Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft
File:                     Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft (raw, json)
Hash identifier:          tWG3nMJCDOdY4y11AuPkJ8rN5G0nsd/J8gu3qZiKZu4=
Subject key identifier:   44:CD:B9:E3:87:C2:23:08:FC:84:87:86:34:A0:B1:E6:1C:F1:34:84
Authority key identifier: 51:DC:78:07:E8:4A:F5:23:93:0F:E0:23:E5:C5:AD:AF:DF:E1:D4:D5
Certificate issuer:       /CN=51dc7807e84af523930fe023e5c5adafdfe1d4d5
Certificate serial:       019FA9079381E69CF0EC41DACC61661D87AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft
Manifest number:          0C
Signing time:             Tue 28 Jul 2026 14:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:13 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:13 +0000
Files and hashes:         1: Udx4B-hK9SOTD-Aj5cWtr9_h1NU.crl (hash: HYMv7gG4MSFvWQKFAhbgWsewrwcTuEf3t8DfbhHeOo8=)
                          2: gZ3wq_mAZJreWQuC_PJ4XCaGV4U.asa (hash: Sp5lTfywYFRQNmdnEzEg/9nc4vL2w4AX0dUfvEF9Wy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:93:81:e6:9c:f0:ec:41:da:cc:61:66:1d:87:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dc7807e84af523930fe023e5c5adafdfe1d4d5
        Validity
            Not Before: Jul 28 14:01:13 2026 GMT
            Not After : Jul 29 14:01:13 2026 GMT
        Subject: CN=44cdb9e387c22308fc84878634a0b1e61cf13484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9c:2d:8e:08:1e:5f:0d:40:97:d0:00:30:ff:
                    b6:ba:d6:c0:cd:9f:62:d1:4c:d5:dd:9f:86:dd:e4:
                    9a:bd:f0:80:ef:f9:0c:49:9b:d5:b3:08:ae:4c:09:
                    69:da:36:42:44:c5:56:43:04:31:68:bd:63:75:e0:
                    05:2d:60:b2:2a:4a:47:fb:eb:d4:7d:bb:4f:60:cf:
                    c3:f9:ee:33:3f:06:f4:b6:82:d1:92:dd:e1:bb:f4:
                    1b:ab:f8:d8:a5:f0:05:91:64:59:bb:81:08:f1:00:
                    32:d2:b9:3d:19:d7:1f:ca:a6:b5:b0:38:6b:f1:70:
                    bf:e4:47:7f:bd:86:87:06:c1:9e:6a:a3:72:41:9c:
                    b6:74:47:36:90:19:ea:35:e5:59:54:c2:d5:24:f3:
                    8b:b6:6b:eb:64:00:ad:3e:6e:00:a4:64:1b:c4:63:
                    57:36:5a:cd:bc:58:4e:98:6b:64:98:72:ff:69:1d:
                    0a:bc:ad:60:cc:ef:bd:c3:89:60:6b:28:a1:d2:ed:
                    65:f2:67:f3:48:67:d0:cc:b2:e1:09:f0:dc:4b:46:
                    7d:68:b0:73:1a:f4:56:60:6d:ee:49:b0:36:a6:5f:
                    94:9f:e9:e5:1b:a1:d5:4c:a7:56:8b:e9:e5:6d:74:
                    ee:18:a1:f7:6a:7d:17:89:9e:d4:6f:fd:52:3b:07:
                    cc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CD:B9:E3:87:C2:23:08:FC:84:87:86:34:A0:B1:E6:1C:F1:34:84
            X509v3 Authority Key Identifier:
                keyid:51:DC:78:07:E8:4A:F5:23:93:0F:E0:23:E5:C5:AD:AF:DF:E1:D4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:b1:43:ae:cd:74:d3:aa:bf:e9:74:b0:0f:48:60:7b:5f:01:
         07:18:9b:8f:06:f0:69:b0:5e:08:1a:72:21:df:1d:8f:65:55:
         fa:e2:0e:e6:ee:e1:55:8d:04:8f:01:f0:cd:c7:42:6b:32:b2:
         a1:95:9c:53:83:d9:8e:48:05:2c:3f:2c:2e:ff:6c:96:c8:55:
         f1:d3:4c:bf:b8:e9:59:86:18:3d:64:93:a2:99:9d:7a:c5:7c:
         87:46:4a:c7:8a:ce:da:eb:c1:85:fa:b5:50:3e:ae:52:6c:f8:
         4c:12:f6:0d:5a:b2:73:8f:c8:f0:8f:f7:a7:41:54:f1:5b:6e:
         96:e8:74:1a:03:0b:65:5f:7b:b2:0b:b2:3e:19:71:73:e6:b7:
         c8:ff:42:92:9e:3a:bc:65:a7:2a:ef:6b:04:7b:4c:ce:5c:4f:
         44:48:0b:ed:76:ef:97:99:bd:e8:a2:42:d5:fa:a4:52:29:c8:
         78:9c:c7:ff:03:be:c1:f5:0f:4a:84:c9:ef:f5:16:7b:ba:d1:
         e3:ec:d9:18:13:4f:9a:ed:14:f5:45:56:1a:af:4f:11:98:cf:
         e3:de:7c:b5:96:9c:3b:ee:f6:24:dd:e1:26:5f:02:76:73:19:
         9c:ec:32:c2:08:4a:0b:0c:21:37:c7:af:b6:d2:90:56:a4:9f:
         19:a6:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:41:37 2026 by rpki-client