Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File:                     0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier:          ulR73BH9PR3+T8wKSJ4MXzvmJzSsoLI+j+vfuCDqQ8Q=
Subject key identifier:   A3:26:DB:96:E0:1C:CA:E8:FB:3D:7A:0C:A8:92:22:21:9D:06:24:84
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer:       /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial:       01A0CEFF16832D7121E644192E942C94B689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number:          10E6
Signing time:             Wed 23 Sep 2026 16:00:18 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:18 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:18 +0000
Files and hashes:         1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: MPuitvZ+f/27lW8xVohVzyYUuBlrY9BuBWYFi3TLF14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:16:83:2d:71:21:e6:44:19:2e:94:2c:94:b6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
        Validity
            Not Before: Sep 23 16:00:18 2026 GMT
            Not After : Sep 24 16:00:18 2026 GMT
        Subject: CN=a326db96e01ccae8fb3d7a0ca89222219d062484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:47:90:33:9c:4e:a0:f3:55:d6:ef:96:8c:
                    70:21:35:df:47:bd:76:8c:2a:9c:12:9c:76:94:17:
                    8c:d4:54:c6:54:97:1b:c0:9a:22:59:7e:13:89:ca:
                    c4:e6:b4:8d:63:39:15:45:48:f1:7b:64:2f:c2:f1:
                    f4:01:8b:31:f1:36:66:be:28:2f:75:c6:da:d4:be:
                    6a:1f:d8:a0:16:20:10:eb:dd:dc:32:0e:83:5f:23:
                    0e:74:dd:4f:75:56:01:a5:34:d6:b1:b6:10:78:89:
                    a0:db:03:b8:96:c9:f8:d3:2b:4c:65:cd:63:18:55:
                    23:08:dc:7f:65:21:88:77:cd:eb:07:7c:ef:4c:1c:
                    b4:84:96:31:7b:d1:4e:9a:60:8c:28:c4:05:01:59:
                    f4:77:74:80:b2:5b:10:74:4f:a5:ff:45:a0:a6:92:
                    a7:6b:53:92:67:a9:b2:4e:4a:f4:63:fd:25:e7:86:
                    dd:bb:06:7e:3b:14:d2:17:26:3c:6f:7c:96:37:a8:
                    3f:29:d3:f2:0d:76:ad:58:f3:55:6f:83:09:fb:0c:
                    66:3b:ae:1a:2b:b7:a1:2f:9b:c1:10:e0:b7:ac:0c:
                    46:17:df:de:40:31:84:82:18:ff:93:05:65:8a:2c:
                    00:c6:c0:dc:78:18:90:e6:22:c0:28:d8:8e:d3:16:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:26:DB:96:E0:1C:CA:E8:FB:3D:7A:0C:A8:92:22:21:9D:06:24:84
            X509v3 Authority Key Identifier:
                keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a8:c7:66:8d:ad:e9:f3:36:87:8e:50:ea:c8:51:f3:d6:69:
         cd:ec:d8:31:c8:e1:95:7e:c5:60:39:dd:af:c7:cf:ec:ba:fa:
         44:be:87:3b:52:2b:44:bd:52:ae:6d:70:8f:1d:3a:8e:a2:0d:
         13:a3:f2:1c:e0:04:0c:e3:e6:d6:66:06:19:b8:9b:6a:ab:10:
         b9:ef:0a:89:e0:47:ec:ac:51:c5:d4:8c:12:fc:3d:b7:53:b3:
         68:36:a8:39:b8:dd:f8:ac:1e:d7:26:79:ca:4d:06:fc:ce:e5:
         bf:93:d3:2f:d3:45:e6:b2:0a:5c:f4:9f:84:79:48:c3:4c:ac:
         98:9d:64:6d:b0:aa:b5:ab:61:7d:2d:e5:35:37:80:b8:bf:5a:
         72:d1:e4:dc:36:bb:65:ef:cf:4c:e7:59:2c:e8:a1:f5:0c:bc:
         df:d9:1e:a6:69:c3:bd:a9:bf:d2:4c:aa:b9:8b:de:f8:bb:46:
         f7:33:67:7f:5c:20:a8:0e:74:13:1c:59:71:04:fe:ac:6a:86:
         ee:55:b4:2d:ab:48:63:04:a2:63:44:7f:11:06:6c:da:27:cb:
         fb:25:81:06:f2:ad:6a:9f:b7:1a:ec:25:31:cd:fb:a0:53:6d:
         15:f3:c6:60:86:57:26:d0:a4:37:80:5b:b1:34:b7:c8:5a:9c:
         50:3f:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:11:16 2026 by rpki-client