Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
File:                     Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft (raw, json)
Hash identifier:          lXJqqzGsd/yXH8pr4XWcXG2x1czT7jRUkvkTqeQo4vw=
Subject key identifier:   2D:63:0A:5E:B7:80:22:D3:DF:96:E0:BB:CF:64:3B:43:C6:22:BA:C9
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Certificate issuer:       /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial:       019D2816A8C37CAB665CE58B69FC32BB4B1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
Manifest number:          08A2
Signing time:             Thu 26 Mar 2026 03:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:06 +0000
Files and hashes:         1: Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl (hash: +WOHLPVtnv16QqrpmObznGpG+ZeZqBkb/clsTNybQh4=)
                          2: cYBrnaocLjA_DaHgp5BukHetZEw.roa (hash: WSYQBuYEacORy4ZqYo8p12iSgdVpFErki2QNc5JX+Q8=)
                          3: nfAlOJt-tJuBQ6TVdWgraK4LPcs.roa (hash: u0sCdtCOmFGO0vVCgVhH5vis+INdwLq690ISXBM58Ak=)
                          4: re1kMr4ZO4EcntSxzQLItfZHji4.roa (hash: pb/ZpVFwMQItfSjJxD0Eukfy73dUuFN63jAongafzPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:a8:c3:7c:ab:66:5c:e5:8b:69:fc:32:bb:4b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
        Validity
            Not Before: Mar 26 03:01:06 2026 GMT
            Not After : Mar 27 03:01:06 2026 GMT
        Subject: CN=2d630a5eb78022d3df96e0bbcf643b43c622bac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:36:c6:16:db:04:86:d5:5b:10:e0:e8:3b:
                    03:de:54:13:e1:db:71:0e:25:c7:47:09:2d:fa:08:
                    87:3c:37:b6:b6:7f:b8:e2:93:2e:b0:82:4d:0b:37:
                    18:23:31:ce:4d:5d:af:2e:b2:6a:20:07:9f:0d:69:
                    ef:2f:39:42:3d:38:05:00:a7:1f:95:9c:98:7e:a6:
                    7b:12:de:78:fd:9d:8b:55:f6:d3:26:49:4e:2f:c4:
                    e0:f8:83:4d:cb:83:ab:3a:f2:3f:e2:c6:8b:aa:0e:
                    22:e1:5a:ed:78:5b:f4:b6:5f:0e:ac:73:94:82:1d:
                    19:ab:27:2c:b4:61:19:12:4a:13:6b:fd:62:8d:b0:
                    c9:6e:03:2f:c9:18:91:70:53:c9:2b:59:b9:9d:b6:
                    a9:15:3c:85:9f:8b:60:1a:1b:8d:df:9c:02:a4:f5:
                    4d:a7:a1:7d:73:b6:6f:45:28:06:b5:ca:fb:37:52:
                    dc:b8:b3:0b:6c:70:76:68:4c:a5:fd:96:17:10:f1:
                    da:97:1d:ab:93:50:3f:83:15:5a:68:13:ef:36:a3:
                    31:f5:ed:1a:64:68:cd:90:f5:03:9b:53:d6:0f:2a:
                    4b:15:b9:c4:a3:b4:4d:b8:7e:7a:ad:d6:51:93:7d:
                    cc:8d:7d:08:93:f1:24:21:7c:84:5f:f3:db:31:a6:
                    0c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:63:0A:5E:B7:80:22:D3:DF:96:E0:BB:CF:64:3B:43:C6:22:BA:C9
            X509v3 Authority Key Identifier:
                keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:69:d7:0d:76:1b:6e:9e:8a:25:85:2f:e0:f2:8b:eb:e7:ac:
         82:54:b0:31:69:7e:9a:44:84:25:82:83:ff:ac:51:2f:7c:f1:
         9c:4b:2d:90:98:28:85:d4:41:ca:ad:03:69:70:59:7a:39:68:
         3e:b9:09:d3:4b:85:e9:e8:8a:9c:e4:93:9f:83:1e:2e:3b:dd:
         2d:ca:9d:8f:30:16:f2:65:49:ae:f2:5a:be:4f:3c:e4:ac:86:
         1d:7c:f5:85:f8:e0:15:6c:90:54:1b:40:57:d2:ba:e0:70:bc:
         a8:7d:42:95:06:9f:57:a3:81:ca:60:80:65:76:b4:72:75:8f:
         33:2c:a2:36:8e:eb:ac:c2:77:9b:43:eb:fc:0b:0f:6c:ff:48:
         8f:1f:30:b1:2c:7d:ed:ec:56:06:bc:ce:42:9b:bf:de:22:ff:
         e4:bb:f1:5e:5b:84:91:7f:23:13:fb:13:00:15:89:f3:e8:b4:
         f2:04:d6:47:85:0c:9d:66:4d:7f:5c:f2:33:d2:75:2c:e2:3b:
         04:94:36:84:ee:51:f3:53:f9:0d:14:24:36:19:cc:29:4f:f1:
         aa:92:68:f2:70:4b:cf:ad:98:15:5f:3e:d2:d7:04:22:f1:ef:
         35:e9:77:c0:2e:2b:06:da:89:e4:4b:37:f6:6e:4b:86:c2:7e:
         b8:d9:1b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:31 2026 by rpki-client