Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
File:                     UbSboN2GFRKGGNUBWcsPO16e5iY.mft (raw, json)
Hash identifier:          pXEecIQetjpsvXjw8XjKN5rmejB05mpxlEKMoSSzpNM=
Subject key identifier:   6E:CA:1E:88:E6:2D:CE:03:40:08:6B:9C:F6:EF:F8:05:8F:4F:E9:7B
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       01A0CFA3FFABA083B852D790E574FCEB2D4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
Manifest number:          1AC6
Signing time:             Wed 23 Sep 2026 19:00:26 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:26 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:26 +0000
Files and hashes:         1: 4o-bt20-Klk9OGwhcdkI9KciRV0.roa (hash: sjuZ/oHVjNQGQYCn+VBpDH3q6eM0bSoLTp3EsyAorJA=)
                          2: 9WyEzQIjKdyy934SONiQPqcf53Y.roa (hash: PRztYbhnuer59pLYZZm6haITyZSS1wptsUQ7sv9ibfY=)
                          3: BkC40mbaOV_h_YwTP9f-9NLfy-Q.roa (hash: 4vfqykfujOiIEaQCahXyp7UqTA/5c3kGM0M/jQ0Yj54=)
                          4: F0IbAy4DBD4R1tpVF-eK43aChYk.roa (hash: g2J1Nb8U1OTOvAcJ8xV0/WW6sKBzgLg58jRt1vEU/0g=)
                          5: FPpM1jpMr9YhV1Jpn2Dn2Ifigh0.roa (hash: x0Kpsb/5E0KHW72ZLyrtY6oW9G6SgP749gOKM2vMQMk=)
                          6: G61IGV-qVysE3AlGnQSF9E763kc.roa (hash: 5T8UszbYAghLZWYkvCSK1dY/hveIiGYcEnE0LvucPtE=)
                          7: JxTJlWHniZNfk1trJwieQsRUeiQ.roa (hash: zzMqkyf/W/K6fVGFV5UK4srsQK4I9Y31GE3w4mOIyjA=)
                          8: Nw9oUx1P_ZziFM706koS9GS7FJw.roa (hash: LBN1Ui1EWKIEFENTjLzYQ+tIWeEdr58O2UDEZN8eSZs=)
                          9: OcuQVorUCHi5WKUI39CmfdVdoWA.roa (hash: vcMjpebS0VIkKN2bsCeCpSkVlxV67avU5muisGEFZqU=)
                          10: P_DAL_RkexqRSvFQrwhEhp9MXMY.roa (hash: MqV3Ow1zmHe8yhtW+tQR8NH8pXQiTG75YigD3Gpreu4=)
                          11: Qt101tukrTYayNyc9qbkl_Xaoi0.roa (hash: 18hW/yEhJGNwA42TvFvKQjrARb9o7lg2SaGcRPVqWrI=)
                          12: U8N9V5f6g17PGUfG184qCViLX5M.roa (hash: PzBiN1lWfFbDU85F/jIvz75WIsJRfnh+fMMH8DJLyug=)
                          13: UbSboN2GFRKGGNUBWcsPO16e5iY.crl (hash: DMx3IAf1p3u8qz3yFe2/SmOdHf0t6dYmLFBdPJnaP6o=)
                          14: WToKy8rJrvfp8-TBSiHkACiFJsQ.roa (hash: PV5YjtO/rMXFglaUhhnfQYN+zHAXqH37jd2cH6GeN74=)
                          15: WxLhQW-BYYj1MCIdzCtRB1evZGI.roa (hash: 487fbb0witkUDry4Pl1JzYBOvcJK9C5a1Rd+loszMwM=)
                          16: YtYh52858tvFRXRrF4Yoq2mt-1U.roa (hash: IooLs7GIFuYVqgToYsrqhBFdbWxeSAM2xbljnr1et+8=)
                          17: bSU8P3Ab5BhC52s8mvo6Gjhap2I.roa (hash: Y7nzUpJ3HulC8mXXETILgbKfFwIyvw2y6s1V4bxMQac=)
                          18: jJwVz-Jdedm4kofDDixamlf1mnE.roa (hash: MEYCS8IqIgHLKEjQoiORKaEcoLqxNfD5TbE+WgHYD1I=)
                          19: sp4eXDrFmErVZ6Dk1aXUWw9GmSw.roa (hash: LanOB0N6OiW0u1qpF+oiRub4pPCTxR2tdcMDM8mFHK0=)
