Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
File:                     utha9jTxotgFi6n0KI_x63qohvk.mft (raw, json)
Hash identifier:          2aCG4cUUFdTXDcabUDmdRT865UJrAp2KDOsUWOCuOnA=
Subject key identifier:   EE:15:1A:8A:8B:76:B7:E3:17:6F:7A:1D:C3:99:2C:62:EB:7A:7A:73
Authority key identifier: BA:D8:5A:F6:34:F1:A2:D8:05:8B:A9:F4:28:8F:F1:EB:7A:A8:86:F9
Certificate issuer:       /CN=bad85af634f1a2d8058ba9f4288ff1eb7aa886f9
Certificate serial:       019EB76A106E405740FF9D8F2D565EED1A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/utha9jTxotgFi6n0KI_x63qohvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
Manifest number:          1D
Signing time:             Thu 11 Jun 2026 16:00:41 +0000
Manifest this update:     Thu 11 Jun 2026 16:00:41 +0000
Manifest next update:     Fri 12 Jun 2026 16:00:41 +0000
Files and hashes:         1: mUjvxQF4D9iByPLao2Cch7hwisM.asa (hash: Fwvk3zR66bVLMkVbCakmon+2gjR/l20uGEuAVJUp2/A=)
                          2: utha9jTxotgFi6n0KI_x63qohvk.crl (hash: IZLSu0fPhS2iR65DoIpZRuP6d4t0+JTcR19FrHAZ+yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/utha9jTxotgFi6n0KI_x63qohvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:10:6e:40:57:40:ff:9d:8f:2d:56:5e:ed:1a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bad85af634f1a2d8058ba9f4288ff1eb7aa886f9
        Validity
            Not Before: Jun 11 16:00:41 2026 GMT
            Not After : Jun 12 16:00:41 2026 GMT
        Subject: CN=ee151a8a8b76b7e3176f7a1dc3992c62eb7a7a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:a6:ef:28:48:4e:e8:3e:49:95:6a:95:15:
                    a4:f3:18:4d:44:ad:df:16:cb:37:35:91:5f:ae:08:
                    2e:95:f1:0d:2d:9e:88:af:09:bd:61:c7:09:35:95:
                    09:e8:9a:3a:e7:25:da:4e:ae:c6:3a:af:cb:59:ca:
                    87:11:d5:03:99:cf:94:14:1e:eb:a1:25:93:99:d9:
                    e5:93:66:6c:9b:7e:6e:9d:79:29:3e:00:c9:c4:f1:
                    86:f5:8a:1d:7e:05:74:86:e4:60:e5:80:c1:aa:27:
                    76:dc:a8:09:d3:fb:90:ef:32:40:a7:cc:40:f3:71:
                    e8:a0:e0:51:64:ee:2f:1a:6a:a7:25:2a:11:d4:c2:
                    74:14:44:73:b2:b5:c5:07:de:a1:0c:32:be:28:14:
                    b8:9a:7d:2f:fa:b0:bf:af:f6:92:2a:9b:70:82:f6:
                    a0:1f:1d:ca:16:73:3d:38:b0:33:18:c2:d1:30:38:
                    e8:42:36:0a:1a:7c:47:dc:5b:e7:ec:6c:b8:b0:6e:
                    5a:22:49:32:30:d0:3a:1d:f2:c0:a3:97:7b:e1:13:
                    3d:9e:97:0f:69:55:7e:f0:ac:ae:61:e5:dc:89:d0:
                    b2:8a:3e:c6:17:66:14:00:80:89:2c:af:dc:b0:ff:
                    98:e1:61:1d:bf:da:67:78:94:4e:b7:0d:d3:03:57:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:15:1A:8A:8B:76:B7:E3:17:6F:7A:1D:C3:99:2C:62:EB:7A:7A:73
            X509v3 Authority Key Identifier:
