Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File:                     UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier:          RX74BmYU1G42aUGF9qjqXwAZXfmZMFFMSztGQ1XAeEs=
Subject key identifier:   B0:F3:9F:E5:03:B9:2C:C5:39:5A:1A:D9:2E:4E:B1:E2:BD:7A:85:2C
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer:       /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial:       019EBFC81EAA4A1025C752C2205B3A0A2899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number:          10C0
Signing time:             Sat 13 Jun 2026 07:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:23 +0000
Files and hashes:         1: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: 7nGimIkOnIWd38QUFwSPsyTYsUgIlxFYhYOhHpu2clw=)
                          2: idlOCTZeLer70Tvy8HG_eFHIj_A.roa (hash: OxjINEWNa+j5OovsQN+Iq8z65GnsnPtmn9axTiZoZlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:1e:aa:4a:10:25:c7:52:c2:20:5b:3a:0a:28:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
        Validity
            Not Before: Jun 13 07:00:23 2026 GMT
            Not After : Jun 14 07:00:23 2026 GMT
        Subject: CN=b0f39fe503b92cc5395a1ad92e4eb1e2bd7a852c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d0:3d:ea:2a:28:48:5d:27:7a:74:4e:31:ea:
                    1d:7e:d8:cd:90:3e:6b:49:e7:da:9f:fe:15:8e:68:
                    93:bb:b0:ee:20:68:51:7b:cc:3f:5d:95:12:1e:23:
                    7f:7a:d5:db:6e:4f:4e:23:26:44:1b:a5:8f:ae:c4:
                    3e:1e:42:90:55:23:6c:17:89:e2:79:93:28:7e:87:
                    00:ff:93:ff:e0:92:e1:6c:00:13:ad:b3:11:be:8f:
                    93:17:de:d6:e9:71:31:0c:c0:04:4e:2e:de:b0:54:
                    e7:1d:e8:33:88:87:24:31:5a:56:dd:9d:fd:63:f0:
                    a6:fc:1a:9c:40:1e:1a:02:38:37:66:f1:0a:21:65:
                    f5:01:bf:73:d8:6d:fa:08:9d:20:42:75:c8:07:fb:
                    f5:c7:83:91:d5:ed:3d:2e:1b:88:dd:ea:04:9b:59:
                    e6:27:dc:00:8c:fc:6a:6f:9b:03:c9:31:5f:b1:1c:
                    9e:39:9f:53:ca:21:23:cc:28:79:c3:c8:33:90:9a:
                    d8:f1:bd:7a:43:c5:b6:44:cd:e5:6c:7f:bb:4d:5f:
                    91:e2:24:4a:a1:cd:60:24:8b:fd:f2:91:0f:f9:9a:
                    a8:3f:41:f8:05:a0:9b:27:60:b3:d8:a6:d0:50:15:
                    c7:b3:71:92:c3:56:33:bc:db:34:44:64:6a:bc:4a:
                    d4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F3:9F:E5:03:B9:2C:C5:39:5A:1A:D9:2E:4E:B1:E2:BD:7A:85:2C
            X509v3 Authority Key Identifier:
                keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:99:b1:ae:68:04:ea:30:e6:77:7e:54:38:1a:7c:f4:3d:9f:
         8b:50:d3:24:6a:19:18:b5:f7:51:b2:5f:b0:ac:36:24:31:42:
         0b:e0:c8:8f:fe:43:df:42:0a:83:94:24:55:8c:92:8c:a9:3f:
         5e:50:e3:1b:ab:0b:a7:c6:14:9c:14:bd:fc:4f:e7:2b:5a:6a:
         1b:16:f9:99:4c:cc:a4:ac:3c:05:fb:0d:10:d1:71:1e:4d:d7:
         b7:9a:5b:8f:ad:9f:ef:54:0e:2c:ec:ab:8e:ed:33:0e:d3:12:
         b7:f7:64:a2:ee:2c:f3:bb:2f:3c:35:ae:b3:d1:65:47:e7:ba:
         d2:e0:63:39:2b:62:71:f9:c0:55:ca:42:56:b5:32:cf:aa:8a:
         7d:dc:c1:8d:5e:b1:24:21:1a:6f:19:f6:77:09:23:e5:17:30:
         10:e9:84:f5:7d:41:af:7f:76:3a:01:fd:87:12:25:25:91:22:
         7d:76:e2:03:7a:47:ea:dc:25:ba:71:2f:ec:64:09:c1:20:b6:
         27:2d:88:ce:b8:46:d3:c8:70:bd:97:19:e5:f0:f2:4e:60:fe:
         d0:56:07:17:bb:ae:82:f9:3b:e4:17:1e:8b:a4:3a:f4:02:7a:
         60:6d:40:e5:8e:53:0b:90:f7:d6:42:15:5d:f2:1d:6a:9a:97:
         6d:c9:d9:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yB6qShAlx1LCIFs6CiiZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMzI2ZmFiYjEyNTZmYTAyMjc3ZTVlZTAzNGI3OTkxZmYz
MTg1YTUwHhcNMjYwNjEzMDcwMDIzWhcNMjYwNjE0MDcwMDIzWjAzMTEwLwYDVQQD
EyhiMGYzOWZlNTAzYjkyY2M1Mzk1YTFhZDkyZTRlYjFlMmJkN2E4NTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49A96iooSF0nenROMeodftjNkD5r
Sefan/4VjmiTu7DuIGhRe8w/XZUSHiN/etXbbk9OIyZEG6WPrsQ+HkKQVSNsF4ni
eZMofocA/5P/4JLhbAATrbMRvo+TF97W6XExDMAETi7esFTnHegziIckMVpW3Z39
Y/Cm/BqcQB4aAjg3ZvEKIWX1Ab9z2G36CJ0gQnXIB/v1x4OR1e09LhuI3eoEm1nm
J9wAjPxqb5sDyTFfsRyeOZ9TyiEjzCh5w8gzkJrY8b16Q8W2RM3lbH+7TV+R4iRK
oc1gJIv98pEP+ZqoP0H4BaCbJ2Cz2KbQUBXHs3GSw1YzvNs0RGRqvErUuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDzn+UDuSzFOVoa2S5OseK9eoUsMB8GA1UdIwQY
MBaAFFEyb6uxJW+gInfl7gNLeZH/MYWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iZDZmMTgtZWE3ZC00M2M0LTljODUt
ODdhM2YzYjMxMTUwLzEvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iZDZmMTgtZWE3ZC00M2M0LTljODUtODdhM2YzYjMxMTUw
LzEvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpmxrmgE
6jDmd35UOBp89D2fi1DTJGoZGLX3UbJfsKw2JDFCC+DIj/5D30IKg5QkVYySjKk/
XlDjG6sLp8YUnBS9/E/nK1pqGxb5mUzMpKw8BfsNENFxHk3Xt5pbj62f71QOLOyr
ju0zDtMSt/dkou4s87svPDWus9FlR+e60uBjOSticfnAVcpCVrUyz6qKfdzBjV6x
JCEabxn2dwkj5RcwEOmE9X1Br392OgH9hxIlJZEifXbiA3pH6twlunEv7GQJwSC2
Jy2IzrhG08hwvZcZ5fDyTmD+0FYHF7uugvk75Bcei6Q69AJ6YG1A5Y5TC5D31kIV
XfIdapqXbcnZpQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:51 2026 by rpki-client