Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
File:                     UbSboN2GFRKGGNUBWcsPO16e5iY.mft (raw, json)
Hash identifier:          v5621P6Xt6NljLcLBfZc7eJEKFl2AHMWynHJF6dwFbg=
Subject key identifier:   70:22:79:79:2E:A6:0F:C2:F1:B9:0C:B5:40:CE:87:43:76:06:E8:23
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019D286B60EDC1130F9188CA3FEEA652B90C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
Manifest number:          18C4
Signing time:             Thu 26 Mar 2026 04:33:38 +0000
Manifest this update:     Thu 26 Mar 2026 04:33:38 +0000
Manifest next update:     Fri 27 Mar 2026 04:33:38 +0000
Files and hashes:         1: 4o-bt20-Klk9OGwhcdkI9KciRV0.roa (hash: sjuZ/oHVjNQGQYCn+VBpDH3q6eM0bSoLTp3EsyAorJA=)
                          2: 5p2aHwzMk-WKPqbEYPmTVeyaFz8.roa (hash: dXwTJ57WUmfvolezC+8tQF/dtDddp7UWvZtKPASf84o=)
                          3: 9Vrbw_O4xKekP96wP7Th2eNuRYI.roa (hash: IV5izac1mW6bg49QkQffAoeLf5HNafZtYdLzjJd/NaY=)
                          4: BkC40mbaOV_h_YwTP9f-9NLfy-Q.roa (hash: 4vfqykfujOiIEaQCahXyp7UqTA/5c3kGM0M/jQ0Yj54=)
                          5: F0IbAy4DBD4R1tpVF-eK43aChYk.roa (hash: g2J1Nb8U1OTOvAcJ8xV0/WW6sKBzgLg58jRt1vEU/0g=)
                          6: FFUxdMgztw8KU4ii1lp3b1pBnRA.roa (hash: LwYGFEmYTY79quz9OK5Bty21hAC9lxI7Jq2RGp5y3k8=)
                          7: G61IGV-qVysE3AlGnQSF9E763kc.roa (hash: 5T8UszbYAghLZWYkvCSK1dY/hveIiGYcEnE0LvucPtE=)
                          8: HcMkileo_0EF6RlmVfBf3JEdfPY.roa (hash: k7v3xuvK+zQ+5XYDIN3coFnyw3zL/+ws1ruHBjTbYgc=)
                          9: JxTJlWHniZNfk1trJwieQsRUeiQ.roa (hash: zzMqkyf/W/K6fVGFV5UK4srsQK4I9Y31GE3w4mOIyjA=)
                          10: NHID-Emf-Ba4m6BHNFBPaXhMzAA.roa (hash: ePERwTxsWkIh1mJKy/UAXUHj01oDPoU24Hn8snDPMzw=)
                          11: Nw9oUx1P_ZziFM706koS9GS7FJw.roa (hash: LBN1Ui1EWKIEFENTjLzYQ+tIWeEdr58O2UDEZN8eSZs=)
                          12: OUxi84rSCt4rIkDW_E2bYjNHR9A.roa (hash: JbDVI82K0g08ZUcKrEB2J9NG8jJj3qhjQN44+K39KOM=)
                          13: U8N9V5f6g17PGUfG184qCViLX5M.roa (hash: PzBiN1lWfFbDU85F/jIvz75WIsJRfnh+fMMH8DJLyug=)
                          14: UbSboN2GFRKGGNUBWcsPO16e5iY.crl (hash: sG3ObbFkEDrl7SC4M2Z16afRjktFvu++laCrSbMFQ84=)
                          15: WToKy8rJrvfp8-TBSiHkACiFJsQ.roa (hash: PV5YjtO/rMXFglaUhhnfQYN+zHAXqH37jd2cH6GeN74=)
                          16: WxLhQW-BYYj1MCIdzCtRB1evZGI.roa (hash: 487fbb0witkUDry4Pl1JzYBOvcJK9C5a1Rd+loszMwM=)
                          17: X-Q41gqlyKp4za2e1qcGXN9bmuU.roa (hash: gx+B7/gZYkitU+NxHVbHVLXPXkx4B2/aXajETAf7WGQ=)
                          18: XE02NZ7cs5gcBiEgp1t5eVDLDFo.roa (hash: kfZgjRyxeRbZqiAf7Y3WaC8aF4/f1MDEJ1quVFwvGIw=)
                          19: YtYh52858tvFRXRrF4Yoq2mt-1U.roa (hash: IooLs7GIFuYVqgToYsrqhBFdbWxeSAM2xbljnr1et+8=)
                          20: jJwVz-Jdedm4kofDDixamlf1mnE.roa (hash: MEYCS8IqIgHLKEjQoiORKaEcoLqxNfD5TbE+WgHYD1I=)
                          21: lJnE2FxAsaNI1_tB-ERuVEpfT_o.roa (hash: voyo3MylmMcwFVFJkWMx676jBOzgA77ypSsSouZX6gY=)
