Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File:                     UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier:          6Ag8G9OhNGc4aXDIlphavFBE1RbkNIQusOvyAw3UegA=
Subject key identifier:   4F:0A:D4:BC:0E:05:F8:49:E6:72:44:BA:6F:8C:74:1B:C8:CE:04:E3
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer:       /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial:       01A0D983C28B5DA9DC4D889D10C20BEEFA62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number:          06B9
Signing time:             Fri 25 Sep 2026 17:01:25 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:25 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:25 +0000
Files and hashes:         1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: vvy31ArCYXzNnbV/9s1P9vD3YhprUVv63GGqNt8o40c=)
                          2: xTwRZ6Mz0DZziLxUVhlhyoH_Gr4.roa (hash: 87G44kYU+NhJk4PPN1w3dfZMV/JFeh7+LhgClnnb7tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:c2:8b:5d:a9:dc:4d:88:9d:10:c2:0b:ee:fa:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
        Validity
            Not Before: Sep 25 17:01:25 2026 GMT
            Not After : Sep 26 17:01:25 2026 GMT
        Subject: CN=4f0ad4bc0e05f849e67244ba6f8c741bc8ce04e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:b4:76:e6:cd:3f:5e:13:2a:0b:d9:8e:e2:
                    92:17:70:58:18:d7:99:11:4d:ed:0a:ab:17:ee:26:
                    da:65:22:49:78:7f:2a:4a:21:e2:fc:24:0a:cb:9d:
                    1a:d3:6f:14:c4:ea:aa:62:19:9f:ae:71:f0:60:9e:
                    1f:dc:c1:52:cc:fb:f3:67:b0:21:b4:e2:b6:bf:ca:
                    40:b9:95:cc:9b:09:79:7d:41:7d:8b:17:7f:06:d1:
                    01:8d:06:84:c7:38:00:c3:cf:3c:27:bb:b8:2f:8e:
                    81:39:fa:c2:15:00:f7:ec:30:84:2c:ee:63:d4:4a:
                    b8:2a:6e:6f:e8:f0:87:2f:ae:de:0b:16:92:12:51:
                    ad:b5:5f:db:6f:fa:00:00:07:31:8b:89:69:d2:7e:
                    c9:a7:90:80:d2:22:eb:92:1c:1f:d4:0b:f8:44:5f:
                    08:78:63:18:5c:11:c8:eb:8a:f9:aa:fd:6b:89:25:
                    72:ed:39:96:0d:36:1b:8f:73:25:a9:40:76:eb:bf:
                    aa:1c:fd:ce:8a:2c:69:52:9f:bb:0e:21:05:42:69:
                    c8:c5:e0:90:cb:8a:d5:d1:76:2f:f1:0b:3d:21:e8:
                    59:7b:d2:9d:0d:36:fe:fd:a8:66:43:e5:65:7e:4e:
                    fb:b0:ae:44:8e:bd:6b:5c:f0:ea:7e:93:67:b4:64:
                    65:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0A:D4:BC:0E:05:F8:49:E6:72:44:BA:6F:8C:74:1B:C8:CE:04:E3
            X509v3 Authority Key Identifier:
                keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b4:04:de:3f:89:e9:17:e9:be:43:ed:40:13:11:d8:9e:a2:
         84:86:2a:fd:fb:59:07:0e:53:c6:3d:8b:34:b0:3f:83:93:aa:
         77:02:d6:15:75:ec:25:2f:11:0c:c6:4e:af:b4:9b:c4:fd:0b:
         9a:33:d8:e5:e8:2b:01:06:b8:7a:cb:ed:2e:7f:c8:b1:5b:e7:
         f0:20:57:18:45:b8:6c:02:9e:c3:98:b8:93:27:35:5a:45:19:
         59:50:58:f0:8b:2c:b7:1e:cc:5d:56:8a:e1:40:4f:17:57:4c:
         43:92:76:0b:b0:10:11:93:f0:9d:93:83:f9:13:3b:20:02:98:
         c0:0d:5a:60:84:c1:86:1a:8d:71:6b:ec:f0:6c:84:55:96:7a:
         41:32:ff:25:66:ba:5d:97:35:eb:fe:46:c4:c4:de:5e:ab:ce:
         33:7f:a7:5e:12:3d:19:8a:2c:7a:7e:f1:08:e1:be:c6:7c:9f:
         7f:c8:f3:ad:e2:76:20:1b:b9:0c:05:f0:18:fc:54:15:a9:d6:
         30:dc:d4:21:1e:86:17:0a:91:a0:57:68:90:e3:a1:8c:92:7d:
         cd:70:dd:9b:c6:ed:41:9b:3e:88:d4:92:07:bd:10:10:91:32:
         90:79:ba:47:c1:56:6c:7a:fb:1e:0f:53:18:ab:3c:10:5b:db:
         ec:3a:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:29:46 2026 by rpki-client