Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
File:                     UTTRMgZFZE4urzaFh51pP3JSLHY.mft (raw, json)
Hash identifier:          kDQgxoEUI/k0GMlRp3JEUzczCRtZCWaq5//UvI1IpCM=
Subject key identifier:   C2:BF:6B:B4:4C:19:9D:6A:10:46:AE:47:30:C5:7A:55:FD:FE:1C:79
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Certificate issuer:       /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial:       019D273AB2A7614EE397B9E8AB2CBD427F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
Manifest number:          1670
Signing time:             Wed 25 Mar 2026 23:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:51 +0000
Files and hashes:         1: GpAYSqSBnbVI2jkqmZjF4cqN00c.roa (hash: watcT2RtTX9xWmhyi/0Z0eqDamt+a0rTkZyma9vwbuw=)
                          2: UTTRMgZFZE4urzaFh51pP3JSLHY.crl (hash: AGT5h2K9JhLFbq9mNQyRvdfycoNIni5mU7dF8LObG/I=)
                          3: gmjG60yO-dM5NBY95RTYVC92dCU.roa (hash: dL9a0J4WqVdYe7nzF2w3AJROlcgyQJx3wd5YtcwcZ6U=)
                          4: n11sLe7Mij0tIk_cwXwqcrYI4nE.roa (hash: mIg+KoW9zx0USKuS5S4U3XDpJKvtCU9K4ikguJjTQms=)
                          5: wyt5ptFXgbMrupCNzfQ3MMlFH4M.roa (hash: wsSbFZeuuJRkMGSymeRGA6zSq6ntn49Ubzt9NPIc7xY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:b2:a7:61:4e:e3:97:b9:e8:ab:2c:bd:42:7f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
        Validity
            Not Before: Mar 25 23:00:51 2026 GMT
            Not After : Mar 26 23:00:51 2026 GMT
        Subject: CN=c2bf6bb44c199d6a1046ae4730c57a55fdfe1c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:02:31:9a:5d:63:fa:3e:e5:d6:18:17:e4:
                    18:18:f1:08:c1:1b:46:dd:30:ff:07:65:4d:63:80:
                    ed:61:20:50:d1:88:ad:96:1f:09:2d:d8:28:32:55:
                    5d:ab:24:fe:12:3a:33:b7:2d:4b:d8:09:4b:59:08:
                    61:2f:23:78:22:bd:97:2b:cc:74:e7:ad:e5:a8:b0:
                    4e:95:ec:56:77:a0:17:a7:73:dd:e5:dc:54:f6:13:
                    1e:c7:3c:34:33:36:2e:c2:92:d3:4d:4d:a8:2e:c3:
                    d2:8d:98:e6:34:cc:0a:0a:6b:b3:af:7d:6c:ac:99:
                    a7:c5:31:1d:e6:59:a5:52:97:fc:60:51:73:78:07:
                    47:91:df:37:c6:aa:6b:ae:b9:dd:4f:01:db:da:18:
                    38:e7:f8:ee:c6:4d:4a:17:43:80:0e:d2:95:9b:26:
                    2a:c0:0e:17:5b:ce:89:55:a5:67:87:0f:36:e6:f9:
                    1c:d7:b5:66:cb:54:aa:09:f4:ba:bd:71:dd:3a:29:
                    04:7b:3c:87:42:8b:62:c5:d4:9d:a0:3c:91:92:ca:
                    50:a7:a6:32:60:7a:fe:30:c9:c5:64:2e:59:8d:82:
                    0f:d4:c2:d4:b5:a8:52:94:18:90:af:ca:3f:b0:5e:
