Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File:                     ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier:          Bi3AMYg6vtT4UC/d86I5qtnkmXkF/zeT+5IQ93LA28s=
Subject key identifier:   90:E6:D4:91:79:5C:2B:54:D1:1F:BB:12:5D:6B:C0:17:77:A0:66:A4
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer:       /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial:       019E1DFE25A34236C6147717026183379DED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number:          0CDB
Signing time:             Tue 12 May 2026 21:00:55 +0000
Manifest this update:     Tue 12 May 2026 21:00:55 +0000
Manifest next update:     Wed 13 May 2026 21:00:55 +0000
Files and hashes:         1: 1-Y2vjSjF6gXRq6I6kzf8-SGCL8Q.asa (hash: DdT5c/3q+BGyWUydZ3FkM3RX71y9vyzAcIHaVlT8fro=)
                          2: nSvRGDhStfe0EXVwF_OtD5-X5tI.roa (hash: PZw2TNUjT5XiLSwX1IWnu0Kjsx7wHqyx3bL+SYLnLtE=)
                          3: pYag05r3IjY8CANS1rOV29P44Q8.roa (hash: HMep+BGio75gBaIq9gk8ClTlPgPcII6c/734DcscQwI=)
                          4: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: QveGSOoVgBk0PSBNHWq4hvpNwa2h2IiklEzEQ+CQItA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:25:a3:42:36:c6:14:77:17:02:61:83:37:9d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
        Validity
            Not Before: May 12 21:00:55 2026 GMT
            Not After : May 13 21:00:55 2026 GMT
        Subject: CN=90e6d491795c2b54d11fbb125d6bc01777a066a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:cf:6c:f4:cd:b9:de:92:84:4e:ce:e9:02:
                    02:a1:e9:23:23:ab:ba:e5:43:82:d1:8e:6b:da:92:
                    0b:64:a0:13:85:7f:ec:47:a4:e4:58:35:4c:7c:3f:
                    ce:16:8a:58:bd:0d:8b:87:d1:aa:d1:41:8a:2b:84:
                    2d:6d:2d:b8:17:05:e4:6d:63:43:28:0e:e4:f3:52:
                    4d:0f:4b:33:7b:cc:b2:0c:25:22:50:f7:60:5b:37:
                    b8:74:fa:f4:ae:a8:50:40:62:28:2b:4a:64:b0:4a:
                    93:d6:a4:7f:9f:c2:d5:23:e4:8c:bf:89:e0:c0:b2:
                    c2:74:ec:c1:85:a5:e4:12:ae:4c:4e:98:4e:ed:23:
                    d6:f2:03:61:e7:1c:df:a7:0d:7a:f3:04:7d:5e:d2:
                    9c:a9:19:e5:c8:36:2a:c8:07:69:90:cf:cc:e8:f7:
                    37:e9:8f:32:f1:1b:74:75:3c:e3:ca:1a:29:df:ba:
                    04:1d:61:0d:7a:ea:1f:1b:41:1c:d0:9c:2e:40:87:
                    5c:40:51:e6:93:54:1d:80:5a:3d:79:94:0f:8b:9b:
                    1a:90:37:d2:8a:68:30:c8:58:d3:a4:f1:90:34:38:
                    d8:59:97:55:87:71:00:d4:f6:d8:47:e1:c4:59:fb:
                    b0:2d:bf:74:be:cf:da:15:1a:f5:bb:66:4b:dd:2e:
