Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File:                     uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier:          PsALR37B7pfzZmjlSQ94tI2IHYQxhq82lng0CtnnYYA=
Subject key identifier:   71:BD:18:D7:B3:7D:6A:20:EC:6E:92:3C:E9:75:B1:64:0D:F8:CE:F1
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer:       /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial:       019F190D2A169982FDEFD8D424B01BEFDA27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number:          15BD
Signing time:             Tue 30 Jun 2026 15:02:00 +0000
Manifest this update:     Tue 30 Jun 2026 15:02:00 +0000
Manifest next update:     Wed 01 Jul 2026 15:02:00 +0000
Files and hashes:         1: UhAbETd73I_RNmPinYlIjwaxS5A.roa (hash: 72Y1aXwOgGGk1TvFfLXba73tNjzJqcFFrwUxU2i0lEg=)
                          2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: +7hTlKb+5rk8vz06GEbGxILevSqAI2060oG2Jl2PNbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0d:2a:16:99:82:fd:ef:d8:d4:24:b0:1b:ef:da:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
        Validity
            Not Before: Jun 30 15:02:00 2026 GMT
            Not After : Jul  1 15:02:00 2026 GMT
        Subject: CN=71bd18d7b37d6a20ec6e923ce975b1640df8cef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bc:96:98:51:3a:c5:80:9c:cc:6b:75:a5:15:
                    3e:7d:1a:c6:da:b4:4a:70:90:e5:4d:db:49:36:c4:
                    f2:fc:25:32:d0:aa:5b:fb:ea:97:0a:55:01:26:9b:
                    d8:50:ce:72:a0:f1:63:2d:3b:3f:a7:fa:3f:f0:9b:
                    b1:34:e0:df:22:75:d2:ab:87:ef:43:37:63:ed:1e:
                    76:e8:64:ce:20:57:36:36:e7:f9:39:99:35:72:ce:
                    65:02:a4:b8:5a:cf:40:ba:d7:60:46:e4:e7:ac:83:
                    2f:7e:78:8d:18:f0:a0:e4:61:0a:f3:20:d5:26:45:
                    7b:7f:4f:f7:2c:43:56:0a:c6:11:f9:6f:cc:cc:14:
                    dc:4e:4d:ae:0b:6c:0c:1d:76:20:e2:ab:0f:13:36:
                    fe:37:4c:59:70:22:55:9f:a0:26:a6:18:06:dc:fb:
                    c0:17:f3:0f:dd:c9:68:23:c0:72:5c:6e:4f:d6:8d:
                    1d:e6:35:5d:0d:78:a9:25:02:0d:dd:d6:25:d8:dd:
                    d3:1e:db:bb:79:e5:a2:f3:b6:a4:3e:70:dc:84:d3:
                    c0:b4:58:22:41:71:87:d4:e6:cd:7a:97:a2:69:ff:
                    5d:dc:db:57:52:f5:43:50:78:5f:ce:7b:42:36:a3:
                    a0:51:bb:5f:fa:71:7f:2a:bc:ed:bc:29:02:19:53:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BD:18:D7:B3:7D:6A:20:EC:6E:92:3C:E9:75:B1:64:0D:F8:CE:F1
            X509v3 Authority Key Identifier:
                keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:76:1e:60:17:16:86:54:28:c8:f3:9a:c1:5c:55:5f:e2:11:
         1a:c3:df:6f:63:25:51:30:8a:43:8b:88:ca:1d:6e:f1:9f:c1:
         42:65:78:15:58:dd:61:31:b6:52:f4:32:fa:35:47:eb:da:0d:
         d2:c8:2d:12:65:61:e1:63:c6:e9:0f:a3:26:4f:5c:bd:2c:33:
         7f:02:7f:b6:15:cf:bb:a2:fc:3d:a1:53:60:03:cc:66:c0:c7:
         39:3a:c7:18:86:02:5f:90:b2:00:c5:ad:9a:19:62:eb:37:fe:
         ca:55:40:12:18:8f:d3:46:51:85:33:93:50:9c:94:6f:88:10:
         c4:82:4b:24:26:e6:85:10:d0:06:f5:75:b2:a8:62:53:70:1d:
         66:42:14:d2:76:88:73:fa:74:b2:0b:a8:b4:1c:85:19:48:19:
         1a:8f:43:ff:e3:6e:97:da:68:43:c2:c1:78:ff:7b:72:79:f2:
         e1:f9:68:42:94:4b:8d:0a:a9:38:8c:c3:33:15:4d:e5:a0:cb:
         d4:0e:79:32:25:02:f0:11:c2:9e:2b:18:1e:77:79:91:da:e2:
         0d:f2:bb:c8:18:03:f1:32:88:10:04:b7:d9:7d:32:e0:ce:42:
         86:05:38:1e:ea:03:f1:e5:d3:ce:78:ab:3e:c1:d5:10:71:b8:
         46:bc:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:07 2026 by rpki-client