                    08:18:87:b6:b0:d4:e8:e0:0f:ab:83:be:5c:ec:9c:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BF:6B:B4:4C:19:9D:6A:10:46:AE:47:30:C5:7A:55:FD:FE:1C:79
            X509v3 Authority Key Identifier:
                keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d2:01:ec:d6:ca:27:c1:08:75:27:f4:2d:9a:e3:5b:3e:5a:
         66:c7:13:71:fe:2b:1a:ff:59:84:e5:55:ac:8d:17:49:c1:e8:
         11:84:d9:44:45:41:2d:b6:ad:bb:07:73:6b:37:5f:47:47:b5:
         38:de:00:24:7f:4a:29:b4:ca:e8:33:34:51:62:e8:cb:6d:38:
         29:14:eb:96:53:4e:0f:af:7b:7c:5a:47:69:db:f3:34:1c:34:
         e7:cc:cb:cc:4d:a5:91:d6:9e:35:40:47:41:12:dd:17:5f:1b:
         4e:7f:1f:7e:2a:e6:39:ce:df:23:a7:20:57:06:fe:f2:d8:a4:
         50:e3:6e:57:d5:5b:6f:a5:d5:fe:ff:cb:38:70:e9:ea:60:6c:
         86:31:0f:14:78:9e:41:01:91:c4:fb:95:0a:3f:6c:ff:df:3b:
         61:1e:49:27:7e:6b:f1:56:38:81:ba:5d:4f:82:b2:d4:6a:51:
         a1:0a:91:20:32:0e:10:a2:9c:af:51:86:e5:e1:f3:07:eb:f2:
         64:74:dc:1c:80:2f:f2:bb:24:1a:d0:b6:46:d8:37:37:fd:4c:
         af:89:af:8f:7a:08:71:68:99:1d:c5:13:a8:c8:eb:fc:85:3b:
         d8:09:63:fd:b9:6c:75:50:9e:3d:56:ed:2f:54:35:68:4e:ab:
         1f:24:c3:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOrKnYU7jl7noqyy9Qn9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMzRkMTMyMDY0NTY0NGUyZWFmMzY4NTg3OWQ2OTNmNzI1
MjJjNzYwHhcNMjYwMzI1MjMwMDUxWhcNMjYwMzI2MjMwMDUxWjAzMTEwLwYDVQQD
EyhjMmJmNmJiNDRjMTk5ZDZhMTA0NmFlNDczMGM1N2E1NWZkZmUxYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL4CMZpdY/o+5dYYF+QYGPEIwRtG
3TD/B2VNY4DtYSBQ0Yitlh8JLdgoMlVdqyT+Ejozty1L2AlLWQhhLyN4Ir2XK8x0
563lqLBOlexWd6AXp3Pd5dxU9hMexzw0MzYuwpLTTU2oLsPSjZjmNMwKCmuzr31s
rJmnxTEd5lmlUpf8YFFzeAdHkd83xqprrrndTwHb2hg45/juxk1KF0OADtKVmyYq
wA4XW86JVaVnhw825vkc17Vmy1SqCfS6vXHdOikEezyHQotixdSdoDyRkspQp6Yy
YHr+MMnFZC5ZjYIP1MLUtahSlBiQr8o/sF4IGIe2sNTo4A+rg75c7JzwJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMK/a7RMGZ1qEEauRzDFelX9/hx5MB8GA1UdIwQY
MBaAFFE00TIGRWROLq82hYedaT9yUix2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2It
MmY1MWVjZDFhYTBlLzEvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2ItMmY1MWVjZDFhYTBl
LzEvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9IB7NbK
J8EIdSf0LZrjWz5aZscTcf4rGv9ZhOVVrI0XScHoEYTZREVBLbatuwdzazdfR0e1
ON4AJH9KKbTK6DM0UWLoy204KRTrllNOD697fFpHadvzNBw058zLzE2lkdaeNUBH
QRLdF18bTn8ffirmOc7fI6cgVwb+8tikUONuV9Vbb6XV/v/LOHDp6mBshjEPFHie
QQGRxPuVCj9s/987YR5JJ35r8VY4gbpdT4Ky1GpRoQqRIDIOEKKcr1GG5eHzB+vy
ZHTcHIAv8rskGtC2Rtg3N/1Mr4mvj3oIcWiZHcUTqMjr/IU72Alj/blsdVCePVbt
L1Q1aE6rHyTDdQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:12 2026 by rpki-client