                keyid:BA:D8:5A:F6:34:F1:A2:D8:05:8B:A9:F4:28:8F:F1:EB:7A:A8:86:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utha9jTxotgFi6n0KI_x63qohvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:36:81:b6:65:82:d4:65:d2:08:b2:02:47:28:a0:3b:6e:04:
         bc:0c:6a:4d:b8:36:4a:5b:f9:a5:9c:69:e3:82:17:71:05:52:
         4c:07:7d:0e:b6:fe:cb:3a:1c:d3:65:40:70:45:37:15:58:9b:
         ef:9d:b0:15:50:63:21:14:cf:8e:af:f9:92:a2:a8:1e:6d:d7:
         83:52:0e:df:71:90:41:c3:ec:0c:72:2c:df:71:5b:03:ae:cd:
         ec:03:03:13:c3:bb:b2:5c:37:40:14:99:b2:ea:08:9f:8a:2f:
         72:a7:51:9b:60:80:8c:64:ae:45:e3:28:78:b5:6b:dc:a8:36:
         1b:f0:b2:b0:5a:1a:a1:54:50:0c:11:83:98:54:f5:48:af:31:
         1a:b9:f6:d1:4f:ec:cb:15:ae:2a:b9:02:8b:ab:2e:c4:f2:8b:
         d3:85:9e:53:f0:97:5e:97:cb:4f:3f:fa:8e:e0:c6:6f:07:19:
         9b:c0:d7:b8:d5:cb:15:ce:9f:36:d5:2f:43:4b:33:d6:91:78:
         2f:5c:77:f0:fb:c3:8a:49:4f:16:1f:3f:76:c3:08:a3:5f:18:
         87:3d:d3:0d:d8:29:c5:09:31:d9:d7:f5:12:1a:61:67:10:4f:
         78:64:78:d4:19:93:3f:c5:fb:43:88:e4:ac:3c:dd:a9:5f:13:
         b6:78:d6:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63ahBuQFdA/52PLVZe7RqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhZDg1YWY2MzRmMWEyZDgwNThiYTlmNDI4OGZmMWViN2Fh
ODg2ZjkwHhcNMjYwNjExMTYwMDQxWhcNMjYwNjEyMTYwMDQxWjAzMTEwLwYDVQQD
EyhlZTE1MWE4YThiNzZiN2UzMTc2ZjdhMWRjMzk5MmM2MmViN2E3YTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ+m7yhITug+SZVqlRWk8xhNRK3f
Fss3NZFfrggulfENLZ6Irwm9YccJNZUJ6Jo65yXaTq7GOq/LWcqHEdUDmc+UFB7r
oSWTmdnlk2Zsm35unXkpPgDJxPGG9YodfgV0huRg5YDBqid23KgJ0/uQ7zJAp8xA
83HooOBRZO4vGmqnJSoR1MJ0FERzsrXFB96hDDK+KBS4mn0v+rC/r/aSKptwgvag
Hx3KFnM9OLAzGMLRMDjoQjYKGnxH3Fvn7Gy4sG5aIkkyMNA6HfLAo5d74RM9npcP
aVV+8KyuYeXcidCyij7GF2YUAICJLK/csP+Y4WEdv9pneJROtw3TA1e+BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4VGoqLdrfjF296HcOZLGLrenpzMB8GA1UdIwQY
MBaAFLrYWvY08aLYBYup9CiP8et6qIb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXRoYTlqVHhvdGdGaTZuMEtJX3g2M3FvaHZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81MzA2YjYtNTQ3Yy00OWVmLThhNjQt
MzkwMWRhOTlmYzhhLzEvdXRoYTlqVHhvdGdGaTZuMEtJX3g2M3FvaHZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81MzA2YjYtNTQ3Yy00OWVmLThhNjQtMzkwMWRhOTlmYzhh
LzEvdXRoYTlqVHhvdGdGaTZuMEtJX3g2M3FvaHZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDaBtmWC
1GXSCLICRyigO24EvAxqTbg2Slv5pZxp44IXcQVSTAd9Drb+yzoc02VAcEU3FVib
752wFVBjIRTPjq/5kqKoHm3Xg1IO33GQQcPsDHIs33FbA67N7AMDE8O7slw3QBSZ
suoIn4ovcqdRm2CAjGSuReMoeLVr3Kg2G/CysFoaoVRQDBGDmFT1SK8xGrn20U/s
yxWuKrkCi6suxPKL04WeU/CXXpfLTz/6juDGbwcZm8DXuNXLFc6fNtUvQ0sz1pF4
L1x38PvDiklPFh8/dsMIo18Yhz3TDdgpxQkx2df1EhphZxBPeGR41BmTP8X7Q4jk
rDzdqV8TtnjWIA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:32:24 2026 by rpki-client