Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File:                     ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier:          z/Jrt6i9im510zDfPY4RBEp5k7urXAqaozH5ExUV3G0=
Subject key identifier:   8B:24:8E:61:E1:14:A8:A1:93:E7:80:B7:56:C5:EB:D5:E6:0A:22:B5
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer:       /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial:       01A0D760D357ABE0BD33C56CF9E5A530F82F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number:          0E48
Signing time:             Fri 25 Sep 2026 07:04:02 +0000
Manifest this update:     Fri 25 Sep 2026 07:04:02 +0000
Manifest next update:     Sat 26 Sep 2026 07:04:02 +0000
Files and hashes:         1: 1-Y2vjSjF6gXRq6I6kzf8-SGCL8Q.asa (hash: DdT5c/3q+BGyWUydZ3FkM3RX71y9vyzAcIHaVlT8fro=)
                          2: lLOn1a_u_YC3vJ_LFQzYUJYz5bw.roa (hash: E7hSojMc3tDdmz8A/pzP/+XY9Q3UAlYQtQ1nExLgNd8=)
                          3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: sXwGrSwE7MJDLeMUXIc+G6hEyHy8gU25Fm4y4Ch9OFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:60:d3:57:ab:e0:bd:33:c5:6c:f9:e5:a5:30:f8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
        Validity
            Not Before: Sep 25 07:04:02 2026 GMT
            Not After : Sep 26 07:04:02 2026 GMT
        Subject: CN=8b248e61e114a8a193e780b756c5ebd5e60a22b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:56:4d:16:8b:3a:55:20:8a:15:cf:b4:df:
                    67:3f:06:f4:f7:e2:db:5b:dc:e5:50:8d:44:95:b5:
                    b2:38:92:5f:ac:9b:f1:13:b0:dd:39:83:e8:8c:44:
                    19:48:02:6c:11:e2:ec:14:64:bc:5f:4f:db:77:20:
                    ca:c5:a9:6f:fb:66:be:1f:cb:78:ba:fc:8c:23:44:
                    ad:99:0c:60:49:58:56:cf:ac:80:5a:1d:a4:2c:83:
                    c0:ef:9c:7d:36:da:37:ab:a4:21:7d:7d:66:ae:2d:
                    d8:b1:48:63:fb:98:e9:00:d2:11:eb:6f:ed:7c:95:
                    9c:e7:87:96:5d:f8:cc:48:27:1e:b2:48:a0:7e:30:
                    96:56:c0:4f:b2:f7:80:01:c1:bb:9a:22:48:c6:1f:
                    d7:60:b5:4a:8e:ac:06:5c:6b:7c:de:8a:95:7b:54:
                    32:32:d9:bc:04:0d:34:ec:ba:40:37:e0:48:d9:33:
                    1a:4d:74:cc:a1:ac:86:73:ef:7a:dd:28:27:d6:6f:
                    15:a6:cd:c2:9e:6e:38:9f:b4:52:8f:7f:73:71:81:
                    b0:22:77:b3:91:f1:64:e9:03:0e:48:e5:f5:0b:f5:
                    2b:90:b2:f4:72:1d:64:51:27:2a:5c:ca:8f:92:57:
                    e8:85:36:09:52:dd:2e:b2:38:20:ba:4c:2d:9f:8f:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:24:8E:61:E1:14:A8:A1:93:E7:80:B7:56:C5:EB:D5:E6:0A:22:B5
            X509v3 Authority Key Identifier:
                keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:5c:99:a0:64:0a:3d:f8:f6:e3:ff:59:aa:18:06:01:84:
         2a:36:62:7b:09:98:8a:fe:a0:b8:a7:bf:27:3f:db:03:4a:dd:
         62:4b:73:3b:ce:fd:9e:9c:95:8b:4e:9d:fe:37:54:c7:f7:bb:
         2c:e6:40:7c:53:a6:ce:12:b5:40:55:b6:01:56:8e:63:cb:ba:
         42:85:e1:ce:00:9a:73:10:d4:52:da:92:03:5f:8a:2c:f5:e2:
         96:fc:18:22:4c:01:fc:64:ca:8e:6d:18:22:5c:05:e9:b0:83:
         18:ed:0a:50:a9:e6:d7:a2:44:c7:d3:17:40:75:67:76:fa:b5:
         6e:ce:55:df:30:b2:da:d7:98:ab:05:67:38:0b:74:17:40:03:
         43:0e:9f:84:7a:af:78:0c:77:0b:f7:d4:6b:3f:b7:8c:2d:94:
         58:53:09:9a:27:1d:1c:11:a1:1e:ae:a0:7c:ca:05:1d:90:cb:
         35:b8:cb:a3:8d:7c:d3:a1:95:e7:84:9b:b5:37:06:ee:f5:57:
         58:9c:2c:ce:6b:38:88:c2:de:a1:16:e9:12:39:e6:e7:1b:cc:
         f2:70:79:e1:72:6d:4d:d8:c3:4b:91:30:f5:69:8e:5a:f9:6d:
         e0:8c:a1:d0:6e:cc:57:0e:d5:81:02:18:b8:16:39:67:19:20:
         fd:04:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:23:12 2026 by rpki-client