Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File:                     UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier:          jmxLbEnUnjn68dvilLGBORjFo228BYP11lO+Lu/D8R0=
Subject key identifier:   3A:EE:6B:20:32:97:A3:6B:B0:DC:E6:70:C4:ED:B4:E9:7B:87:5B:BB
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer:       /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial:       019E22805225FBE0445571BBE3E0658D9E94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number:          0C76
Signing time:             Wed 13 May 2026 18:01:35 +0000
Manifest this update:     Wed 13 May 2026 18:01:35 +0000
Manifest next update:     Thu 14 May 2026 18:01:35 +0000
Files and hashes:         1: AL0W8JafgnmPnnZBBZOLnMOElHU.roa (hash: W7hf6DI9RRqdDA51Pz50C4flOR9nQCePHPNNbBEGwT8=)
                          2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: mFCOoFBRHF9Eng9NeWAnksm50avBgSsz3QXQXfw4Pvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:22:80:52:25:fb:e0:44:55:71:bb:e3:e0:65:8d:9e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
        Validity
            Not Before: May 13 18:01:35 2026 GMT
            Not After : May 14 18:01:35 2026 GMT
        Subject: CN=3aee6b203297a36bb0dce670c4edb4e97b875bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:9c:aa:60:05:f8:93:b5:65:fc:5d:5f:5a:
                    25:7e:7e:1c:3c:b6:3c:1e:03:9a:7b:70:64:19:c5:
                    b1:0b:e2:fe:e5:22:f6:20:b3:44:18:17:9c:44:54:
                    41:af:03:f2:e6:c7:a8:12:b4:ab:5b:9f:74:a8:f1:
                    86:ab:1a:df:1f:2c:62:14:3d:b3:56:fd:e4:0f:10:
                    40:71:bf:6b:c6:e0:10:d9:49:ee:6a:0e:14:40:c1:
                    d5:6a:e5:87:c5:c7:b8:eb:65:c0:3b:29:db:89:b6:
                    ee:9a:e5:88:e7:f7:e7:ae:6a:e4:29:03:db:a1:86:
                    30:82:2f:5f:2c:c3:b6:db:b9:79:b4:dc:91:f7:c4:
                    12:70:32:15:1f:d7:05:38:3c:69:20:b5:df:dd:b9:
                    7c:96:bf:43:d4:5d:5b:a3:e1:6e:82:13:f1:eb:8b:
                    75:7e:6d:32:fd:0f:4c:22:8a:fe:9b:93:c2:81:93:
                    91:a4:4f:d5:5e:38:d5:41:41:bb:b2:c5:4d:2c:c4:
                    5d:04:39:b6:26:71:48:13:1f:77:5a:b1:f9:fe:f4:
                    56:bd:de:e6:9b:34:4b:9e:5e:8b:98:c8:7d:58:35:
                    9f:d6:dd:06:94:92:66:a7:da:73:03:6c:ad:af:d1:
                    0e:77:3f:fe:93:8c:e3:b8:0c:54:e6:7c:e2:64:bc:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EE:6B:20:32:97:A3:6B:B0:DC:E6:70:C4:ED:B4:E9:7B:87:5B:BB
            X509v3 Authority Key Identifier:
                keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1c:bb:3d:f3:32:82:48:e2:e8:45:37:53:6d:bb:68:6e:1e:
         88:a6:b4:fb:16:42:f3:a2:47:9f:a7:c9:9b:86:e4:48:9f:1c:
         ed:b5:63:27:9d:5a:00:36:07:7e:f4:fa:7b:2b:18:68:53:3a:
         79:c7:28:4f:6e:f7:98:df:55:c8:d8:1a:a9:5b:8e:34:d0:32:
         ee:c7:69:ff:cb:0b:81:d9:0b:c2:d0:57:da:46:c1:a3:d8:19:
         3b:8b:bb:0a:3f:3c:1f:df:f2:b4:b3:01:96:65:b1:04:20:5d:
         b6:ca:c3:77:43:7d:00:0b:60:d5:9c:11:8a:e5:32:da:56:49:
         ef:58:8f:44:89:01:fd:69:05:02:da:8b:65:90:95:0c:13:67:
         20:12:e8:1c:f8:af:06:05:9e:e5:d9:f6:bc:a6:86:81:7d:c0:
         87:1c:72:e8:71:7f:29:ef:3a:aa:45:49:8c:c3:28:11:80:fe:
         77:1b:87:4d:21:28:9e:87:03:ab:3d:2f:db:4f:8a:2d:2e:93:
         b6:fe:40:2b:dc:06:25:96:21:f6:7f:05:0d:48:00:2c:01:e5:
         c4:57:f7:cb:de:aa:d6:ed:6c:ec:4d:25:08:b1:e1:58:b1:c0:
         cb:95:bf:83:a4:14:84:17:87:57:b6:5c:fb:fe:0b:da:4d:6c:
         e3:24:96:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4igFIl++BEVXG74+BljZ6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjM0ODA0ZjliNjZhNzFjMjQ3MjViMmQ3N2Y5NDkxMTIx
ODVlYjEwHhcNMjYwNTEzMTgwMTM1WhcNMjYwNTE0MTgwMTM1WjAzMTEwLwYDVQQD
EygzYWVlNmIyMDMyOTdhMzZiYjBkY2U2NzBjNGVkYjRlOTdiODc1YmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI6cqmAF+JO1ZfxdX1olfn4cPLY8
HgOae3BkGcWxC+L+5SL2ILNEGBecRFRBrwPy5seoErSrW590qPGGqxrfHyxiFD2z
Vv3kDxBAcb9rxuAQ2Unuag4UQMHVauWHxce462XAOynbibbumuWI5/fnrmrkKQPb
oYYwgi9fLMO227l5tNyR98QScDIVH9cFODxpILXf3bl8lr9D1F1bo+FughPx64t1
fm0y/Q9MIor+m5PCgZORpE/VXjjVQUG7ssVNLMRdBDm2JnFIEx93WrH5/vRWvd7m
mzRLnl6LmMh9WDWf1t0GlJJmp9pzA2ytr9EOdz/+k4zjuAxU5nziZLxUSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDruayAyl6NrsNzmcMTttOl7h1u7MB8GA1UdIwQY
MBaAFFGzSAT5tmpxwkclstd/lJESGF6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYt
NWE3Mjg5ZWY1ZjYzLzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYtNWE3Mjg5ZWY1ZjYz
LzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhy7PfMy
gkji6EU3U227aG4eiKa0+xZC86JHn6fJm4bkSJ8c7bVjJ51aADYHfvT6eysYaFM6
eccoT273mN9VyNgaqVuONNAy7sdp/8sLgdkLwtBX2kbBo9gZO4u7Cj88H9/ytLMB
lmWxBCBdtsrDd0N9AAtg1ZwRiuUy2lZJ71iPRIkB/WkFAtqLZZCVDBNnIBLoHPiv
BgWe5dn2vKaGgX3Ahxxy6HF/Ke86qkVJjMMoEYD+dxuHTSEonocDqz0v20+KLS6T
tv5AK9wGJZYh9n8FDUgALAHlxFf3y96q1u1s7E0lCLHhWLHAy5W/g6QUhBeHV7Zc
+/4L2k1s4ySW/w==
-----END CERTIFICATE-----
Generated at Wed May 13 21:41:19 2026 by rpki-client