Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File:                     UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier:          oofdge4ADOyHVg8ieHZQrgfGSe19FHADKWO2KhIVmyo=
Subject key identifier:   20:64:8B:5F:D1:DC:26:CF:53:3E:5C:16:9A:D2:42:AB:32:32:CD:57
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer:       /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial:       019E1E350904E9B96BB1E23B79A58A85E576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number:          189B
Signing time:             Tue 12 May 2026 22:00:52 +0000
Manifest this update:     Tue 12 May 2026 22:00:52 +0000
Manifest next update:     Wed 13 May 2026 22:00:52 +0000
Files and hashes:         1: 5aow-99slZP8SVOes-TUh3rZ69w.roa (hash: LcVMTYwvGYnDzr+4t+xoLGSaGqGnbwNSajc10a7TVgs=)
                          2: R8VLlqxVzPN8ld2Tg0UaItsoYMs.roa (hash: O2XqZYJVg9I0qJHfw0FYVH2QGiz9GyNT5hxyGi4r7zA=)
                          3: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: GiiainXQbbXAjRGbWMBXBz/sf4E/8TP6/ptU7/mhmGo=)
                          4: ZPeEf7cS5BJ9rtofzmpA-ppl3C4.roa (hash: wudhnRSlAK+yCHqZdQgA8uGQw89NdGjYT7UnH7gteD0=)
                          5: c3rz_qnKouFWFsxqpnJ4-B9oKJ8.roa (hash: q1FoERSAG1CZ2+/I1H71ycDFKWpa3QIpL1CV49ZYyiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:09:04:e9:b9:6b:b1:e2:3b:79:a5:8a:85:e5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
        Validity
            Not Before: May 12 22:00:52 2026 GMT
            Not After : May 13 22:00:52 2026 GMT
        Subject: CN=20648b5fd1dc26cf533e5c169ad242ab3232cd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:c8:de:28:b4:87:b5:96:d8:73:b1:c2:ec:
                    b7:45:1a:ae:9c:37:fa:f3:2d:d8:70:12:d2:ea:d4:
                    f0:5d:4c:f9:9e:c2:33:89:4b:96:c7:ee:c5:3c:ff:
                    89:00:62:78:b6:28:6b:cf:ba:5b:cf:c2:dc:68:47:
                    b9:8e:54:0f:54:03:80:a3:1f:15:da:1e:38:d9:a8:
                    4e:bc:05:94:76:9b:a5:0d:41:2e:8b:94:09:63:0c:
                    61:7a:c3:e2:fe:60:e6:96:14:b8:84:98:5b:c1:f6:
                    d2:9c:d9:f2:87:8d:87:f8:c2:20:cd:69:59:75:02:
                    88:85:8a:fb:f0:1d:e5:a7:9e:fe:87:c3:60:fa:80:
                    70:3e:8e:cf:ec:42:c4:70:72:0b:83:81:12:75:1f:
                    30:2a:06:4c:d9:7a:14:e1:ec:b6:36:04:a9:47:88:
                    36:c2:89:2f:f6:2d:b8:61:4c:20:c8:db:31:3b:25:
                    6e:0e:f1:95:61:31:02:09:cc:ab:81:3a:5d:2f:de:
                    8b:54:58:d4:27:14:a8:4e:e6:2e:00:ac:31:87:0a:
                    73:6a:46:0d:3c:8f:7e:4f:ed:d2:e5:9f:67:54:e3:
                    55:a5:ff:cb:6f:8d:d0:f1:b4:aa:f3:6a:e4:64:45:
                    4e:dc:c8:b8:ce:14:35:d2:25:d9:65:66:d4:4f:a0:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:64:8B:5F:D1:DC:26:CF:53:3E:5C:16:9A:D2:42:AB:32:32:CD:57
            X509v3 Authority Key Identifier:
                keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:41:4a:24:b4:bc:eb:ff:c4:93:02:29:c9:9a:3c:9b:3d:19:
         50:c8:1f:1f:98:f9:62:13:b8:db:22:66:43:1d:f2:0b:87:a7:
         82:3e:dc:87:48:95:71:f5:92:86:b4:9b:53:ce:85:cb:dc:da:
         89:e8:ea:fc:d5:7b:8e:ce:65:ab:f4:13:03:ff:e5:4f:a4:d3:
         dd:6a:e7:7a:e5:57:42:bf:c4:95:87:06:84:d9:b1:9e:ae:46:
         c0:ed:12:09:18:09:46:0b:c3:f6:5d:31:e8:5d:00:3e:b2:81:
         31:5c:60:5e:28:3f:32:82:df:5f:ec:84:82:4b:34:6a:1e:a8:
         c9:d8:c5:94:bb:62:04:c8:1f:11:f2:9a:97:50:7a:58:e8:2f:
         2b:79:a6:c1:0e:8a:5d:8c:89:9a:f1:8c:88:42:17:5e:7f:e6:
         15:22:9b:ce:07:0f:58:57:30:7c:3c:83:5e:84:c3:e7:8f:00:
         dd:10:69:6b:6a:49:66:c3:5d:0f:06:d9:f2:44:08:ba:fe:10:
         70:33:90:b3:ca:e4:6f:6b:97:c4:af:1b:b3:91:ca:28:1d:ab:
         2d:84:66:5c:d2:40:4b:95:e8:84:80:89:70:a9:76:0a:c7:0e:
         e4:25:14:6f:9c:5e:62:99:cf:3a:ea:20:98:5b:12:6a:4f:bf:
         99:67:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:15 2026 by rpki-client