                          22: sp4eXDrFmErVZ6Dk1aXUWw9GmSw.roa (hash: LanOB0N6OiW0u1qpF+oiRub4pPCTxR2tdcMDM8mFHK0=)
                          23: v1HgD32Ce7-tySs2xjX-vUslX0o.roa (hash: DNjNNi0jFs6bj2lpBoIBKwXpxJpmQcT0MSPaBOT0gg4=)
                          24: wQuW_pYlQhUlhxpMGjvGhk-E3Rs.roa (hash: ETbmRHmUC7VEMkNQEHJOn+HgWBa12TwulXvbhp08CPQ=)
                          25: we1HhcHWphYj56bx4pbUty8AfoA.roa (hash: 1PIXugNWGKX8aBPaeifcn9qP+hmNxyZInT/FeXXmQsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:6b:60:ed:c1:13:0f:91:88:ca:3f:ee:a6:52:b9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Mar 26 04:33:38 2026 GMT
            Not After : Mar 27 04:33:38 2026 GMT
        Subject: CN=702279792ea60fc2f1b90cb540ce87437606e823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:2a:0b:9f:a2:16:c5:d7:cd:a5:b1:84:6f:
                    1c:73:b2:01:7e:cd:db:0c:3c:7a:12:2a:2d:af:10:
                    ee:4f:00:ea:98:b6:71:14:56:41:62:e2:c3:6b:32:
                    b1:30:d3:a2:f6:55:98:de:a1:cf:74:d4:df:53:16:
                    6a:ed:94:83:98:6c:db:8d:49:84:e8:a9:fc:ac:8f:
                    d6:47:d6:ea:96:89:46:bf:e6:21:5f:a7:d5:92:2f:
                    28:32:c5:34:30:5a:88:20:f6:1b:53:77:9f:0e:8f:
                    d3:c5:17:23:75:e2:5a:a2:46:01:e2:35:39:6e:32:
                    7d:37:30:cb:6e:8e:6e:98:dd:fe:2b:ef:6d:8e:b8:
                    11:a7:d3:69:da:c6:aa:77:2e:f6:a8:a7:05:9e:1c:
                    08:30:01:52:bd:ed:21:27:ab:e8:f0:ca:57:14:31:
                    ce:75:50:91:86:75:a5:49:c5:16:b6:93:1e:ca:b1:
                    57:9a:92:e9:f3:c5:6a:c6:6d:29:4c:78:17:2e:ad:
                    e5:6a:d0:2e:fe:6f:3d:0e:48:76:0c:1e:e0:6a:05:
                    cf:f9:2f:ae:ca:0a:45:32:20:f1:3a:c8:ce:e2:4f:
                    b9:4f:d8:e0:86:a1:a3:9a:bf:ec:11:9c:87:84:93:
                    37:d7:5b:7a:1e:9d:35:81:a4:eb:b3:c2:28:ce:a5:
                    4f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:22:79:79:2E:A6:0F:C2:F1:B9:0C:B5:40:CE:87:43:76:06:E8:23
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b8:84:23:11:9b:7c:0d:05:bc:0e:a5:ab:d0:67:d2:8a:38:
         6f:d7:18:a2:85:62:b8:87:65:e3:62:00:5d:97:96:c0:99:1a:
         15:31:71:15:fa:20:da:af:a0:cf:8d:33:6e:8f:58:aa:bf:42:
         45:c6:f9:b0:29:2c:29:d4:c7:21:a2:65:49:ac:ef:44:e3:c7:
         c6:77:7b:24:8d:1f:06:b4:35:05:20:b1:c5:0e:96:d9:a5:d2:
         59:78:f7:61:f4:b1:1d:54:9f:06:33:28:7e:09:a6:71:69:3f:
         6a:21:a3:5a:50:64:d4:69:e0:3a:63:81:66:bf:67:d1:a3:06:
         41:d7:b3:89:ca:ba:e8:83:c8:3c:8f:89:40:2d:62:e6:36:e8:
         51:a9:76:a4:38:0f:62:f0:e3:11:9d:22:a0:b5:bd:b3:a6:7d:
         d1:d0:e6:cb:95:9f:87:0a:f1:84:a3:b6:d4:c7:ef:61:90:26:
         d1:d2:5f:de:8f:c7:c8:40:bc:df:3a:6c:4b:57:e3:3a:cf:83:
         03:20:6f:74:10:ba:cd:56:24:f8:3d:00:82:56:ea:5b:4b:ea:
         b8:5f:40:d8:b9:33:79:f1:b4:69:59:20:17:27:d5:3c:2e:9c:
         6f:c1:3a:4a:69:00:4c:92:73:c6:7d:ee:02:7b:d5:2d:7d:3e:
         41:b5:c1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:32 2026 by rpki-client