Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File:                     uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier:          tOcgHlgCgl9ilUf+CB8UjTB4Gjs1bj/XJKied5Ls+s0=
Subject key identifier:   4D:4E:DD:40:66:94:08:A0:BA:ED:5B:42:5C:72:A2:75:5E:18:7F:35
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer:       /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial:       019E1FECFFE8DD03674FEE9883D6DE2B9EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number:          153C
Signing time:             Wed 13 May 2026 06:01:26 +0000
Manifest this update:     Wed 13 May 2026 06:01:26 +0000
Manifest next update:     Thu 14 May 2026 06:01:26 +0000
Files and hashes:         1: UhAbETd73I_RNmPinYlIjwaxS5A.roa (hash: 72Y1aXwOgGGk1TvFfLXba73tNjzJqcFFrwUxU2i0lEg=)
                          2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: potj6KLp3FvmcMctZAkNU2rV+00OYP+ycbfkKLYHCgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:ff:e8:dd:03:67:4f:ee:98:83:d6:de:2b:9e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
        Validity
            Not Before: May 13 06:01:26 2026 GMT
            Not After : May 14 06:01:26 2026 GMT
        Subject: CN=4d4edd40669408a0baed5b425c72a2755e187f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:00:63:4a:dd:49:63:69:93:f6:e1:50:24:
                    7b:1c:f5:e0:15:02:e1:f2:d3:4c:f1:77:50:b7:e4:
                    aa:de:46:7f:32:bf:20:67:74:32:71:ce:60:11:c6:
                    fa:3a:55:b7:a4:68:27:23:6c:07:0e:67:80:5e:2a:
                    03:5f:ce:ef:fe:d4:d5:1e:a7:ac:e4:40:8a:8a:81:
                    02:27:8f:bc:d4:90:f6:58:ce:bc:20:f4:3f:9f:72:
                    c2:92:71:78:a1:4d:2b:ff:fc:0b:d8:37:56:30:96:
                    c2:52:3e:c2:47:26:4d:a6:5f:e8:dd:cf:6e:67:27:
                    3f:c9:8f:e4:ed:b4:ba:e2:52:d1:7b:1e:b8:b9:ac:
                    9d:44:d9:a7:7d:80:64:09:fd:05:e8:4b:03:f8:96:
                    53:81:35:cb:65:81:20:4a:2a:5a:48:02:67:11:50:
                    96:43:30:07:a7:05:a5:61:5f:7e:04:ba:3a:b9:03:
                    fe:66:54:4a:66:89:c0:39:0f:ee:ac:60:43:81:15:
                    d1:68:ce:21:7c:00:0e:a8:21:51:30:33:1c:20:26:
                    bb:d1:9e:32:f0:41:0a:46:90:81:df:a6:3b:41:19:
                    21:61:7d:65:ae:8d:df:15:17:a1:ba:74:81:a5:bc:
                    75:88:c5:7c:cf:eb:92:65:99:a8:23:9a:45:7c:9e:
                    aa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4E:DD:40:66:94:08:A0:BA:ED:5B:42:5C:72:A2:75:5E:18:7F:35
            X509v3 Authority Key Identifier:
                keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:62:a5:f2:af:29:6e:07:6d:b8:28:47:77:93:8e:b7:6f:05:
         db:1e:06:8c:48:57:30:e3:95:aa:f4:03:72:c6:bd:20:67:d4:
         af:60:bc:c8:fa:4e:b1:4d:2f:86:18:5f:3d:93:61:d0:bb:ae:
         aa:2a:db:f8:5a:f5:0e:df:17:a4:21:c1:d9:b1:4a:2c:96:26:
         1d:41:95:92:16:29:c8:8c:44:de:63:79:e2:18:b7:97:26:31:
         84:13:aa:83:63:30:d4:db:5e:7e:62:19:31:43:31:24:c4:63:
         da:ae:3b:19:da:63:27:58:80:96:c8:60:26:1e:29:78:1f:39:
         8e:6f:ba:c5:45:cb:4b:2d:19:88:33:72:a6:d6:17:23:a1:ea:
         b3:61:90:ce:42:87:38:35:7e:c9:1a:f2:6b:7f:ba:48:b8:93:
         8c:d6:4e:52:d1:50:12:74:af:b1:0f:09:49:7e:1e:7d:e6:81:
         e0:8c:17:77:fb:2f:37:9d:e8:5e:0d:9b:3e:02:39:50:bf:18:
         1d:64:a9:3e:93:c4:82:ea:61:ad:9c:ec:54:5f:3a:5e:8c:b4:
         37:2c:e7:92:32:7c:03:84:0d:89:42:39:8e:6a:6c:84:6f:44:
         72:7a:2a:75:49:f8:f9:9d:ae:c6:fb:27:3d:45:3d:49:be:1f:
         3a:fe:d0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:54 2026 by rpki-client