Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
File:                     1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft (raw, json)
Hash identifier:          pV26uoKgihlnz9b2akV/8WtEeWmVUzvk1s1+alzctEw=
Subject key identifier:   4A:30:9B:1B:08:3E:B0:91:D2:BD:19:75:17:CB:07:38:85:B3:4B:ED
Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
Certificate issuer:       /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Certificate serial:       019E2F96C444DC9F95AED7BAFAB23116395D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
Manifest number:          135B
Signing time:             Sat 16 May 2026 07:01:10 +0000
Manifest this update:     Sat 16 May 2026 07:01:10 +0000
Manifest next update:     Sun 17 May 2026 07:01:10 +0000
Files and hashes:         1: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl (hash: VWDqOzAXv+aESWeSIfSn1ZmLxbKUrm6Cacav4Qrppdg=)
                          2: 3WjchZn0ZaVWap-kBJDqG0_K268.roa (hash: mSek/wANUBuae6L6B5/5kvCQ+lsoN15OARfOIY4PvDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:c4:44:dc:9f:95:ae:d7:ba:fa:b2:31:16:39:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
        Validity
            Not Before: May 16 07:01:10 2026 GMT
            Not After : May 17 07:01:10 2026 GMT
        Subject: CN=4a309b1b083eb091d2bd197517cb073885b34bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:46:06:9b:c0:cc:8a:51:64:29:32:42:bc:
                    5e:89:7f:70:36:95:d3:d1:2d:be:11:a2:28:98:c6:
                    dc:98:ad:a2:ec:26:8d:3a:07:21:c7:a6:b2:7d:0b:
                    45:80:2d:fe:7a:94:06:ee:56:ae:36:6d:ff:96:d9:
                    ed:98:0a:52:fb:a4:2c:30:4d:4c:0e:16:e5:fe:66:
                    9a:b1:22:70:79:67:ee:f6:9d:1c:df:bf:68:28:25:
                    ba:06:0e:4c:8f:3a:ce:5e:26:ae:cd:be:bb:e1:35:
                    c6:c4:b4:d4:3e:42:cf:69:06:58:ec:57:f9:c6:0c:
                    0a:5e:88:3d:19:7b:c3:d5:54:a5:9e:65:3e:50:c2:
                    94:b2:9c:83:2c:ea:43:23:4a:fc:92:b6:be:d6:68:
                    06:01:91:f4:d3:d7:9a:9f:71:58:f6:fc:66:9f:81:
                    7f:a9:59:b4:b1:9a:a7:ba:21:b8:46:ea:3e:13:51:
                    57:59:19:48:1d:3e:e0:f1:df:81:73:81:7c:60:c1:
                    34:03:da:6b:8d:b7:42:5c:5b:fb:c8:a0:e7:41:24:
                    15:72:98:9e:87:54:5a:13:b1:59:11:85:3d:36:e9:
                    05:b4:df:ef:9c:a0:9e:09:a5:2b:60:2f:89:d6:e9:
                    f2:74:64:ec:bd:73:a8:f0:d8:79:aa:ff:bd:35:b7:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:30:9B:1B:08:3E:B0:91:D2:BD:19:75:17:CB:07:38:85:B3:4B:ED
            X509v3 Authority Key Identifier:
                keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:7e:a7:59:d4:65:78:70:e3:c4:3f:5b:95:4e:a7:2f:b4:85:
         fc:a0:62:18:84:83:90:f0:5f:af:c3:56:e5:c5:e3:7c:0f:be:
         69:00:26:46:4a:cc:38:ef:86:d3:27:ac:8c:6b:2a:e0:6f:52:
         38:b0:64:7c:11:c0:70:4c:e0:8d:a6:1d:d0:51:96:3b:ad:34:
         42:75:38:22:77:66:39:79:fb:05:cf:07:10:86:36:81:d6:78:
         5b:83:99:55:1d:ea:c2:5f:80:fd:d5:a7:7a:cd:a1:18:53:87:
         90:72:60:95:6d:6f:21:8b:cd:6c:a0:2f:e8:17:b1:61:ba:e0:
         f3:0d:c9:e5:7c:b4:b8:d3:f6:89:ee:38:bb:a5:bf:3f:e2:c2:
         a3:44:cf:49:13:99:f6:fe:bf:16:14:0a:76:da:02:5d:5f:3e:
         58:25:82:88:7e:a6:0d:d7:56:25:c8:3d:c3:5f:71:3e:7d:18:
         d8:f5:a6:e5:39:4f:3f:65:4c:57:0d:fe:ab:5f:6f:10:bb:80:
         00:5f:52:b0:2a:8e:14:33:62:4b:1c:f8:e9:b9:4f:24:29:2c:
         00:71:51:b3:4c:c0:5c:39:d0:66:bb:e2:30:f1:1e:24:77:3c:
         06:c4:ff:e2:62:ff:48:84:62:03:5d:01:2d:a8:09:64:af:90:
         af:69:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:05 2026 by rpki-client