Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File:                     uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier:          V7SPySd5xuhBymfMlb/LLNYjOLe4qdYoiOjdFgh7KZc=
Subject key identifier:   C3:B2:0E:3A:A1:80:41:79:A5:64:55:1E:08:64:30:57:FF:0F:55:F0
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer:       /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial:       019E314EB71F80FC7E110D133A97984BF663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number:          1545
Signing time:             Sat 16 May 2026 15:01:42 +0000
Manifest this update:     Sat 16 May 2026 15:01:42 +0000
Manifest next update:     Sun 17 May 2026 15:01:42 +0000
Files and hashes:         1: UhAbETd73I_RNmPinYlIjwaxS5A.roa (hash: 72Y1aXwOgGGk1TvFfLXba73tNjzJqcFFrwUxU2i0lEg=)
                          2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: fUtcQVnc0FJw+ORD+yv+ReJh7f3snPh8JK4hEt0y2e0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:b7:1f:80:fc:7e:11:0d:13:3a:97:98:4b:f6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
        Validity
            Not Before: May 16 15:01:42 2026 GMT
            Not After : May 17 15:01:42 2026 GMT
        Subject: CN=c3b20e3aa1804179a564551e08643057ff0f55f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:9d:eb:60:ae:0f:ba:76:f3:0c:61:b5:d0:
                    0b:79:ed:00:8d:4d:80:42:c0:db:38:69:40:4c:69:
                    1b:71:95:c9:ad:12:14:c5:83:e6:b8:3b:85:3a:18:
                    a1:3b:e8:4c:36:77:48:a1:24:f9:2b:7b:4c:61:d2:
                    54:28:db:4a:b5:39:fe:cd:33:b4:40:f7:74:b8:65:
                    bb:3a:27:fd:f9:d1:46:38:48:36:bd:c7:42:1e:ec:
                    de:bd:24:1c:ff:a7:75:74:47:77:19:fc:17:a2:7b:
                    09:15:76:ce:29:6c:c1:9f:7d:56:e9:c4:14:97:31:
                    c4:a6:7e:a4:60:ae:35:0f:06:b5:93:b6:57:eb:a2:
                    41:39:e6:c4:c2:ee:17:06:d9:68:cf:a9:a0:be:3a:
                    74:dc:49:4d:00:fc:a3:02:e4:6b:93:8d:da:48:6d:
                    4d:59:c2:cf:a1:99:34:18:84:ef:8e:de:a7:10:e4:
                    29:0f:0b:27:a1:48:f3:cd:32:f1:bb:e9:fb:44:e2:
                    4d:a1:84:36:63:38:8f:a1:60:e4:11:62:ca:ac:3a:
                    94:6a:04:a8:f1:a5:82:09:c4:4e:5c:2d:af:1c:85:
                    97:21:ff:c4:58:bf:08:0d:a9:fa:11:1b:7e:ff:54:
                    68:90:c1:c6:70:bf:0a:b2:6d:c1:5f:6f:9f:39:b7:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B2:0E:3A:A1:80:41:79:A5:64:55:1E:08:64:30:57:FF:0F:55:F0
            X509v3 Authority Key Identifier:
                keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:49:d7:42:1b:a0:82:a4:e7:15:b9:7d:27:39:f0:eb:ad:56:
         ab:31:de:45:17:91:1e:34:b1:63:ea:1e:85:41:dd:47:77:36:
         3b:80:77:0e:eb:56:b8:35:eb:8f:66:0f:c0:0e:db:bb:95:ef:
         30:c8:15:d0:d3:e6:dc:49:ae:e9:eb:36:e2:6f:21:03:a8:df:
         f5:9b:13:03:9c:d8:e8:52:f9:f1:46:87:46:c1:9e:92:7b:7d:
         02:fc:e0:c2:d2:34:81:c1:6a:06:d5:83:9c:61:e3:40:d1:48:
         c1:72:39:05:27:20:3e:7d:2a:97:9b:87:8f:6d:30:78:b4:b7:
         db:60:71:84:7a:10:4e:ed:4c:1f:09:85:db:ff:9e:f5:0f:b3:
         9f:35:a2:9e:b4:a4:43:1a:e2:33:49:62:9c:9a:b1:c5:0c:67:
         a9:07:fc:be:7c:5f:7a:1e:66:ab:bf:f6:52:93:a4:e5:a2:30:
         d9:c8:5b:26:24:f5:3b:67:49:10:f3:3f:0d:c3:c0:30:7b:18:
         04:22:fd:87:f1:d2:11:41:fa:3f:36:83:90:c1:05:32:96:38:
         f3:12:94:f9:12:50:9f:88:b6:43:9a:16:43:38:ea:4c:9d:b5:
         34:96:f5:7d:bc:2f:88:2b:9f:d6:b4:03:e6:8a:5b:4f:12:12:
         d8:35:73:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:33 2026 by rpki-client