Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File:                     gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier:          KV8PrOnmbw+l8R+fWLy815kklEAOuL74PMHtgKM/mOw=
Subject key identifier:   DF:1E:7D:C4:F3:5C:E3:C3:5E:50:B0:F7:99:E1:EA:F2:61:39:C2:FB
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer:       /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial:       019D254C5A8EAAECF967CEE73FD084B38ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number:          04A8
Signing time:             Wed 25 Mar 2026 14:00:54 +0000
Manifest this update:     Wed 25 Mar 2026 14:00:54 +0000
Manifest next update:     Thu 26 Mar 2026 14:00:54 +0000
Files and hashes:         1: T_p7BFSEu2MaqBtsnhljtCR6GqY.roa (hash: FbyU0CKxDGTVudOk7Dftp/zF2aSEdUuIHth2Lxh5jb0=)
                          2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: lTRa9Hf86nHgbouKIBPmVVIoDdmvU7DdmgdWiOka1Nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:5a:8e:aa:ec:f9:67:ce:e7:3f:d0:84:b3:8e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
        Validity
            Not Before: Mar 25 14:00:54 2026 GMT
            Not After : Mar 26 14:00:54 2026 GMT
        Subject: CN=df1e7dc4f35ce3c35e50b0f799e1eaf26139c2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:85:a5:cf:d7:ea:7c:ad:ec:10:51:bd:1b:
                    b6:c4:10:e1:ee:14:97:dc:f6:e5:af:21:f9:a4:30:
                    c1:e8:38:10:04:44:b2:74:20:4d:72:f8:40:5c:78:
                    dc:cf:36:28:e2:ca:77:73:a5:21:10:43:10:6a:8a:
                    bb:a0:ba:35:0a:e8:a4:46:69:95:f6:7f:2a:50:1d:
                    9a:ae:d4:72:d6:5f:c8:b0:fb:78:75:b7:d3:f3:f7:
                    39:24:b8:df:dc:0c:77:04:ce:3b:23:32:9d:f5:c8:
                    31:82:75:3e:7b:79:83:9e:0b:65:09:0a:ff:12:2d:
                    68:d8:77:6e:07:e7:93:94:f6:81:8c:59:86:05:1e:
                    2d:01:53:56:9a:83:ec:d8:35:6e:7b:78:19:97:32:
                    b5:2d:9e:43:a8:cd:71:6b:17:c9:9a:7e:21:31:f2:
                    4b:a3:89:1b:96:aa:4b:67:09:df:e8:23:fa:af:af:
                    2f:93:5c:c7:44:50:b0:0b:6f:1f:33:9d:33:d5:f3:
                    43:bd:b7:0f:05:06:29:2a:f2:ef:e3:71:22:1c:20:
                    0d:6d:20:99:22:e4:36:b7:da:67:da:e0:17:af:98:
                    88:34:30:c4:1e:77:76:0b:60:96:48:9b:26:83:21:
                    92:fe:8f:55:03:b4:c3:b6:e0:d5:9c:1f:e4:c5:47:
                    82:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1E:7D:C4:F3:5C:E3:C3:5E:50:B0:F7:99:E1:EA:F2:61:39:C2:FB
            X509v3 Authority Key Identifier:
                keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:84:26:0f:51:56:ab:ec:1e:a9:1a:ea:31:03:44:2c:18:12:
         dc:87:11:ce:80:a4:58:9d:fb:0d:fb:12:d1:79:cf:21:1e:fc:
         50:1e:35:b6:59:2c:ff:1b:f3:66:ee:a7:d5:1d:8f:22:28:af:
         d4:59:01:11:d3:6a:c7:01:39:00:1f:dd:4a:5a:23:96:a6:49:
         c2:2e:d2:fd:a3:1e:68:19:68:60:6d:1a:bc:e1:e5:c2:85:63:
         28:30:00:f2:aa:6f:84:42:2f:b8:ca:96:de:f6:ed:38:e7:b3:
         46:74:4b:e9:94:a6:03:bc:ce:a4:31:93:80:6a:9c:02:ee:b1:
         c2:22:e8:f6:e3:f5:8a:83:2d:0e:86:34:10:6e:f3:bb:7a:ce:
         0f:0e:09:b4:30:8a:69:e2:fa:cf:94:9c:e3:88:47:59:5d:b8:
         3b:01:d0:13:3f:eb:a8:77:77:c1:b1:47:41:97:06:6f:8f:0f:
         56:17:dc:4c:a2:fd:af:3a:78:e2:8c:0e:70:2f:07:79:de:34:
         48:da:2b:2b:c5:b9:67:a0:0a:e4:65:94:bb:d5:60:84:f6:4f:
         f6:18:af:9a:13:56:81:13:92:d5:5f:37:44:44:2b:49:06:59:
         26:d5:b3:48:09:03:46:eb:45:cc:6b:b5:5e:b5:57:45:48:57:
         86:b5:c0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:46 2026 by rpki-client