Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File:                     0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier:          2+JAsrHd0EM8uCWgCw92bp5aLgO90aXkob1nTAqCILA=
Subject key identifier:   B0:DA:17:36:98:89:BC:37:28:13:38:49:33:52:6B:8C:B6:58:11:27
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer:       /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial:       019FAABE30A82FCF5C6CF67EA4A9BF9865E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number:          05AE
Signing time:             Tue 28 Jul 2026 22:00:18 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:18 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:18 +0000
Files and hashes:         1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: HrM30h4EYMd7Bdrkth3XClNkXsum5vieXid5CP6tUqE=)
                          2: j330ZQOtQiCZJuxomPWTMdBKcHQ.roa (hash: MzEVW/Ea4Il5bIfwlWQJ+ibRovLnW9XexRlsZqbNutk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:30:a8:2f:cf:5c:6c:f6:7e:a4:a9:bf:98:65:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
        Validity
            Not Before: Jul 28 22:00:18 2026 GMT
            Not After : Jul 29 22:00:18 2026 GMT
        Subject: CN=b0da17369889bc372813384933526b8cb6581127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:21:6f:63:de:52:92:13:28:24:fa:f8:dd:40:
                    e3:95:c3:5e:dc:c5:bb:07:82:9d:8b:10:56:7f:e8:
                    8b:8b:21:e6:4c:38:d3:57:1b:fc:5e:ba:6f:1a:17:
                    e1:ff:bf:46:c6:c4:37:95:7a:68:26:81:a4:96:78:
                    32:fc:3b:ab:ac:56:82:af:43:58:86:05:5d:ed:eb:
                    2d:04:33:60:b3:dc:2e:a8:e4:d3:7b:52:4e:2a:6e:
                    49:ac:da:e4:71:0d:08:b2:49:fc:19:53:8b:96:39:
                    ba:d0:a4:05:04:ce:89:42:ec:f6:aa:e5:6b:f9:28:
                    cb:b7:9f:85:a2:66:ae:16:5f:82:ba:a0:ad:79:a2:
                    3a:3a:1e:37:7c:b6:f7:0c:3f:55:40:e4:c1:88:91:
                    65:17:56:a2:65:0b:19:4f:e5:7a:f3:b6:5b:e4:f9:
                    bc:e8:76:95:90:4a:ae:36:8b:b8:45:82:e0:32:69:
                    ba:3a:09:3d:59:b3:df:a4:32:03:22:05:64:a3:27:
                    51:9f:31:cb:9a:58:3d:27:54:ed:25:a8:02:c7:4e:
                    d1:d5:06:15:a4:7e:9d:ea:03:ef:f4:57:4a:83:65:
                    0f:0f:8e:38:6d:13:52:1a:c8:0c:58:38:0e:5c:41:
                    4b:41:95:58:1e:4b:0b:b2:7d:c7:7a:f8:45:68:5e:
                    c8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DA:17:36:98:89:BC:37:28:13:38:49:33:52:6B:8C:B6:58:11:27
            X509v3 Authority Key Identifier:
                keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d6:7e:14:4c:49:c4:a2:9f:68:61:34:a2:be:59:7c:b3:ee:
         39:35:48:9c:ca:01:eb:41:f7:6d:14:c2:1e:c0:a9:b3:ff:c5:
         28:48:21:88:52:59:ce:74:0a:69:15:54:48:54:e7:af:f5:9a:
         6a:f6:a0:be:37:c2:7d:9a:3a:62:4a:c5:dc:f1:b7:38:32:9d:
         f0:f8:d4:da:fc:da:b0:d0:74:a4:fb:f7:4d:a2:74:7a:1f:f4:
         eb:0d:5f:82:f3:a3:51:03:ba:7e:47:d3:bf:c9:bb:93:2d:25:
         19:ec:5e:8a:78:d8:73:41:97:3f:07:0e:f4:8d:54:4f:f5:84:
         ea:b0:34:01:2e:59:17:70:10:f2:17:ce:00:47:5f:18:bf:37:
         5d:58:b1:5a:3e:e2:9d:ea:2c:6d:18:3f:ae:71:5a:4b:38:2b:
         e4:43:46:86:52:c8:fc:f3:71:7c:a4:dc:13:81:97:36:82:30:
         c3:10:64:9e:be:56:78:b8:90:65:27:4f:49:25:ed:33:fc:b9:
         01:bc:35:72:61:38:68:8e:73:46:d9:6a:c7:44:dc:d7:9f:ac:
         48:87:e9:00:c3:39:c9:a1:f8:d1:ca:2a:76:65:80:93:58:21:
         12:f2:fd:3b:7a:26:30:73:6a:58:fa:21:1e:99:6b:ac:8b:8f:
         46:b2:3d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvjCoL89cbPZ+pKm/mGXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZTRjZmU3ZjQ3ZjUyNDY0NTQ1YWRiYjBiYmM0ZDMzNDc4
YWFlYjIwHhcNMjYwNzI4MjIwMDE4WhcNMjYwNzI5MjIwMDE4WjAzMTEwLwYDVQQD
EyhiMGRhMTczNjk4ODliYzM3MjgxMzM4NDkzMzUyNmI4Y2I2NTgxMTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SFvY95SkhMoJPr43UDjlcNe3MW7
B4KdixBWf+iLiyHmTDjTVxv8XrpvGhfh/79GxsQ3lXpoJoGklngy/DurrFaCr0NY
hgVd7estBDNgs9wuqOTTe1JOKm5JrNrkcQ0Iskn8GVOLljm60KQFBM6JQuz2quVr
+SjLt5+FomauFl+CuqCteaI6Oh43fLb3DD9VQOTBiJFlF1aiZQsZT+V687Zb5Pm8
6HaVkEquNou4RYLgMmm6Ogk9WbPfpDIDIgVkoydRnzHLmlg9J1TtJagCx07R1QYV
pH6d6gPv9FdKg2UPD444bRNSGsgMWDgOXEFLQZVYHksLsn3HevhFaF7IfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDaFzaYibw3KBM4STNSa4y2WBEnMB8GA1UdIwQY
MBaAFNLkz+f0f1JGRUWtuwu8TTNHiq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMt
OGYyMzFmNzMxN2I5LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMtOGYyMzFmNzMxN2I5
LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldZ+FExJ
xKKfaGE0or5ZfLPuOTVInMoB60H3bRTCHsCps//FKEghiFJZznQKaRVUSFTnr/Wa
avagvjfCfZo6YkrF3PG3ODKd8PjU2vzasNB0pPv3TaJ0eh/06w1fgvOjUQO6fkfT
v8m7ky0lGexeinjYc0GXPwcO9I1UT/WE6rA0AS5ZF3AQ8hfOAEdfGL83XVixWj7i
neosbRg/rnFaSzgr5ENGhlLI/PNxfKTcE4GXNoIwwxBknr5WeLiQZSdPSSXtM/y5
Abw1cmE4aI5zRtlqx0Tc15+sSIfpAMM5yaH40coqdmWAk1ghEvL9O3omMHNqWPoh
HplrrIuPRrI9bA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:44:43 2026 by rpki-client