Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File:                     UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier:          kzRJaztcMi1F8IkPT1+KTRbEc5R+zhecWCvkEV7GltU=
Subject key identifier:   D9:63:83:CE:F3:88:13:86:87:09:E3:CD:A3:82:BA:8B:14:DE:38:0F
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer:       /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial:       019F954A315C69197B8A9D282D79CF705B68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number:          0D36
Signing time:             Fri 24 Jul 2026 18:01:35 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:35 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:35 +0000
Files and hashes:         1: AL0W8JafgnmPnnZBBZOLnMOElHU.roa (hash: W7hf6DI9RRqdDA51Pz50C4flOR9nQCePHPNNbBEGwT8=)
                          2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: ReLE9bNHUh/VURheVpiXKwhmDuOCsjN4d8Auhz4Vdfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:31:5c:69:19:7b:8a:9d:28:2d:79:cf:70:5b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
        Validity
            Not Before: Jul 24 18:01:35 2026 GMT
            Not After : Jul 25 18:01:35 2026 GMT
        Subject: CN=d96383cef38813868709e3cda382ba8b14de380f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:50:ff:a9:5f:ee:4c:44:76:c9:a3:66:03:4c:
                    3d:b5:f1:11:73:0a:85:d7:54:34:c0:37:1e:bd:dd:
                    a4:98:96:e1:aa:4d:71:51:cc:84:13:a8:43:c0:57:
                    20:fe:75:6b:b2:21:f6:f8:d6:1d:de:b8:98:76:e9:
                    79:9e:a6:bd:8e:56:bc:a1:e6:6b:a4:fc:1c:93:4f:
                    3b:72:56:f1:9c:99:45:88:fe:a4:39:22:c5:65:04:
                    c8:a7:10:d6:98:ec:38:5e:08:d9:4b:de:c9:f3:90:
                    57:b6:82:49:3b:21:c8:7f:af:2f:51:f7:58:d6:ae:
                    05:27:62:c3:ba:53:87:d5:e3:6d:a4:e1:46:9b:ec:
                    f2:25:1f:24:97:ae:34:6c:75:fa:52:3e:4f:4c:29:
                    c2:1a:5e:cd:de:fc:7f:1a:0c:9f:1f:39:fe:b1:94:
                    b5:17:12:2d:60:e7:51:ec:9b:70:84:a5:35:9f:f1:
                    95:ea:f0:c1:c9:1b:60:9c:1c:eb:18:ed:75:9d:88:
                    50:fa:8c:3b:aa:3e:19:68:ba:0a:8e:77:43:af:d3:
                    1b:66:3e:36:c7:dc:5c:ef:0c:a5:bf:40:03:93:8d:
                    d8:a4:cd:13:eb:0b:a3:70:ca:81:7e:80:08:cf:4a:
                    f2:9a:e7:fb:f9:71:81:9b:8c:ad:41:3d:bd:1f:68:
                    e3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:63:83:CE:F3:88:13:86:87:09:E3:CD:A3:82:BA:8B:14:DE:38:0F
            X509v3 Authority Key Identifier:
                keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:57:16:4e:56:3e:44:86:15:8d:9e:41:5a:92:04:dd:a6:3c:
         47:43:05:b7:68:5b:4f:53:47:a9:e3:bd:69:4d:af:57:b6:e9:
         15:6f:d4:79:ab:aa:7f:89:5c:ac:9d:d3:ed:8c:2b:a1:a4:c0:
         80:f2:d0:1c:d7:6b:37:58:e9:16:9f:de:7f:71:27:b9:f7:21:
         93:99:8f:b4:b9:e4:b9:e5:99:a6:27:7e:69:56:a5:b5:89:5e:
         53:f0:91:70:10:a8:60:a2:b4:a0:e2:22:1a:81:c9:5e:1f:68:
         b8:88:5a:b1:6c:35:77:1f:ed:4d:9c:2b:e2:4f:94:fd:a6:eb:
         bd:fa:d6:5a:03:76:da:21:19:78:32:e1:b2:90:39:ac:85:1a:
         41:e9:23:67:28:c0:b2:2f:8e:37:1e:9f:64:4d:69:4c:58:e8:
         dc:04:f9:c2:98:43:a8:59:85:11:0c:f6:5a:19:24:87:e6:ce:
         87:f5:17:67:9c:07:76:01:f9:30:a4:25:73:c0:b6:0d:23:36:
         9f:43:bc:16:27:fb:d6:9e:62:4d:9e:7f:f6:59:b1:41:fe:83:
         8a:25:4f:3f:ca:01:fa:7e:1d:e6:51:93:73:15:83:31:22:c9:
         a0:6d:ef:1a:59:f7:86:c6:cf:81:09:f0:ae:49:dc:7f:de:7a:
         df:ca:f1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:05 2026 by rpki-client