Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File:                     UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier:          PkQLbQ+CnfPaHsatplhx3pAJwwVXyq5V/NtW9SDe+wg=
Subject key identifier:   E6:22:FF:C7:A5:7F:C2:CD:58:CB:4D:97:C0:28:6D:0B:8F:64:3C:42
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer:       /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial:       01A0DFBC94C15FF9D9E6B75335C20C4B185B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number:          1850
Signing time:             Sat 26 Sep 2026 22:01:12 +0000
Manifest this update:     Sat 26 Sep 2026 22:01:12 +0000
Manifest next update:     Sun 27 Sep 2026 22:01:12 +0000
Files and hashes:         1: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: yKxO90WH1PKZo0XPViO1VyqTFqFrngCDV/qw7z7Iuew=)
                          2: eFoLkSuYHSfJyZWDzIUZu8IRO1o.roa (hash: dD85celI+xdv/VzLzNSyQVejNzZ7b5z/nWIX6tyr6xc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bc:94:c1:5f:f9:d9:e6:b7:53:35:c2:0c:4b:18:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
        Validity
            Not Before: Sep 26 22:01:12 2026 GMT
            Not After : Sep 27 22:01:12 2026 GMT
        Subject: CN=e622ffc7a57fc2cd58cb4d97c0286d0b8f643c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b2:d8:1f:21:e7:01:c1:7c:6c:de:d2:18:03:
                    e6:c3:13:88:d8:83:78:05:4c:9f:06:8a:57:1a:e1:
                    82:c8:ec:f8:cb:6e:e2:90:58:99:18:95:8d:0b:d8:
                    11:fe:18:43:52:b6:bd:c6:71:47:05:11:dd:b1:0b:
                    bb:c6:6e:cb:99:78:34:f2:84:56:66:23:8d:1a:47:
                    d9:74:ff:11:29:b0:88:f2:0b:1a:eb:23:1c:1c:7c:
                    e6:e7:1b:22:9d:0e:5e:15:19:a2:b6:ba:da:d0:be:
                    bb:ba:a3:e9:2a:08:d6:9a:c6:1b:a0:87:34:ef:1e:
                    6f:17:da:7a:64:15:d5:3c:3d:7d:c6:75:d9:34:51:
                    cf:91:79:4f:c4:ff:46:cc:90:d2:58:16:e1:a2:d8:
                    a2:bb:c2:0f:fe:51:f5:b7:ec:57:97:fb:f0:b7:91:
                    48:d0:ed:c8:04:84:86:85:07:40:1d:53:66:ce:98:
                    68:69:1e:f3:a4:38:35:70:ed:69:d7:a3:44:04:33:
                    e0:9f:3f:8f:09:03:c1:8c:82:54:ec:14:65:a4:be:
                    bd:21:72:07:33:d2:44:f4:fe:c2:2c:43:1b:ba:51:
                    3d:64:82:87:97:a3:66:3e:62:0e:3c:dc:b7:18:3e:
                    8e:70:63:8a:c4:7f:4c:58:dd:08:99:be:fc:7a:a4:
                    88:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:22:FF:C7:A5:7F:C2:CD:58:CB:4D:97:C0:28:6D:0B:8F:64:3C:42
            X509v3 Authority Key Identifier:
                keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4e:b5:61:35:2c:66:5a:3e:82:6d:15:a7:0b:10:a9:5c:a5:
         50:11:95:fe:43:df:0a:8d:43:0f:91:59:33:1a:37:19:32:f1:
         1b:07:a3:57:f2:0b:77:57:a5:d2:79:22:c9:84:01:43:ca:cc:
         66:76:d7:fc:54:c9:df:26:6e:bc:34:6c:be:8a:52:6c:82:11:
         4f:a0:b7:cb:7b:e1:f1:c5:79:c6:90:89:05:b5:ad:75:f1:a7:
         69:ee:4a:76:c2:ba:11:37:2b:ba:e6:20:c3:68:19:59:09:5e:
         a2:c1:92:13:2a:3f:5d:49:3e:87:ea:69:44:9e:c8:12:39:87:
         03:ab:2c:a3:4f:56:7c:83:f3:ec:fd:10:52:b4:47:a6:e9:2b:
         d3:6e:f4:b2:d3:be:e2:20:cd:81:e7:ba:9d:eb:10:42:27:9e:
         0f:9b:2f:0c:35:b3:4e:f6:cd:f2:e6:a6:f1:48:45:17:e5:56:
         df:4d:14:c7:a5:de:f5:c4:24:c4:1e:05:2d:65:65:f0:03:17:
         56:ff:ad:08:54:6c:50:c6:8f:54:4f:71:23:41:ec:81:9f:39:
         bf:d5:03:c6:ba:1b:3f:d4:19:27:be:6d:26:6b:60:9a:10:8d:
         8c:30:08:b9:47:ef:91:d5:ce:32:90:74:24:1d:8e:63:e1:ef:
         98:48:ab:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvJTBX/nZ5rdTNcIMSxhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZDY2MWE5NDhmMmJmMzQ5MGU4OWQ4MjUyZjJjY2M4NzQ3
Y2U1YzcwHhcNMjYwOTI2MjIwMTEyWhcNMjYwOTI3MjIwMTEyWjAzMTEwLwYDVQQD
EyhlNjIyZmZjN2E1N2ZjMmNkNThjYjRkOTdjMDI4NmQwYjhmNjQzYzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLLYHyHnAcF8bN7SGAPmwxOI2IN4
BUyfBopXGuGCyOz4y27ikFiZGJWNC9gR/hhDUra9xnFHBRHdsQu7xm7LmXg08oRW
ZiONGkfZdP8RKbCI8gsa6yMcHHzm5xsinQ5eFRmitrra0L67uqPpKgjWmsYboIc0
7x5vF9p6ZBXVPD19xnXZNFHPkXlPxP9GzJDSWBbhotiiu8IP/lH1t+xXl/vwt5FI
0O3IBISGhQdAHVNmzphoaR7zpDg1cO1p16NEBDPgnz+PCQPBjIJU7BRlpL69IXIH
M9JE9P7CLEMbulE9ZIKHl6NmPmIOPNy3GD6OcGOKxH9MWN0Imb78eqSI1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYi/8elf8LNWMtNl8AobQuPZDxCMB8GA1UdIwQY
MBaAFFLWYalI8r80kOidglLyzMh0fOXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lMmEyYjItYWIzYy00YWZiLTg5ODct
ZGQ2M2YyMTVjNDM0LzEvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lMmEyYjItYWIzYy00YWZiLTg5ODctZGQ2M2YyMTVjNDM0
LzEvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlk61YTUs
Zlo+gm0VpwsQqVylUBGV/kPfCo1DD5FZMxo3GTLxGwejV/ILd1el0nkiyYQBQ8rM
ZnbX/FTJ3yZuvDRsvopSbIIRT6C3y3vh8cV5xpCJBbWtdfGnae5KdsK6ETcruuYg
w2gZWQleosGSEyo/XUk+h+ppRJ7IEjmHA6sso09WfIPz7P0QUrRHpukr0270stO+
4iDNgee6nesQQieeD5svDDWzTvbN8uam8UhFF+VW300Ux6Xe9cQkxB4FLWVl8AMX
Vv+tCFRsUMaPVE9xI0HsgZ85v9UDxrobP9QZJ75tJmtgmhCNjDAIuUfvkdXOMpB0
JB2OY+HvmEirXA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:14:27 2026 by rpki-client