Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
File:                     utha9jTxotgFi6n0KI_x63qohvk.mft (raw, json)
Hash identifier:          DsVi8InpwvuwjWbvxwKeShWYUBl1BCar9ZM80nNC1wM=
Subject key identifier:   2A:D9:58:6F:8D:F3:7C:42:76:BF:86:E3:BF:A1:CE:4D:68:47:DE:51
Authority key identifier: BA:D8:5A:F6:34:F1:A2:D8:05:8B:A9:F4:28:8F:F1:EB:7A:A8:86:F9
Certificate issuer:       /CN=bad85af634f1a2d8058ba9f4288ff1eb7aa886f9
Certificate serial:       019EBD350FCF22F1115C6A8C8EBA9C238CA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/utha9jTxotgFi6n0KI_x63qohvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
Manifest number:          20
Signing time:             Fri 12 Jun 2026 19:00:31 +0000
Manifest this update:     Fri 12 Jun 2026 19:00:31 +0000
Manifest next update:     Sat 13 Jun 2026 19:00:31 +0000
Files and hashes:         1: mUjvxQF4D9iByPLao2Cch7hwisM.asa (hash: Fwvk3zR66bVLMkVbCakmon+2gjR/l20uGEuAVJUp2/A=)
                          2: utha9jTxotgFi6n0KI_x63qohvk.crl (hash: J/WpeoODJYP6F42pLXcanliKn1mPAWC3slkzf/sOX1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/utha9jTxotgFi6n0KI_x63qohvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:35:0f:cf:22:f1:11:5c:6a:8c:8e:ba:9c:23:8c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bad85af634f1a2d8058ba9f4288ff1eb7aa886f9
        Validity
            Not Before: Jun 12 19:00:31 2026 GMT
            Not After : Jun 13 19:00:31 2026 GMT
        Subject: CN=2ad9586f8df37c4276bf86e3bfa1ce4d6847de51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:58:f3:ce:a7:4a:13:07:9e:7e:8e:e4:82:
                    1c:a5:82:a0:c4:f2:2a:91:b8:cd:6e:f8:6e:83:e7:
                    a1:ca:d6:83:b7:b7:68:72:d6:fb:8d:b1:58:6e:d7:
                    7e:24:62:03:d3:9e:da:91:ff:a6:d5:03:e7:5d:f6:
                    c9:29:ab:f0:a7:fd:12:f6:53:f4:2e:30:37:11:ab:
                    a5:7a:14:70:4a:9a:b2:39:29:cb:85:03:54:09:f4:
                    b8:bf:69:05:27:f4:43:96:2c:62:ea:04:7f:b5:f9:
                    b3:a2:76:b9:de:80:15:2e:f1:f9:bd:be:19:21:2c:
                    c6:c1:ba:15:57:64:b0:a3:9c:6c:1d:dd:69:1e:de:
                    3c:c1:5a:bf:cf:d0:11:e5:30:10:ff:38:22:a1:ae:
                    00:2a:ca:03:38:e3:03:00:ef:df:ac:9f:e6:bb:4f:
                    d8:09:06:57:ca:89:87:1d:31:01:00:7a:d9:8b:a8:
                    d3:7e:18:51:05:72:ec:35:bd:95:0c:3f:11:db:b1:
                    24:1f:0f:0b:a5:4a:4c:01:3d:9d:6a:e3:87:d7:58:
                    da:35:25:2a:0b:d4:df:18:65:fa:fe:1e:a1:bf:eb:
                    e6:57:e6:af:f5:24:df:3c:ab:c1:b7:51:f3:ad:95:
                    46:06:fa:64:6c:f1:54:2d:e7:b7:6f:e1:77:0d:95:
                    29:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D9:58:6F:8D:F3:7C:42:76:BF:86:E3:BF:A1:CE:4D:68:47:DE:51
            X509v3 Authority Key Identifier:
                keyid:BA:D8:5A:F6:34:F1:A2:D8:05:8B:A9:F4:28:8F:F1:EB:7A:A8:86:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utha9jTxotgFi6n0KI_x63qohvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:cc:9c:83:28:5f:92:78:cb:65:2a:ce:10:1e:61:6c:c5:5e:
         cb:d8:7b:14:42:c0:ec:26:22:4a:8d:49:0a:02:75:d9:5b:51:
         d8:f2:74:af:1a:bc:dc:c7:97:df:e5:b0:15:01:c2:32:08:6e:
         42:89:7c:1f:68:4f:aa:d0:e8:ef:79:65:98:76:3b:1f:bb:cb:
         54:ad:e1:43:4f:13:14:ff:6e:01:0c:e2:0b:3c:17:17:7a:3c:
         6d:3d:82:19:62:32:97:ce:55:0b:ec:c1:83:5d:9c:77:b2:c2:
         68:32:7d:ef:5d:5d:0f:f3:4f:86:cc:2e:5b:70:f2:77:b8:d3:
         de:cf:cc:65:f1:38:d2:71:61:b4:eb:67:bc:3a:5d:4a:5f:92:
         5f:2e:a1:99:80:9c:d0:86:b3:8d:f1:ba:9f:58:78:bb:0b:80:
         84:37:50:38:c4:fe:1f:42:76:c1:70:83:1f:bc:ae:c0:89:92:
         48:9f:ce:cc:56:a8:52:b9:a8:2a:4c:2c:a6:f6:e8:13:b9:8c:
         5e:e5:f7:8f:1b:51:89:6e:d5:90:58:ff:a6:e0:50:9e:80:62:
         53:52:e1:da:1d:a2:a1:60:92:92:a1:2d:db:1c:a6:d8:d5:b1:
         c2:0c:53:b7:fa:4f:ac:5b:ca:f3:a7:b6:30:a4:fd:74:3c:fa:
         56:25:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:22 2026 by rpki-client