Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File:                     ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier:          61uPu/VS9LuaJfYllqlxYucoI+ni0a8UXZ04d0Rh+KY=
Subject key identifier:   D3:D9:93:17:D4:0C:1D:1A:EF:35:57:C2:80:8A:9E:1D:BC:B1:82:C6
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer:       /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial:       019E1EA31ED2F820378D12477037F7D4A538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number:          0AD6
Signing time:             Wed 13 May 2026 00:01:07 +0000
Manifest this update:     Wed 13 May 2026 00:01:07 +0000
Manifest next update:     Thu 14 May 2026 00:01:07 +0000
Files and hashes:         1: 0UnyCR-s9iVj-44nCnj3n-e4xtA.roa (hash: qIADwbji8igygxrgQjLDhHXbAfWGtCs+G3X3x04AbP0=)
                          2: MY0oyyxJxhBaxV6e35Jj6RwVRN4.roa (hash: b5AkjRiP8AjbeAnZmdI+p2iRLfqlwKytew/Xvvx0yg0=)
                          3: UIXymbU01AcELRK4XQgaDZSENDk.roa (hash: XHkCVd4jVL4ur9JpM+WZI6Fqyp3dAyt/v/b4jYj6KaE=)
                          4: eG6Nd0AEheFJzh2ZzgIc-HGYq9Y.roa (hash: tN9thuUXDSgdN1PacHIHF6V4krE+2Pkx1P2dF2wQPtI=)
                          5: lhhkdnjbTFcMf_WSQ6Vdc7cUgLg.roa (hash: vPcYoUUrECmWg0bzxsg1BXvUiLIZvalyKunX15L0XGc=)
                          6: q_YJm9uusZ1gdH6rfgf8d1zvcNE.roa (hash: 7dAiJ/6GQJnXgS5Q7uLwSzG/j868J9jWgDmOCQtKyWM=)
                          7: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: 6wEgaz8L9Az6ld/Qsw486qRWNKQKgpNJN8fmTScBm+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:1e:d2:f8:20:37:8d:12:47:70:37:f7:d4:a5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
        Validity
            Not Before: May 13 00:01:07 2026 GMT
            Not After : May 14 00:01:07 2026 GMT
        Subject: CN=d3d99317d40c1d1aef3557c2808a9e1dbcb182c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:a3:a3:c2:b1:1b:c1:ee:37:a6:74:bf:3e:
                    11:86:54:94:d4:ec:d0:08:f8:de:9d:10:90:c9:1b:
                    1d:09:f7:88:d3:78:4d:b9:8d:50:cc:c2:19:6b:c6:
                    5d:09:98:a1:29:ff:39:ba:ad:5e:66:45:1a:b2:ce:
                    0d:ab:66:fe:c3:58:f8:ce:8a:59:0e:db:54:e2:32:
                    98:5d:75:1c:7d:5d:0e:8b:46:b5:07:8e:70:e1:88:
                    8b:b2:cc:8f:89:11:7f:0a:ae:18:eb:8a:0d:0f:5e:
                    bd:0e:c2:23:29:3c:a0:e6:a8:85:5f:1a:ee:20:40:
                    26:96:89:83:86:c4:bb:27:3c:cd:58:1d:df:c2:e9:
                    af:2f:84:6b:8a:7f:64:bb:b8:68:51:75:47:43:31:
                    f1:50:c4:7d:59:be:66:d1:2f:b8:21:0a:7d:69:b4:
                    a5:9f:97:22:44:e6:d7:13:2e:b8:fb:6f:c2:04:d2:
                    70:e9:ad:8a:8d:78:13:30:34:87:6e:f0:d9:1d:39:
                    a1:cb:aa:5d:6d:10:c0:2b:4c:59:cd:05:88:87:9a:
                    a9:54:0b:29:da:67:94:72:78:64:91:ee:d3:08:9c:
                    10:99:c7:9b:4b:27:05:41:9b:96:e8:41:f1:7b:0f:
                    92:77:e3:07:31:b7:cb:55:25:71:96:c4:d3:2a:e2:
                    e1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D9:93:17:D4:0C:1D:1A:EF:35:57:C2:80:8A:9E:1D:BC:B1:82:C6
            X509v3 Authority Key Identifier:
                keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4a:54:0c:40:fc:0b:e8:0c:fe:12:bf:ba:c3:8e:10:d9:8e:
         9a:af:be:a9:bb:63:c1:4f:c0:38:29:a7:b4:1a:34:51:13:07:
         90:16:f5:bf:ee:3f:b4:5d:0a:67:53:de:9d:ab:d6:44:f1:15:
         25:01:c7:2e:ae:48:64:d6:59:80:d1:49:f6:03:6d:88:94:fe:
         bb:cc:92:e3:54:bd:6f:39:ff:f4:fa:19:9f:0d:b2:1d:1e:c5:
         ba:f3:11:d8:d4:b7:6c:30:f0:49:9e:3a:4d:cd:84:30:a7:fc:
         60:f6:66:01:bb:7e:f5:66:82:97:fe:41:c7:d6:25:30:0f:07:
         4a:fd:6c:e1:27:7f:a7:8b:50:5a:e5:06:86:fe:2c:1a:10:25:
         74:e0:80:6d:aa:65:71:95:86:7c:5a:ea:01:64:5f:90:17:b7:
         8e:c9:62:34:4b:6c:ce:8f:19:3c:c6:75:00:ef:4e:3b:b6:5c:
         26:6f:d7:13:59:8a:11:5e:e1:f2:54:0e:e1:00:ce:50:9a:76:
         a2:11:f6:6a:c5:85:58:74:1d:b2:ef:a9:18:f4:cf:f0:d9:d4:
         cc:51:dd:eb:4a:fe:e6:c8:6c:44:9a:5e:70:6e:dd:8e:89:50:
         21:d6:45:a3:87:83:bc:34:65:94:a0:bf:14:46:2c:cc:65:58:
         48:17:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:37 2026 by rpki-client