Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File:                     1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier:          D+c+5ZXn9Ihd8x57n//J0VhIkSgZRgQYEI7PdzZsvK0=
Subject key identifier:   E2:A0:2F:A6:A1:E7:2B:8D:7D:4F:57:54:76:AF:D5:1F:6C:1D:5A:B9
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer:       /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial:       01A0D796B2A22B7849DEF39BB994AA5AF334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number:          1A6F
Signing time:             Fri 25 Sep 2026 08:02:52 +0000
Manifest this update:     Fri 25 Sep 2026 08:02:52 +0000
Manifest next update:     Sat 26 Sep 2026 08:02:52 +0000
Files and hashes:         1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: qV27Vp/sTuZgoNMPLSt8SAOTIunCx+UYWUlJeCJTMNk=)
                          2: C4dhhSdCne6HfKBYrO0fMDCR52U.roa (hash: uDVsLBMCBkiLe3jkQqb41lNCpW9vDxKBn3Ey847tq5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:96:b2:a2:2b:78:49:de:f3:9b:b9:94:aa:5a:f3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
        Validity
            Not Before: Sep 25 08:02:52 2026 GMT
            Not After : Sep 26 08:02:52 2026 GMT
        Subject: CN=e2a02fa6a1e72b8d7d4f575476afd51f6c1d5ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:62:c0:55:49:8f:13:5e:66:ff:0b:46:c5:
                    62:db:7d:d1:3e:88:3c:ad:c6:50:83:d3:7c:a6:20:
                    b5:c6:4f:20:8e:30:bc:73:6a:23:d4:94:12:ac:74:
                    50:08:56:3b:a8:af:aa:26:b2:ef:a7:94:09:82:c4:
                    64:5e:34:f1:fa:70:14:17:05:09:d2:93:40:63:b0:
                    3a:42:ba:aa:b5:64:b8:36:26:25:e2:52:2f:1e:f7:
                    55:87:be:a3:0d:74:7b:1c:8c:df:fd:98:0f:98:49:
                    29:6c:a8:c5:0c:45:3c:b3:1f:ed:d2:6c:66:36:b3:
                    95:5e:4e:dd:b0:0b:cd:2d:1d:c9:e7:b2:51:2a:2b:
                    12:bf:32:5e:32:bc:5c:b0:58:ad:06:35:c6:db:bd:
                    06:09:eb:33:7b:1e:aa:48:7d:02:16:85:04:73:54:
                    5b:59:61:a9:d0:f5:ca:fc:f8:07:7f:28:98:d6:d1:
                    cf:32:2e:7f:66:de:18:b3:ad:cd:46:06:3a:60:27:
                    59:cb:c3:e5:69:52:f6:fb:c0:ad:09:38:a6:dd:f7:
                    a5:ab:4f:a0:84:4d:2f:0a:de:19:27:ed:47:c5:4c:
                    da:8a:d9:9d:2a:e2:43:85:1c:db:86:db:c0:4e:9b:
                    d9:b3:ab:1b:31:03:3c:10:07:65:4e:b1:26:8e:ba:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A0:2F:A6:A1:E7:2B:8D:7D:4F:57:54:76:AF:D5:1F:6C:1D:5A:B9
            X509v3 Authority Key Identifier:
                keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:75:71:bc:58:e4:d9:cc:90:e7:73:e7:c6:5f:34:96:02:6e:
         2d:d8:2e:2c:06:ef:9c:95:93:82:65:8d:9f:f6:12:1e:f8:be:
         ce:ba:2a:88:f5:07:4b:cb:94:54:d6:e1:c0:86:8a:d2:3d:2a:
         67:ea:98:ec:28:7b:fd:e0:3d:00:4b:96:20:6a:e5:df:91:bc:
         1e:a2:6d:41:3d:60:22:8e:79:b9:50:65:e1:e1:a4:ec:01:61:
         31:52:ee:0c:03:c6:8b:db:0b:3b:82:fb:08:d9:c8:98:3b:df:
         5a:07:e3:43:37:cd:21:7d:7a:89:9e:4e:78:37:7e:34:3b:d8:
         02:e9:5d:05:f8:03:f6:bb:4c:1f:e8:45:91:6f:ea:52:8f:fe:
         2a:49:f4:3e:41:3d:56:6b:3c:c4:b6:0b:ef:cb:61:43:9e:a7:
         96:80:e4:e4:c1:1c:5a:48:1f:c2:e0:f3:d5:26:99:46:bf:7c:
         8e:d7:46:19:ab:d3:1f:08:bc:d4:c9:c3:e9:58:ed:3c:aa:23:
         06:24:49:4a:cd:e4:0f:ad:1f:9f:a5:25:cd:69:d1:65:39:80:
         19:af:40:bb:5e:5f:c9:bc:a8:45:9e:54:e4:99:1c:65:c5:79:
         99:2c:76:c2:f5:c2:9f:83:81:47:2b:da:b0:de:2b:50:92:2f:
         61:2c:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:48:39 2026 by rpki-client