Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
File:                     utha9jTxotgFi6n0KI_x63qohvk.mft (raw, json)
Hash identifier:          HXrmaRH+f6vca3UUec6Y25LIdoYSpYwMtBayKGuvACM=
Subject key identifier:   DD:22:63:56:2D:8E:54:03:C5:44:78:7E:96:FA:2B:D6:AB:4F:59:FB
Authority key identifier: BA:D8:5A:F6:34:F1:A2:D8:05:8B:A9:F4:28:8F:F1:EB:7A:A8:86:F9
Certificate issuer:       /CN=bad85af634f1a2d8058ba9f4288ff1eb7aa886f9
Certificate serial:       01A03C3A37B81416D06D761060BD7B47A4DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/utha9jTxotgFi6n0KI_x63qohvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
Manifest number:          E7
Signing time:             Wed 26 Aug 2026 04:00:43 +0000
Manifest this update:     Wed 26 Aug 2026 04:00:43 +0000
Manifest next update:     Thu 27 Aug 2026 04:00:43 +0000
Files and hashes:         1: gaSZujKtw_TRe60U8Rnxea0EvBM.asa (hash: Mx72IAP+duu9B/1aglZjeRt4lAwa8z+CCHH5CFrPl8g=)
                          2: utha9jTxotgFi6n0KI_x63qohvk.crl (hash: TFzIpuSZM8SirIwSPPqFH6HRVLTQc7N697jVH7v5IQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/utha9jTxotgFi6n0KI_x63qohvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3c:3a:37:b8:14:16:d0:6d:76:10:60:bd:7b:47:a4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bad85af634f1a2d8058ba9f4288ff1eb7aa886f9
        Validity
            Not Before: Aug 26 04:00:43 2026 GMT
            Not After : Aug 27 04:00:43 2026 GMT
        Subject: CN=dd2263562d8e5403c544787e96fa2bd6ab4f59fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:de:30:dd:39:7b:cd:8a:53:01:87:54:ef:
                    f2:31:cf:d3:5c:82:47:82:52:83:27:bb:7a:f6:f7:
                    f1:61:0d:2c:f8:6f:bd:c2:37:66:29:fa:de:0b:30:
                    b9:de:08:4c:42:af:d8:27:c2:7a:6f:87:30:b4:7e:
                    04:8a:0f:55:11:41:7c:d6:55:43:9a:47:85:e7:6f:
                    75:cc:b4:93:37:05:42:b9:a7:24:b7:65:49:30:ac:
                    db:74:2f:71:dc:7b:0b:e9:5a:5a:04:7f:b1:b9:4d:
                    a7:6a:d7:b7:ce:3f:98:d3:fb:66:94:4c:92:f2:83:
                    3a:1d:01:e4:de:86:ce:8e:c6:4f:1e:0c:d3:1b:75:
                    67:ed:74:9d:e2:7a:85:a8:eb:7c:ed:00:69:2d:66:
                    de:81:f6:a7:38:4c:87:bb:7e:99:7d:94:06:2c:7b:
                    88:a9:cd:ec:e9:5b:ac:b9:83:e0:ff:b3:f2:ab:17:
                    85:39:b2:72:48:41:4f:23:80:1a:53:13:c6:dc:8d:
                    08:0f:25:0c:47:6d:2c:f7:bf:6f:5e:27:47:5b:95:
                    fd:07:df:8d:02:5b:6c:55:20:de:49:05:ad:95:8d:
                    e5:ef:25:ac:a7:61:e2:9b:2c:8b:08:8e:c9:c1:23:
                    93:7f:99:dc:f8:b2:15:7a:26:1d:bd:e4:e4:51:cf:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:22:63:56:2D:8E:54:03:C5:44:78:7E:96:FA:2B:D6:AB:4F:59:FB
            X509v3 Authority Key Identifier:
                keyid:BA:D8:5A:F6:34:F1:A2:D8:05:8B:A9:F4:28:8F:F1:EB:7A:A8:86:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utha9jTxotgFi6n0KI_x63qohvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ff:68:01:84:12:6b:64:39:30:63:11:3e:f8:4c:7f:87:02:
         10:e0:8e:5e:0c:01:f4:d5:93:68:b0:10:34:26:9b:04:64:09:
         9b:14:f8:09:97:e4:2e:88:ec:f4:77:d5:e8:1b:3b:b8:a8:df:
         86:28:5f:9e:c9:3a:7a:71:88:1f:4c:9e:4a:c8:88:0d:d1:de:
         5d:8e:f2:b9:0d:df:18:fd:4b:65:ab:a1:65:eb:8c:ed:58:8f:
         a0:e2:b0:41:5f:33:d4:96:23:87:37:65:43:ad:8c:f5:bc:36:
         ed:b3:f5:2b:f8:48:5c:19:ec:85:56:3c:9a:d9:3c:e6:26:d1:
         99:4f:9d:24:e3:71:e4:f4:e0:17:5f:d9:bd:75:00:9b:a4:68:
         43:85:0d:27:c7:a2:a4:9e:b5:a4:57:0c:c3:a9:42:86:9f:42:
         57:10:0c:f6:be:05:53:19:1a:89:ec:0f:48:11:f7:c6:fe:8d:
         57:ab:33:d3:75:86:0e:ac:4a:e1:07:27:63:17:dc:b7:fd:71:
         32:3d:00:3f:4c:8f:50:2e:bd:0d:d9:6e:bc:d0:46:b5:03:41:
         bf:95:96:04:30:6b:48:56:03:2b:60:a1:4e:14:93:7e:91:fd:
         44:4d:b7:41:c6:e2:13:7e:3f:c7:c5:62:ca:53:14:66:79:79:
         c9:43:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 11:32:55 2026 by rpki-client