Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
File:                     ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft (raw, json)
Hash identifier:          VU3JGKChUM1uiIStW9804Kx+O2EHSTBreFIaCjL3MnQ=
Subject key identifier:   4E:87:B9:02:8D:69:91:EF:56:5A:1F:6A:A7:30:4A:00:DC:89:40:67
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Certificate issuer:       /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial:       01A0CFA40214F2899498B325A3A1D552D937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
Manifest number:          1A76
Signing time:             Wed 23 Sep 2026 19:00:27 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:27 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:27 +0000
Files and hashes:         1: 0gV__O_tCRpe--Gi6BtNH-1wRu8.roa (hash: r8hvmDtHKK1vnnnMTl88tE5Vnjz7akL/SOSVhN4ALN4=)
                          2: 5UYip_xBbzn2CNjLpZ_CoIpPzFE.roa (hash: 3j/AqF0wCGzG1PH65aCoZmdbg6/ubr1uvvDyr43tFG8=)
                          3: MLQlbC7wuHhJHajOqMOEcE0X_1c.roa (hash: GK+D/xRGcBdbiuOOUYdtTTEuV9w8Gk6wgcBpg3nBzkA=)
                          4: NCd7h6uycmfDKwB1SSzV73CMlrg.asa (hash: mLT15W8x+3BbgxOWdyZ4lMlHx6//PbZWkOA2zhYYkDk=)
                          5: TM2a_AtbHtu62DfJsvptScTKk4s.roa (hash: Pmun9G4KM00LP9UCnH4fI3onhtXKKZDUrch2QtVQaDk=)
                          6: lLMQIaroKYWFB31VcL9dmnECkRk.roa (hash: vt5R6brp6Jbqtmbr11+IGTCsyRzKqudpEUz3BtmTXKE=)
                          7: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl (hash: HSx2WLn63NntMgzxpeS7k6GwAHJ6RPrLf0zkyjeNaJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:02:14:f2:89:94:98:b3:25:a3:a1:d5:52:d9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
        Validity
            Not Before: Sep 23 19:00:27 2026 GMT
            Not After : Sep 24 19:00:27 2026 GMT
        Subject: CN=4e87b9028d6991ef565a1f6aa7304a00dc894067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:5b:a9:aa:58:cc:d7:ba:3b:e6:49:9f:d8:
                    ab:6c:b3:93:65:9a:06:a0:77:14:cc:51:e6:81:83:
                    ee:7e:52:8a:f9:eb:f8:91:18:3c:a6:73:15:7d:35:
                    0a:1b:70:31:6b:c5:36:84:37:50:1b:fa:12:50:aa:
                    d0:3e:dc:38:97:b7:51:dd:13:df:ef:97:08:9d:84:
                    3f:8a:6b:ca:3b:1a:3e:93:6b:fd:cb:75:20:a2:ab:
                    15:71:4b:fe:e2:ee:82:58:25:07:30:16:e9:9b:e4:
                    13:d8:2d:a2:c5:61:14:56:a9:c6:28:ad:38:27:73:
                    0e:99:ab:39:bd:67:94:28:c3:97:8c:05:78:80:2f:
                    ff:cd:43:cf:5e:19:54:c0:bd:30:5a:59:f0:fc:d1:
                    64:76:ce:f0:ba:a7:62:51:5e:5a:51:8a:e5:f6:e2:
                    93:c8:8e:68:72:be:de:5f:88:c4:38:38:47:6d:bb:
                    8a:f9:3f:5f:c1:22:6b:97:6f:dc:48:7b:47:62:f0:
                    7f:f5:1c:b4:08:0f:66:0c:2a:62:34:b9:c5:9f:b1:
                    a5:6c:2d:80:37:1f:0c:69:13:84:58:e4:c5:ea:54:
                    2a:1b:c4:db:65:53:d6:fa:1b:5c:4b:11:14:40:78:
                    9f:a2:89:72:55:9a:7f:9e:43:4b:92:44:d2:dc:71:
                    72:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:87:B9:02:8D:69:91:EF:56:5A:1F:6A:A7:30:4A:00:DC:89:40:67
            X509v3 Authority Key Identifier:
                keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:fb:40:d5:1e:63:0d:11:22:16:76:a3:07:55:5c:65:04:78:
         eb:33:ca:73:de:c9:ca:f4:a5:7b:e4:ff:3b:81:7d:db:5f:68:
         fa:4e:8f:f5:48:ed:b7:d6:7d:87:ea:40:cf:ff:98:df:ae:db:
         8d:03:fd:8b:05:6b:8a:cb:7e:b9:04:b8:e0:d9:25:44:64:53:
         c7:41:92:4d:05:38:fe:c3:36:30:78:d6:db:2b:97:87:e2:4d:
         19:e4:2f:8e:c2:d1:74:2d:f5:95:e8:0a:49:9a:78:ab:85:84:
         5e:2f:30:36:ed:bf:5b:7a:a1:aa:ed:a9:d0:63:9c:03:9f:97:
         69:ee:e8:33:c3:7b:6f:b4:96:51:6d:ec:c5:2e:3a:47:5a:99:
         83:df:c1:3a:64:48:4d:25:de:29:02:17:92:c2:7b:2a:3c:b1:
         04:d2:1b:b5:dc:61:2c:c5:8d:c0:91:40:07:69:65:ad:74:df:
         3e:da:b0:cd:72:28:3e:cc:30:f5:e6:54:48:eb:30:9e:33:b2:
         5b:e1:03:67:47:53:78:6c:dd:7c:a0:9f:bd:c6:a0:f0:c6:48:
         7e:dd:50:a7:93:d8:6f:c4:02:5b:4c:d9:08:ba:c2:ce:4d:d3:
         7c:5e:b9:5d:4f:0e:ed:5c:ed:fc:9b:41:7e:bf:e5:f4:07:02:
         7b:b9:90:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:29:44 2026 by rpki-client