Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File:                     0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier:          o8cQnETuXkmMyY+qAyuH1WxpHyFvZ5cYWAbVRAFnGAc=
Subject key identifier:   D1:07:80:A0:4B:FF:11:4A:A3:95:4E:B3:C7:64:14:4C:AE:E7:BD:B9
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer:       /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial:       019F905A55EBB96B237FA29D03A5B6929F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number:          1041
Signing time:             Thu 23 Jul 2026 19:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:06 +0000
Files and hashes:         1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: Vvg8JqFqACzPkmJPL3VJ1uPB4jZuebH35qoioAdY4Ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:55:eb:b9:6b:23:7f:a2:9d:03:a5:b6:92:9f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
        Validity
            Not Before: Jul 23 19:01:06 2026 GMT
            Not After : Jul 24 19:01:06 2026 GMT
        Subject: CN=d10780a04bff114aa3954eb3c764144caee7bdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:b5:e9:c3:48:55:6a:fd:23:20:45:8b:e9:
                    05:6a:7d:0b:da:ef:a9:ae:22:df:e0:f1:95:c2:af:
                    f1:67:1e:0e:4e:a9:5a:04:7b:92:df:e1:d1:d6:84:
                    28:2b:a0:b9:32:8c:db:01:d7:a6:72:b4:ac:9f:d5:
                    8f:86:3c:4d:3a:d4:b6:d2:e6:87:e4:79:9d:5d:27:
                    a4:d3:07:b6:ee:8e:42:d0:f6:23:2d:c8:e7:e5:98:
                    02:42:b5:07:54:26:da:20:63:63:5a:cb:04:8c:30:
                    d0:f2:c8:a5:53:94:16:d7:56:b8:44:25:9d:0e:66:
                    ce:8d:5f:95:ba:1e:a3:36:63:02:c4:1b:24:0c:20:
                    21:68:e4:ef:99:8a:33:12:9d:15:5b:5f:22:ab:d5:
                    21:4f:c5:1f:42:29:fa:ff:9d:58:e7:65:cf:65:52:
                    9b:57:41:02:31:2c:74:69:a0:6a:d5:94:6c:7f:6c:
                    d5:c8:bc:ae:58:17:77:25:fd:6d:36:af:44:1b:b4:
                    21:73:37:28:c6:a5:7b:2a:57:78:09:88:c0:8a:f5:
                    e3:7a:82:54:cd:e2:ae:27:e0:45:77:e6:5d:c4:3f:
                    8e:0b:50:fa:0f:b6:7f:1f:76:22:94:6f:49:09:18:
                    b9:07:6b:66:0f:82:08:06:f8:bd:74:30:06:0c:1b:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:07:80:A0:4B:FF:11:4A:A3:95:4E:B3:C7:64:14:4C:AE:E7:BD:B9
            X509v3 Authority Key Identifier:
                keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:d9:15:62:cd:f8:6f:02:63:01:f3:76:65:5f:c9:e0:69:
         d0:a3:1e:df:bc:57:2c:64:16:d6:bc:bb:c4:e2:58:4a:e2:de:
         50:4c:9d:78:dd:07:81:f7:eb:31:27:5c:7b:ae:75:f4:76:32:
         04:16:47:fa:8d:6f:74:43:54:4b:5c:c7:0e:0c:83:11:07:a3:
         12:fc:49:69:11:4c:ca:26:f1:e2:ee:93:cc:cb:1a:cc:ba:56:
         a7:b0:ac:78:9c:97:d9:aa:46:13:ad:94:09:e4:f8:e2:78:d0:
         a0:da:2c:73:76:71:75:72:46:89:cb:af:04:3c:8c:7d:ce:5e:
         6e:50:da:15:52:84:5b:40:ae:41:56:f3:ca:fc:b4:24:8c:02:
         0b:b8:32:d9:9e:9d:12:34:f8:aa:bc:1f:9c:2f:64:da:c1:4c:
         e4:b6:e1:1b:e1:52:ea:3c:a3:76:aa:2d:c0:d8:19:30:8f:04:
         12:ae:1b:0a:7f:27:0c:db:f5:34:a2:63:b4:bc:d7:9b:d2:11:
         d1:3f:17:7f:aa:cb:36:f3:fc:a9:ec:af:a3:87:74:b1:0c:76:
         32:57:1f:a1:7f:20:5f:28:5c:ca:56:a0:70:28:46:93:a6:67:
         8a:12:cf:1f:25:06:28:dd:89:9f:58:30:d9:9b:c3:68:e6:eb:
         e6:82:42:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWlXruWsjf6KdA6W2kp8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNDRjNDJlMWNhMzAzN2JiNmY1NDFmMWUxNDA0ZjY2MmMz
Njk5MzgwHhcNMjYwNzIzMTkwMTA2WhcNMjYwNzI0MTkwMTA2WjAzMTEwLwYDVQQD
EyhkMTA3ODBhMDRiZmYxMTRhYTM5NTRlYjNjNzY0MTQ0Y2FlZTdiZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI616cNIVWr9IyBFi+kFan0L2u+p
riLf4PGVwq/xZx4OTqlaBHuS3+HR1oQoK6C5MozbAdemcrSsn9WPhjxNOtS20uaH
5HmdXSek0we27o5C0PYjLcjn5ZgCQrUHVCbaIGNjWssEjDDQ8silU5QW11a4RCWd
DmbOjV+Vuh6jNmMCxBskDCAhaOTvmYozEp0VW18iq9UhT8UfQin6/51Y52XPZVKb
V0ECMSx0aaBq1ZRsf2zVyLyuWBd3Jf1tNq9EG7QhczcoxqV7Kld4CYjAivXjeoJU
zeKuJ+BFd+ZdxD+OC1D6D7Z/H3YilG9JCRi5B2tmD4IIBvi9dDAGDBu8hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEHgKBL/xFKo5VOs8dkFEyu5725MB8GA1UdIwQY
MBaAFNFExC4cowN7tvVB8eFAT2YsNpk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEt
NmEyZjRhMTA4N2Y5LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEtNmEyZjRhMTA4N2Y5
LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfTZFWLN
+G8CYwHzdmVfyeBp0KMe37xXLGQW1ry7xOJYSuLeUEydeN0HgffrMSdce6519HYy
BBZH+o1vdENUS1zHDgyDEQejEvxJaRFMyibx4u6TzMsazLpWp7CseJyX2apGE62U
CeT44njQoNosc3ZxdXJGicuvBDyMfc5eblDaFVKEW0CuQVbzyvy0JIwCC7gy2Z6d
EjT4qrwfnC9k2sFM5LbhG+FS6jyjdqotwNgZMI8EEq4bCn8nDNv1NKJjtLzXm9IR
0T8Xf6rLNvP8qeyvo4d0sQx2MlcfoX8gXyhcylagcChGk6ZnihLPHyUGKN2Jn1gw
2ZvDaObr5oJCgg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:16 2026 by rpki-client