Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
File:                     UTTRMgZFZE4urzaFh51pP3JSLHY.mft (raw, json)
Hash identifier:          SHwOfuGo/4kpJOsvvu5k2Eb9tH6bNsL5S5rnZXIENsQ=
Subject key identifier:   0B:E5:82:71:1E:0E:B4:FF:1E:A6:A5:8B:03:39:7F:FB:1E:64:3D:86
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Certificate issuer:       /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial:       019D29292085D2201C1CC8AA317F715109F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
Manifest number:          1671
Signing time:             Thu 26 Mar 2026 08:00:54 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:54 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:54 +0000
Files and hashes:         1: GpAYSqSBnbVI2jkqmZjF4cqN00c.roa (hash: watcT2RtTX9xWmhyi/0Z0eqDamt+a0rTkZyma9vwbuw=)
                          2: UTTRMgZFZE4urzaFh51pP3JSLHY.crl (hash: Er7h7fPK9UyAbCQlT7i76Vjd95BRfoEKO34Gxu3EpzQ=)
                          3: gmjG60yO-dM5NBY95RTYVC92dCU.roa (hash: dL9a0J4WqVdYe7nzF2w3AJROlcgyQJx3wd5YtcwcZ6U=)
                          4: n11sLe7Mij0tIk_cwXwqcrYI4nE.roa (hash: mIg+KoW9zx0USKuS5S4U3XDpJKvtCU9K4ikguJjTQms=)
                          5: wyt5ptFXgbMrupCNzfQ3MMlFH4M.roa (hash: wsSbFZeuuJRkMGSymeRGA6zSq6ntn49Ubzt9NPIc7xY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:20:85:d2:20:1c:1c:c8:aa:31:7f:71:51:09:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
        Validity
            Not Before: Mar 26 08:00:54 2026 GMT
            Not After : Mar 27 08:00:54 2026 GMT
        Subject: CN=0be582711e0eb4ff1ea6a58b03397ffb1e643d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c8:e8:c7:71:08:18:0a:9a:f6:46:49:f7:a4:
                    70:30:51:9a:0f:89:73:a8:25:9a:6b:d2:c5:89:c2:
                    77:64:e1:37:c4:d4:91:8e:77:89:2e:5e:e6:e0:05:
                    7a:4a:cc:4d:f6:c5:2d:18:70:c1:3f:1b:ef:c7:50:
                    7c:00:4c:4d:fc:1e:1a:79:32:56:14:1b:6c:81:b7:
                    c1:f6:7f:cc:88:9b:dd:3c:ba:c4:b2:91:9d:6b:35:
                    07:0e:20:49:34:18:7c:14:c8:31:02:9c:07:aa:11:
                    61:41:5b:47:c5:ec:26:68:80:34:b3:cd:da:88:16:
                    03:98:63:04:9c:79:03:9b:65:f1:1c:ba:78:07:e7:
                    4c:d4:14:8b:4c:51:7c:4f:2f:3c:d8:8b:17:39:0f:
                    0c:5a:79:47:3b:53:9e:95:4c:d2:4e:17:07:9b:d7:
                    f7:f6:c5:fb:8f:86:f7:3c:ba:38:80:21:05:91:f5:
                    3c:dc:2e:04:a9:5a:63:b1:9e:ab:d2:52:ca:07:b0:
                    62:04:60:cd:91:b3:fe:bc:c3:b5:d6:d7:c7:4c:a1:
                    9f:f6:bc:39:3f:95:2a:a2:c9:59:b0:41:03:65:48:
                    99:af:ba:ce:e4:91:95:c0:25:d5:fe:fd:71:f7:31:
                    12:ab:77:95:55:5b:d2:00:77:cb:77:90:a0:88:a2:
                    a4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E5:82:71:1E:0E:B4:FF:1E:A6:A5:8B:03:39:7F:FB:1E:64:3D:86
            X509v3 Authority Key Identifier:
                keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f6:9a:8a:82:91:9c:ca:5d:08:34:d4:d9:53:25:0c:1d:22:
         0c:3b:e7:b3:77:e2:50:0f:33:dc:04:78:1e:86:0c:98:dd:25:
         38:20:ce:b0:b0:ac:52:c9:e7:ee:3c:90:ce:da:55:fb:0b:19:
         78:d4:c1:72:70:f7:85:df:d7:05:fc:b6:83:af:77:ff:45:84:
         b5:7f:bf:d3:92:ca:3e:c3:90:0f:0d:d0:96:ba:4d:09:e3:6c:
         bc:44:3c:0a:36:06:8c:31:e9:8a:84:e4:fe:e9:91:17:f1:2e:
         d7:e2:ea:ff:05:e3:0e:93:fa:1d:0b:64:c4:e2:fb:48:33:0e:
         f2:be:5f:ea:27:25:39:82:ab:ab:32:ed:b9:d8:a9:d5:7f:22:
         be:8f:6c:63:a7:b6:cb:ee:c1:73:93:75:3d:03:18:78:7e:88:
         c8:b6:e8:23:1e:28:ff:74:de:75:64:80:68:ab:73:58:91:bc:
         d4:39:5d:84:53:80:7e:d8:d6:b8:97:ed:e6:3a:3c:93:12:8d:
         2c:fc:8d:3a:60:d4:f8:fb:fd:85:77:82:56:63:97:7d:50:bf:
         2e:24:f4:31:07:01:3d:c5:41:61:87:18:50:bb:eb:2c:f2:2d:
         e1:63:e3:00:bc:93:3f:c4:4b:a2:30:98:c0:b9:56:db:0a:77:
         b5:35:af:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:35 2026 by rpki-client