                          20: v1HgD32Ce7-tySs2xjX-vUslX0o.roa (hash: DNjNNi0jFs6bj2lpBoIBKwXpxJpmQcT0MSPaBOT0gg4=)
                          21: we1HhcHWphYj56bx4pbUty8AfoA.roa (hash: 1PIXugNWGKX8aBPaeifcn9qP+hmNxyZInT/FeXXmQsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a3:ff:ab:a0:83:b8:52:d7:90:e5:74:fc:eb:2d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Sep 23 19:00:26 2026 GMT
            Not After : Sep 24 19:00:26 2026 GMT
        Subject: CN=6eca1e88e62dce0340086b9cf6eff8058f4fe97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:61:b8:be:00:9c:27:c6:96:7a:8d:66:a5:a8:
                    d3:ce:7e:16:08:ca:e9:30:78:ff:83:73:c7:1f:e6:
                    0d:94:a2:fd:c8:a8:4b:d2:5b:34:44:e8:14:51:ac:
                    66:b5:26:e7:31:16:df:da:ec:ed:4d:2d:63:9a:e1:
                    af:ba:73:15:a0:9d:f5:29:46:23:7c:1d:68:7c:67:
                    68:3e:af:9a:c5:93:67:86:4c:c3:0a:15:c6:c5:82:
                    0b:68:71:c4:d2:82:fc:30:8f:04:06:76:4f:d7:a3:
                    57:f1:eb:11:c5:99:c1:db:f5:fe:1b:f8:cd:3b:cf:
                    26:ec:54:c3:3a:b9:2c:0e:fb:5c:7b:9a:1d:b0:48:
                    30:fe:0b:a8:33:df:7c:c6:37:84:fc:48:02:64:62:
                    d4:0c:63:9c:86:4c:ae:4b:2e:b4:55:8f:8e:93:52:
                    a6:13:82:1f:73:15:c5:22:4e:b4:51:5f:9e:fd:35:
                    42:ba:44:4f:cc:0b:8a:75:f5:b5:ce:2f:c6:72:c5:
                    73:66:f2:d5:b8:0c:4e:cb:42:47:f8:67:7a:4d:61:
                    e9:cc:e6:3b:a0:eb:17:ff:72:d8:b4:db:09:1a:92:
                    e5:7f:f2:ee:ed:f5:6b:87:43:e5:92:c5:b4:2b:90:
                    25:99:72:66:db:27:6a:b1:be:32:35:78:7a:b6:f4:
                    49:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CA:1E:88:E6:2D:CE:03:40:08:6B:9C:F6:EF:F8:05:8F:4F:E9:7B
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:47:74:d3:b7:97:de:f4:c9:91:a6:39:44:47:4e:ec:3c:c9:
         a6:71:de:72:03:4a:5d:1a:80:30:3c:8f:05:6a:9f:0c:ff:19:
         5c:cd:ca:87:76:92:e2:cb:9a:55:42:18:78:80:4a:96:b2:77:
         07:4e:30:06:ef:bb:e4:c4:67:7c:76:ea:72:89:69:8f:d4:d8:
         4f:f6:6b:8d:b0:2a:6a:cb:ee:e4:86:1a:0f:7e:61:02:71:77:
         97:53:41:ad:c8:3f:f9:32:bc:62:9e:65:dd:57:42:29:29:d0:
         73:86:bd:36:e0:4c:85:f4:ab:fb:fc:95:e4:48:ac:02:d8:05:
         fc:d7:f6:04:10:fd:aa:00:d2:e2:0e:95:1d:e1:3e:86:cb:f0:
         12:80:27:67:de:21:1d:a7:3c:ff:81:39:8e:7e:b6:48:f0:37:
         50:a2:30:85:a7:0b:69:69:4d:0b:65:b1:e9:f2:ee:c0:dc:b2:
         a3:1f:75:c4:4e:c9:f8:73:18:9c:f2:a5:af:b4:58:aa:f4:55:
         be:f6:0f:a6:71:e6:25:53:ea:9c:7f:9c:9d:38:f3:cb:08:1f:
         67:07:5f:76:f4:3f:44:e9:7a:c6:6d:f0:5a:fd:33:c9:fb:76:
         9e:d0:77:67:a9:8a:6b:20:6b:08:24:14:aa:da:29:33:63:fe:
         86:db:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:16:06 2026 by rpki-client