                    b4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E6:D4:91:79:5C:2B:54:D1:1F:BB:12:5D:6B:C0:17:77:A0:66:A4
            X509v3 Authority Key Identifier:
                keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:25:c4:06:6b:4c:dd:1d:19:39:5a:a7:97:2d:ed:a8:3c:7f:
         37:63:61:5a:1a:d5:d5:90:b4:bf:a7:ae:a5:95:c9:3f:68:40:
         50:5c:a4:26:79:a1:29:73:7c:35:f1:02:c8:58:90:f6:7c:c3:
         09:3c:f4:4a:8f:f0:fa:9c:c9:50:c1:f1:38:a7:e7:ee:02:d4:
         c6:9e:be:95:83:13:c0:89:e0:75:b6:aa:2f:37:f4:89:e4:11:
         d5:b0:e5:ed:76:72:e4:7f:f4:f7:00:4e:f4:72:ab:f6:70:5f:
         05:38:1d:75:13:36:36:16:db:f4:4a:98:21:c4:7b:17:a9:0f:
         45:33:1b:6e:41:72:a4:03:a3:42:0d:6f:ac:18:47:7f:1f:05:
         cc:2d:44:27:3b:dc:ce:21:5e:66:b3:9b:a6:b2:a5:61:76:f5:
         ee:88:55:bb:a9:ab:13:66:5b:f0:d6:27:28:c6:96:8c:a6:3d:
         d2:cd:d1:14:d5:6f:bc:b3:bf:c9:0f:58:c0:e3:8b:6f:70:09:
         f3:a3:75:29:62:28:7a:96:c7:61:a0:90:44:9d:e9:44:b1:99:
         64:32:15:a5:1b:99:85:b1:a3:4d:71:03:27:f8:e8:84:0b:66:
         7e:67:e4:51:ec:89:ac:d5:0c:0f:3b:e9:de:bc:d4:c7:73:aa:
         4f:2e:bc:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/iWjQjbGFHcXAmGDN53tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjgxMzk5OTNiZTY2NWYzYjVkMGY2OTA5ZWYwNThmYThm
OTc5MjIwHhcNMjYwNTEyMjEwMDU1WhcNMjYwNTEzMjEwMDU1WjAzMTEwLwYDVQQD
Eyg5MGU2ZDQ5MTc5NWMyYjU0ZDExZmJiMTI1ZDZiYzAxNzc3YTA2NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunnPbPTNud6ShE7O6QICoekjI6u6
5UOC0Y5r2pILZKAThX/sR6TkWDVMfD/OFopYvQ2Lh9Gq0UGKK4QtbS24FwXkbWND
KA7k81JND0sze8yyDCUiUPdgWze4dPr0rqhQQGIoK0pksEqT1qR/n8LVI+SMv4ng
wLLCdOzBhaXkEq5MTphO7SPW8gNh5xzfpw168wR9XtKcqRnlyDYqyAdpkM/M6Pc3
6Y8y8Rt0dTzjyhop37oEHWENeuofG0Ec0JwuQIdcQFHmk1QdgFo9eZQPi5sakDfS
imgwyFjTpPGQNDjYWZdVh3EA1PbYR+HEWfuwLb90vs/aFRr1u2ZL3S60XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDm1JF5XCtU0R+7El1rwBd3oGakMB8GA1UdIwQY
MBaAFLm4E5mTvmZfO10PaQnvBY+o+XkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEt
N2JjNzNlZWUxNDQ3LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEtN2JjNzNlZWUxNDQ3
LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSXEBmtM
3R0ZOVqnly3tqDx/N2NhWhrV1ZC0v6eupZXJP2hAUFykJnmhKXN8NfECyFiQ9nzD
CTz0So/w+pzJUMHxOKfn7gLUxp6+lYMTwIngdbaqLzf0ieQR1bDl7XZy5H/09wBO
9HKr9nBfBTgddRM2Nhbb9EqYIcR7F6kPRTMbbkFypAOjQg1vrBhHfx8FzC1EJzvc
ziFeZrObprKlYXb17ohVu6mrE2Zb8NYnKMaWjKY90s3RFNVvvLO/yQ9YwOOLb3AJ
86N1KWIoepbHYaCQRJ3pRLGZZDIVpRuZhbGjTXEDJ/johAtmfmfkUeyJrNUMDzvp
3rzUx3OqTy682w==
-----END CERTIFICATE-----
Generated at Wed May 13 07:09:55 2026 by rpki-client