Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
File:                     do_utqkKhqzxGHHk5Xii6n7Cgdk.mft (raw, json)
Hash identifier:          5EIBOhmAJFzcrUWN7Mz2RxC8BJFT668encO4d8upce8=
Subject key identifier:   F9:AE:5B:D1:8B:18:41:E0:BE:EC:F4:2A:94:38:50:F8:6C:03:FC:53
Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
Certificate issuer:       /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Certificate serial:       019FAD1AF9AB3865E54C5C0B0650F2631732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
Manifest number:          04E0
Signing time:             Wed 29 Jul 2026 09:00:53 +0000
Manifest this update:     Wed 29 Jul 2026 09:00:53 +0000
Manifest next update:     Thu 30 Jul 2026 09:00:53 +0000
Files and hashes:         1: W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa (hash: H+ygr+3swIT2aBvGxAFeyCAkH1uxCN9KnvrpdAVtIB8=)
                          2: do_utqkKhqzxGHHk5Xii6n7Cgdk.crl (hash: 8n8Qy6KGzp2lECEtb1PV6oWJKP5Z4KBBY9xCDgj5Kw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:1a:f9:ab:38:65:e5:4c:5c:0b:06:50:f2:63:17:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
        Validity
            Not Before: Jul 29 09:00:53 2026 GMT
            Not After : Jul 30 09:00:53 2026 GMT
        Subject: CN=f9ae5bd18b1841e0beecf42a943850f86c03fc53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:73:36:b2:2f:bd:a7:38:35:09:73:90:78:
                    3d:36:4d:bc:01:61:49:25:54:46:35:1e:d4:05:31:
                    d4:63:af:d2:31:3b:e4:17:3b:77:4b:98:71:ce:d5:
                    62:e9:4b:97:73:89:6c:82:14:80:3d:8a:8f:13:70:
                    ad:22:d6:e3:0e:e9:32:26:41:9b:4e:5b:f7:db:cb:
                    05:af:8e:03:39:f2:de:b8:c1:11:d1:36:04:95:7c:
                    eb:ae:a9:e8:66:3e:12:15:65:01:22:18:82:b5:a0:
                    b3:e5:e9:0e:7c:cc:a4:79:06:3a:1b:d1:62:dd:58:
                    a9:81:35:84:30:23:fb:db:9e:3f:fa:2b:02:2a:6b:
                    e1:f5:89:f0:a2:75:f0:d5:80:b4:15:fc:1f:0c:f9:
                    3b:6b:75:f8:ee:34:26:94:94:8c:b6:8e:2a:6d:92:
                    ac:3c:9d:06:b8:ea:7d:70:73:24:f1:39:35:4f:d9:
                    14:7a:0e:a6:cf:3d:f6:0e:7b:5e:67:35:b6:cb:63:
                    74:6d:b4:20:cb:f7:ec:83:38:a0:bb:30:e0:ca:b0:
                    b4:d4:67:3e:75:5a:d7:56:f8:97:2b:39:95:23:31:
                    70:c8:e6:15:c7:ad:27:63:cc:a3:78:28:82:81:8f:
                    45:fb:da:4a:57:dd:bb:30:b0:63:53:7f:be:3d:e7:
                    89:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AE:5B:D1:8B:18:41:E0:BE:EC:F4:2A:94:38:50:F8:6C:03:FC:53
            X509v3 Authority Key Identifier:
                keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:81:d1:60:6b:a6:bc:d1:48:13:eb:99:9c:c2:3c:0c:51:b5:
         bc:40:ca:02:bb:64:3c:95:24:06:d5:0c:2b:0d:a8:91:df:13:
         c7:89:85:8a:07:57:c7:9f:1f:02:02:f0:94:e1:10:30:64:23:
         56:1c:4f:ea:26:23:41:cd:7b:67:6d:b8:18:06:dc:36:43:e7:
         e2:1a:16:94:9c:05:a9:69:70:5a:1c:42:ff:61:81:8d:43:57:
         79:83:39:1a:6e:39:63:01:e3:ef:ef:a5:ff:7f:57:c4:24:54:
         10:f7:88:5d:30:d4:a4:5c:c3:8e:92:4e:6b:75:cd:78:09:ae:
         1c:17:e1:64:7d:59:61:14:50:e5:db:6f:18:d0:b6:4c:18:52:
         6b:15:17:e9:5b:e1:d8:29:50:c2:72:b2:1a:2b:a8:c4:dc:ed:
         b7:0c:92:60:83:2c:eb:cf:b3:88:52:4a:7e:ef:30:81:ec:a2:
         0a:86:0b:83:67:77:91:e6:51:d0:e4:02:cb:c2:13:f0:9d:e8:
         c1:ad:ea:2f:d7:ff:0e:90:54:df:82:c3:88:e6:7e:11:1c:15:
         7a:05:cd:81:66:5f:f4:9f:fa:35:2a:8a:c0:6c:83:0a:84:75:
         90:e4:8d:a7:57:93:61:cc:41:24:19:36:e2:03:1e:73:a5:31:
         e3:fb:4c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:00:40 2026 by rpki-client