Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
File:                     UTBvX0bb20E2BCor440F0iKnx2E.mft (raw, json)
Hash identifier:          FTfbOqLo/svwa/nIMLBhkqtUyYlozrlz3LqusYyIqyA=
Subject key identifier:   84:F8:59:40:2C:D9:0F:4A:AA:75:F4:21:7E:07:19:85:5E:D5:2B:67
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Certificate issuer:       /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial:       019FA898F6AD41D2DCAB30D463B05081889F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
Manifest number:          0361
Signing time:             Tue 28 Jul 2026 12:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:24 +0000
Files and hashes:         1: 33HrBlMZ5V38xoLyShooiO_rkkA.asa (hash: zLUs1i5RXgmW6h4adP/bthMoH9+3lkA98Ie/udyMks4=)
                          2: RXH1E0juuTjk09gdd34VSaLqezE.roa (hash: DZRkuPFfVpgIXoaL3urk2cfBtZs5W6fdoPmvj+H+iwE=)
                          3: UTBvX0bb20E2BCor440F0iKnx2E.crl (hash: /IQikUt8gr1Oi5HOYIJgcoYkrsnzaTusEi5UX1K820c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:98:f6:ad:41:d2:dc:ab:30:d4:63:b0:50:81:88:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
        Validity
            Not Before: Jul 28 12:00:24 2026 GMT
            Not After : Jul 29 12:00:24 2026 GMT
        Subject: CN=84f859402cd90f4aaa75f4217e0719855ed52b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:13:dc:ce:da:72:fa:2a:1f:1b:a1:cb:f3:
                    ba:41:27:26:4a:7a:b7:1f:5c:a5:d1:2a:05:d8:63:
                    40:16:cd:b0:3e:7c:7b:d7:fd:ea:f2:6f:84:0b:c7:
                    9e:2f:1c:4b:1b:33:b5:97:4f:4a:f3:3f:15:40:50:
                    87:44:b2:1a:43:97:2b:c1:c8:f5:2e:1b:de:b4:55:
                    c3:cb:5d:44:06:c0:fb:52:64:50:e6:b6:34:39:af:
                    4c:54:12:55:d6:e6:e1:a5:08:85:4d:74:7b:4c:09:
                    2e:60:50:4d:34:02:f8:29:e1:43:32:f3:78:b7:43:
                    28:76:83:25:f0:33:64:4a:35:c2:97:85:93:2f:4d:
                    94:65:5a:d3:7b:b4:cc:7f:77:e8:3e:c2:92:b3:38:
                    9d:16:20:8d:e0:84:e6:ef:48:bf:11:67:3c:59:16:
                    31:6a:23:a0:fa:fd:d6:94:71:a0:42:55:0e:98:93:
                    7c:fe:b3:06:33:10:f5:fd:6b:1b:74:80:ba:1a:7b:
                    a4:db:95:65:20:ce:c5:73:24:01:6e:f7:88:2e:a4:
                    47:d4:19:21:74:da:f4:b9:3b:8d:eb:ab:a6:01:db:
                    88:65:73:2c:64:a3:65:16:03:cf:6f:b8:af:31:30:
                    87:56:1f:c0:3b:e2:83:ca:62:ce:f2:1f:7f:5e:30:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F8:59:40:2C:D9:0F:4A:AA:75:F4:21:7E:07:19:85:5E:D5:2B:67
            X509v3 Authority Key Identifier:
                keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:3f:68:02:5b:0f:29:9c:75:64:e9:39:1a:ef:23:ef:59:44:
         9a:d7:ed:07:23:fc:a0:25:38:fe:d4:9c:12:1b:27:3b:da:96:
         96:e1:6b:09:3b:ac:0d:cc:af:fc:90:83:a9:d3:f0:e1:eb:6f:
         39:ce:7a:72:8c:9f:97:3b:e9:a1:55:27:80:0b:f2:3e:99:44:
         09:03:c4:b4:87:be:5a:3d:f7:e7:56:04:24:1b:8a:fe:29:b3:
         92:05:be:13:38:2f:06:40:73:fa:2e:e6:f8:c8:15:eb:63:b6:
         c5:fd:71:0d:80:37:c8:70:8f:d3:e9:5b:0d:a6:4d:19:84:21:
         25:d8:52:21:9e:c0:7e:b0:3f:5a:e6:9d:d9:5d:d9:bf:af:fb:
         e4:1f:5b:d7:3c:a1:f4:be:18:c2:e6:9a:6a:ac:60:69:8d:a4:
         19:67:3b:f9:29:0a:10:b4:8d:a2:3f:e4:06:b1:1e:83:a4:c8:
         e4:a6:5a:b8:78:ec:52:3a:cd:58:1e:71:82:11:a4:dd:18:0e:
         fe:d6:07:f9:17:c8:5f:d9:4f:16:f4:56:23:9c:db:00:ca:28:
         c3:0a:44:cd:9a:b7:a8:fd:f9:1b:8f:0d:69:82:2f:2c:0e:b4:
         1d:b3:28:b3:ca:2a:22:2b:62:e3:99:75:86:91:09:4c:52:77:
         5b:68:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:03 2026 by rpki-client