
Signing time:             Fri 11 Sep 2026 02:00:46 +0000
Manifest this update:     Fri 11 Sep 2026 02:00:46 +0000
Manifest next update:     Sat 12 Sep 2026 02:00:46 +0000
Files and hashes:         1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: XmCHiRHiebny8mbRaS8BiaeLcXzzxQ0KRtD52i7EtU8=)
                          2: xTwRZ6Mz0DZziLxUVhlhyoH_Gr4.roa (hash: 87G44kYU+NhJk4PPN1w3dfZMV/JFeh7+LhgClnnb7tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:32:27:fa:f5:fe:da:82:4d:4c:77:d8:b7:ad:12:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
        Validity
            Not Before: Sep 11 02:00:46 2026 GMT
            Not After : Sep 12 02:00:46 2026 GMT
        Subject: CN=0f0d841f42ba31acdae5a0d41bfbd7be43decaa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:f1:3c:c7:01:8f:c8:55:42:b7:11:7f:02:
                    52:82:c1:e7:7b:a5:ce:7c:9f:40:7a:b9:ee:28:3c:
                    2d:36:cc:b7:49:8e:75:45:37:34:03:f7:74:4f:ef:
                    20:8c:0f:67:33:35:96:4e:37:1a:bf:4e:33:e1:fb:
                    87:5f:c9:2d:07:84:9d:a0:91:0a:96:e7:fa:e6:74:
                    3d:e0:af:05:d4:ca:55:2e:98:6d:cd:bd:ce:81:85:
                    b4:12:54:02:b1:9b:b6:f5:59:c3:2b:e5:09:e1:7d:
                    05:81:1b:b6:1a:1c:a7:26:d7:d2:56:ac:01:ff:1e:
                    58:b7:21:f9:63:e0:a1:0f:c6:30:68:1f:7f:9d:3b:
                    72:fa:69:14:87:53:db:e1:b8:a2:78:1a:b5:fe:41:
                    92:df:72:26:86:4a:94:e3:1f:ee:3c:0e:40:4b:f3:
                    35:e7:c2:07:81:3a:29:e5:58:ff:96:b4:4e:25:f7:
                    56:30:06:45:d9:e6:9e:d5:94:dc:65:ab:44:d3:33:
                    fc:00:60:41:c8:9c:dc:30:89:bf:6d:32:b6:78:0d:
                    21:f8:76:23:1b:bc:3b:32:af:32:1b:0a:41:49:84:
                    95:3b:c3:27:bd:76:41:60:a0:fd:c9:ca:f6:5c:d2:
                    07:99:5f:a0:c9:c6:01:ad:fe:6c:d5:b7:78:ee:09:
                    97:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0D:84:1F:42:BA:31:AC:DA:E5:A0:D4:1B:FB:D7:BE:43:DE:CA:A8
            X509v3 Authority Key Identifier:
                keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:41:53:2c:48:a7:ff:ec:55:d2:e6:af:1f:3d:0c:bf:c4:03:
         cc:96:40:57:e9:2d:76:f2:f1:b6:9b:54:8a:23:5d:d8:29:c9:
         7a:91:74:e9:34:67:b0:a8:30:53:03:1c:83:7e:cf:75:b6:ea:
         eb:8a:de:f4:f8:45:45:3b:72:cf:f1:27:84:2f:62:63:9e:60:
         38:96:bf:4a:08:8c:ca:b5:89:5a:c1:c8:a5:d4:e8:26:b2:d3:
         3a:7a:69:8a:07:33:6f:af:3b:96:50:e6:97:98:70:2a:cb:b3:
         07:5b:ef:b2:ab:f8:ca:68:9a:3a:22:0f:b4:0c:1e:e0:6b:a3:
         41:90:f7:05:68:ce:03:ed:da:5b:11:09:16:c6:37:3a:7a:f0:
         98:18:25:4d:35:b1:c5:bd:64:72:41:0f:68:85:50:44:ff:af:
         e4:d0:e0:c8:36:bd:0e:df:05:b2:b2:88:de:ca:ae:72:83:11:
         26:49:90:37:4e:38:7e:9a:42:7b:4b:ce:50:14:86:91:2c:11:
         23:b4:ec:40:45:1b:14:70:ea:0f:fa:9e:c3:f3:ea:3a:79:41:
         71:ed:d7:3a:d2:ac:d7:ac:36:4b:18:d8:b1:e1:94:3b:3e:35:
         0d:c1:72:6a:1a:ac:6a:01:13:ca:d5:03:f4:c5:e1:e4:6d:8e:
         9b:62:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:37:37 2026 by rpki-client