Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
File:                     UtIFkjNg-Ly7PG8regneiX4hEuk.mft (raw, json)
Hash identifier:          y4WTgekoZ0Se5kMJcsqLf0YMEqNghosEWZoCdOMq3Ok=
Subject key identifier:   D6:01:19:EF:ED:A0:4A:74:71:9D:DB:D6:6D:2D:5A:7E:BB:AE:12:15
Authority key identifier: 52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9
Certificate issuer:       /CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
Certificate serial:       01A0EFD451DE9EB0F9AF8E6B10F9E8000857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
Manifest number:          59
Signing time:             Wed 30 Sep 2026 01:01:04 +0000
Manifest this update:     Wed 30 Sep 2026 01:01:04 +0000
Manifest next update:     Thu 01 Oct 2026 01:01:04 +0000
Files and hashes:         1: UtIFkjNg-Ly7PG8regneiX4hEuk.crl (hash: LWGyXaY7VdFFG91181J5Czvu0Fw+Rpc5nakkCMayJbE=)
                          2: g6yrvOBeW6EKsF6uPz4qtt_DajI.roa (hash: /eXlPUvaL86WUGYjsxXCQYyeVUT9/VSJoeS28C++a+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 01:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:d4:51:de:9e:b0:f9:af:8e:6b:10:f9:e8:00:08:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
        Validity
            Not Before: Sep 30 01:01:04 2026 GMT
            Not After : Oct  1 01:01:04 2026 GMT
        Subject: CN=d60119efeda04a74719ddbd66d2d5a7ebbae1215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:89:d8:40:70:02:15:e6:a8:50:16:12:ab:b1:
                    da:3d:77:05:8a:0b:54:2c:d0:16:79:d5:9a:4d:30:
                    ff:65:2d:c5:cd:67:10:96:77:de:37:b4:aa:83:7d:
                    43:83:96:91:ed:b1:d0:1f:28:eb:56:c5:ec:75:7f:
                    44:c7:09:5f:b7:01:be:8b:a9:b9:84:a5:2a:b7:e8:
                    f3:ec:9a:45:53:a2:61:38:64:8b:a1:e5:bd:e4:69:
                    a1:ed:d6:79:02:9a:4b:30:c7:bd:ba:98:fb:1e:77:
                    c5:8f:f6:32:41:eb:27:66:8b:dc:0f:5b:29:b0:9b:
                    31:4e:4b:3d:d3:52:64:f5:68:e7:0a:ea:f1:8c:87:
                    50:77:e9:a5:ec:d7:21:bf:45:9e:f2:61:1b:26:5b:
                    ac:9f:49:12:42:fa:36:96:93:d5:9d:f4:2f:40:ae:
                    fe:d3:7b:9c:28:2d:51:06:59:45:dc:02:b1:75:d2:
                    ec:d6:53:f9:3f:6e:8e:6c:ff:b0:0e:9c:bf:d4:29:
                    14:45:31:01:6d:22:5e:bb:3d:54:89:47:61:21:ae:
                    3c:68:27:69:46:e1:55:a1:0d:d2:75:d0:fd:0d:6a:
                    a7:ad:cc:3f:91:38:a0:42:86:b2:21:f7:e7:2d:4d:
                    5b:26:1a:6f:00:ef:40:ac:9d:26:94:75:52:ef:fe:
                    6e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:01:19:EF:ED:A0:4A:74:71:9D:DB:D6:6D:2D:5A:7E:BB:AE:12:15
            X509v3 Authority Key Identifier:
                keyid:52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:cc:b5:c7:09:e0:51:72:6e:ec:df:6a:4a:21:da:d5:c9:38:
         1c:f4:f1:d8:43:3c:67:33:f9:75:04:a9:d5:7f:fd:5f:c1:c8:
         e9:86:d5:9a:99:86:d6:a1:20:10:b8:a6:d6:6c:d6:87:49:a5:
         b6:c6:50:b9:11:3b:da:53:c4:03:ef:41:e5:f5:48:cc:ad:a5:
         a7:f7:bb:40:c4:d0:20:53:4d:47:91:02:65:96:ed:96:55:1a:
         4e:ba:42:34:63:a4:c4:4e:92:dd:27:12:bb:1c:f8:24:5c:98:
         07:1e:72:c9:52:53:d2:56:d4:7a:6e:0d:d3:1d:64:c3:11:3e:
         38:34:e1:a7:26:00:33:00:57:7d:d9:a5:7b:2d:30:2e:8c:ba:
         b6:40:fb:f2:56:a4:ca:53:af:f9:70:86:75:9a:96:75:37:c5:
         c4:7a:06:7f:86:c2:1d:be:bb:62:6b:17:17:70:6b:2d:7d:2e:
         b0:d3:f2:71:aa:37:2b:d8:07:73:24:48:30:cf:bd:90:54:2e:
         93:b7:d3:b9:74:34:b4:b2:55:cd:51:87:1c:76:7b:f2:ca:d7:
         d2:e0:c5:99:0d:7f:2d:bf:36:35:6c:90:01:a0:f5:ed:66:9e:
         61:72:83:34:35:cd:6e:b2:c1:3e:c0:f3:3d:e5:43:b3:38:b7:
         f6:4f:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:46:51 2026 by rpki-client