Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
File:                     UTBvX0bb20E2BCor440F0iKnx2E.mft (raw, json)
Hash identifier:          zOR48xAIBGeObmW3DghwZ5I3dWjulhfbrDWZbxevD7w=
Subject key identifier:   6E:3F:42:6F:32:56:FA:E6:14:8F:89:45:EE:69:C8:02:DF:B4:1A:53
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Certificate issuer:       /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial:       019F8F7EF3565CC048005F9B411122FE7C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
Manifest number:          0354
Signing time:             Thu 23 Jul 2026 15:01:29 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:29 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:29 +0000
Files and hashes:         1: 33HrBlMZ5V38xoLyShooiO_rkkA.asa (hash: zLUs1i5RXgmW6h4adP/bthMoH9+3lkA98Ie/udyMks4=)
                          2: RXH1E0juuTjk09gdd34VSaLqezE.roa (hash: DZRkuPFfVpgIXoaL3urk2cfBtZs5W6fdoPmvj+H+iwE=)
                          3: UTBvX0bb20E2BCor440F0iKnx2E.crl (hash: HG9GmGE4EBqCZj8+YOTAxgtlmzN4VL5DxL2IxSNaZ1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:f3:56:5c:c0:48:00:5f:9b:41:11:22:fe:7c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
        Validity
            Not Before: Jul 23 15:01:29 2026 GMT
            Not After : Jul 24 15:01:29 2026 GMT
        Subject: CN=6e3f426f3256fae6148f8945ee69c802dfb41a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:9b:a7:c2:fa:71:d8:ca:34:f6:57:46:e5:
                    0b:c4:da:94:e6:d7:29:f1:63:62:e2:b9:a7:35:a1:
                    33:15:6e:6b:ac:9c:b1:92:8b:52:98:31:bd:7d:b2:
                    43:d2:ad:e5:95:73:fe:e2:9e:05:a0:cc:6f:10:e4:
                    c3:63:5b:f8:cf:d6:e5:3f:89:bd:05:3e:93:af:92:
                    86:92:39:8d:b1:d5:4e:bf:20:df:b4:90:d4:23:ec:
                    7a:f8:53:19:ac:b4:d8:21:37:b2:9c:d2:fd:48:a7:
                    be:2f:54:4c:da:21:d0:fd:d9:7e:2c:46:40:a0:be:
                    57:6c:a5:61:a5:ca:4e:e7:0a:a5:65:cf:12:f6:f1:
                    fa:1b:88:5a:6b:b6:d6:f0:5f:40:b2:4f:23:4a:14:
                    97:c7:59:35:91:61:8a:a6:28:61:4e:84:fa:e1:40:
                    1e:64:08:3d:df:ab:c5:30:d0:4b:de:a0:bc:0c:a8:
                    e1:d8:e4:f6:b1:8a:db:f0:b1:e8:54:7c:ad:6f:6b:
                    54:e2:a9:54:30:25:b8:f9:cc:cf:01:5e:f2:2e:4e:
                    a1:61:bb:e1:9a:92:21:d6:bf:86:d8:fc:80:ff:b7:
                    0b:2a:78:66:7b:c7:35:e3:7c:18:0b:e1:36:78:56:
                    5c:0f:4a:36:01:a0:b3:70:93:ae:ee:0f:6f:dd:36:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3F:42:6F:32:56:FA:E6:14:8F:89:45:EE:69:C8:02:DF:B4:1A:53
            X509v3 Authority Key Identifier:
                keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:17:81:0c:40:09:8b:54:a8:90:3d:1c:c5:92:48:eb:f7:1f:
         c2:c2:4d:c0:58:94:c6:3f:b5:b6:0b:17:37:cf:b9:3c:1a:fc:
         28:df:8b:fe:8b:b7:ec:96:12:55:b7:09:06:23:bf:b1:e1:20:
         1d:84:8e:a9:ea:9f:a0:15:8e:6c:ee:db:0b:29:16:f3:59:d0:
         27:cb:88:c9:cb:f9:0d:ea:cb:23:67:dc:e9:d2:42:78:a9:d3:
         98:db:79:a3:9e:2b:28:b5:34:81:1b:37:06:bb:c0:df:fa:8f:
         71:88:9f:16:24:4d:e5:07:82:3d:6f:c4:e2:20:e3:6b:72:4c:
         10:0b:bd:64:8d:f3:8e:90:df:e8:6c:58:a9:ed:65:f1:a6:68:
         20:1e:76:9b:52:d2:fd:4c:56:64:81:3f:70:01:f9:47:04:b7:
         02:22:b8:ca:ff:3f:21:8d:a5:d0:43:d5:a5:1e:be:69:79:39:
         42:9f:42:d5:80:f2:b3:d4:b2:62:a6:e2:d0:d6:e1:35:bf:b8:
         2b:9f:21:85:bf:f6:b6:3e:35:2c:e6:98:11:15:3a:c1:13:c2:
         d6:81:c6:2e:34:e6:79:1d:2c:19:66:c5:38:04:ec:6e:da:dd:
         ec:52:b4:ce:9d:be:26:b5:1a:86:e3:70:19:30:89:5f:5b:bc:
         eb:26:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:43 2026 by rpki-client