Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File:                     0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier:          qC7lNqk07x6q5alRCTMsP1kF9Pfue09J26fpx6rIcWw=
Subject key identifier:   B8:22:49:9B:4C:52:FC:5D:37:0C:5D:35:CD:69:D7:82:CE:1A:44:FF
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer:       /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial:       01A0E62CD16C60CD7CC2D79305F0ADA80B50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number:          10F2
Signing time:             Mon 28 Sep 2026 04:01:31 +0000
Manifest this update:     Mon 28 Sep 2026 04:01:31 +0000
Manifest next update:     Tue 29 Sep 2026 04:01:31 +0000
Files and hashes:         1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: 794vo05p+FMt1Ek9SeEidvZ3k5O2rSizNh6/PSAnOCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:2c:d1:6c:60:cd:7c:c2:d7:93:05:f0:ad:a8:0b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
        Validity
            Not Before: Sep 28 04:01:31 2026 GMT
            Not After : Sep 29 04:01:31 2026 GMT
        Subject: CN=b822499b4c52fc5d370c5d35cd69d782ce1a44ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b3:87:fd:77:fc:a4:e2:05:48:77:a4:4e:c4:
                    b7:26:38:fb:25:4c:ed:01:b5:a3:0e:dd:f6:48:a8:
                    25:dc:da:1b:cd:a3:ed:8d:00:31:d0:ad:bd:70:86:
                    fc:d0:f7:29:05:a3:b9:cd:05:21:78:91:7d:12:ea:
                    fb:67:af:44:85:da:9e:d8:23:1a:e1:96:76:82:f4:
                    a6:a4:8c:87:f3:d9:11:5f:53:57:da:0d:d6:5a:79:
                    20:5c:04:e7:36:10:35:76:e4:f4:ce:b2:2b:2c:84:
                    ac:73:24:80:82:69:6e:af:35:3f:b8:9f:49:b8:e3:
                    92:48:68:84:36:a4:cb:72:2a:0c:db:ac:f2:cd:84:
                    2f:b1:51:44:e4:46:33:9b:8e:9a:44:ac:25:22:ac:
                    74:4b:20:36:1d:d9:2e:d2:91:81:26:24:37:ec:a6:
                    1d:a1:0d:10:4d:02:cc:3d:c1:b7:d4:d6:9d:8b:fd:
                    f6:6a:82:d6:ea:41:35:bc:99:31:79:19:ed:d9:dc:
                    45:55:66:97:1b:90:31:82:2b:97:98:ce:82:b5:83:
                    01:bf:3f:c9:b6:aa:a5:53:76:c5:58:42:f5:be:b1:
                    30:02:7f:11:b9:08:99:cb:b7:6d:93:da:69:77:d0:
                    4c:16:42:e7:fe:1f:29:1f:52:f0:ce:bd:45:07:65:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:22:49:9B:4C:52:FC:5D:37:0C:5D:35:CD:69:D7:82:CE:1A:44:FF
            X509v3 Authority Key Identifier:
                keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:36:2b:8a:f2:4c:e5:73:07:2c:5b:61:8f:3b:11:c2:06:4f:
         65:db:29:c2:5d:89:87:a8:08:77:37:b5:e7:80:90:27:8a:8f:
         9a:40:87:52:0b:fb:63:fd:6b:aa:91:7a:5a:89:27:a8:fd:c4:
         d3:86:69:68:5b:f1:bb:43:d6:ce:d8:9d:aa:16:4e:fd:bf:cd:
         5c:bd:18:90:2c:31:55:7a:47:be:ab:77:18:55:63:05:53:65:
         16:a7:50:b1:d8:21:47:48:57:99:3c:0f:cd:83:65:0f:22:ca:
         a4:c5:56:ab:b0:0e:e3:91:f3:b7:3b:d2:cf:68:39:b6:74:98:
         8e:5e:dc:27:4e:1e:41:b1:42:14:82:c9:63:cf:94:03:8f:4b:
         c4:09:54:4a:57:51:1f:fe:b8:49:93:5a:df:72:3a:5a:db:02:
         37:2f:67:5d:e3:87:7d:33:0b:fe:f7:91:08:53:2a:01:1d:9d:
         22:81:58:4d:ed:7c:a4:8e:aa:14:ee:61:0c:46:e7:55:73:de:
         c2:ff:42:73:f6:4a:d2:11:b2:4d:a9:46:51:f5:49:93:84:ab:
         f2:2e:29:09:05:6f:8f:51:ae:6e:0b:6e:d2:89:80:3c:81:c0:
         10:dc:3f:40:68:c8:4f:13:8a:cc:32:5b:dc:01:77:09:28:c2:
         3d:00:26:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:37:13 2026 by rpki-client