Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File:                     UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier:          +vemT4SteAosRthcXvG1ueo/KVXj0a1Crn8+IzYnfe0=
Subject key identifier:   06:B4:59:0F:B0:7A:C0:7F:14:30:B5:A4:E4:0F:42:E0:79:E4:B3:E0
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer:       /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial:       019F90FF7AFAD383F5738728C24AB0FCC522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number:          195B
Signing time:             Thu 23 Jul 2026 22:01:29 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:29 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:29 +0000
Files and hashes:         1: 5aow-99slZP8SVOes-TUh3rZ69w.roa (hash: LcVMTYwvGYnDzr+4t+xoLGSaGqGnbwNSajc10a7TVgs=)
                          2: R8VLlqxVzPN8ld2Tg0UaItsoYMs.roa (hash: O2XqZYJVg9I0qJHfw0FYVH2QGiz9GyNT5hxyGi4r7zA=)
                          3: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: BbIl2RcqTOBWy/tGdYVIMDIgOdndwZWXPFyypx1Gznw=)
                          4: ZPeEf7cS5BJ9rtofzmpA-ppl3C4.roa (hash: wudhnRSlAK+yCHqZdQgA8uGQw89NdGjYT7UnH7gteD0=)
                          5: c3rz_qnKouFWFsxqpnJ4-B9oKJ8.roa (hash: q1FoERSAG1CZ2+/I1H71ycDFKWpa3QIpL1CV49ZYyiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:7a:fa:d3:83:f5:73:87:28:c2:4a:b0:fc:c5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
        Validity
            Not Before: Jul 23 22:01:29 2026 GMT
            Not After : Jul 24 22:01:29 2026 GMT
        Subject: CN=06b4590fb07ac07f1430b5a4e40f42e079e4b3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:3f:02:de:52:e8:b9:f7:fc:c1:79:4a:ac:
                    98:c9:6c:71:fd:00:1b:be:87:e8:14:3c:19:67:12:
                    b5:0c:d2:16:e5:63:dc:77:fb:c8:ca:df:26:de:b5:
                    f5:ca:f9:74:2b:0d:f2:53:60:d4:4d:a9:5e:63:37:
                    ca:07:03:db:da:34:e9:fb:5c:cd:c7:e1:77:ba:0c:
                    52:84:8c:95:b5:8b:dd:6c:e5:80:4d:d2:3f:cb:5c:
                    ac:6d:3a:fc:78:ff:ce:d2:ae:d5:0c:7e:28:b6:0e:
                    2a:a3:71:31:2c:7b:a4:8e:f9:38:35:5e:29:84:d8:
                    55:68:60:0f:09:3e:5b:a0:ab:a4:0f:c1:5a:6d:a2:
                    f1:fd:43:11:32:ad:83:45:c6:d2:26:e9:29:ee:42:
                    96:1f:c3:6e:23:94:f3:a1:00:db:49:ec:bb:89:e4:
                    9c:ce:de:f6:f0:5e:14:4e:ac:51:75:a0:b2:2c:e1:
                    c8:7b:5a:ac:cc:a1:9c:a3:7f:f1:fe:bf:38:fe:bc:
                    4c:45:0e:e6:3f:ca:2e:37:27:68:ee:1a:1f:d5:90:
                    52:6f:52:97:b2:82:a3:73:6d:50:70:ed:1b:8f:bb:
                    3f:75:7a:d1:2e:26:92:31:d9:bb:1c:55:fe:40:9d:
                    39:fb:4f:16:0e:8d:4d:a8:d3:83:e2:84:d4:e4:24:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B4:59:0F:B0:7A:C0:7F:14:30:B5:A4:E4:0F:42:E0:79:E4:B3:E0
            X509v3 Authority Key Identifier:
                keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8f:76:92:45:4d:43:e2:18:6d:9c:7a:db:11:3e:57:bf:25:
         3d:7c:59:7c:bb:4b:55:47:07:3b:19:28:e4:e9:5b:e7:5a:03:
         af:da:62:6d:05:04:db:03:c6:0b:65:a6:e4:a5:d1:fb:2a:04:
         36:53:f0:cd:e2:fa:d9:cf:5d:53:ba:6f:7b:36:13:3d:5f:9c:
         59:df:41:ec:c4:d7:68:1c:9b:c8:d1:ff:4c:8b:8c:3a:c5:02:
         3b:31:5f:25:61:54:17:3c:ed:02:6c:07:99:d3:13:68:b8:a0:
         7a:4d:10:ba:6b:14:c7:89:c5:21:ae:4d:d1:c0:b2:96:69:d9:
         97:f9:7b:40:26:8c:1d:ea:da:8c:96:9c:bf:b1:4b:95:8a:7c:
         c1:14:8d:05:1b:01:a6:b4:ff:dd:12:be:e7:ab:d4:db:ce:7e:
         cd:30:7e:4e:6c:df:33:84:f2:cc:25:92:e9:06:86:b7:6f:ec:
         e2:c8:84:0a:81:ec:e9:96:c2:3e:d0:8e:97:1d:a0:a4:70:ae:
         97:49:9b:88:99:36:34:6c:56:ae:e6:b7:cb:64:dc:b4:2f:73:
         b7:ce:3d:af:1b:b0:55:52:91:c8:f7:0e:31:7e:fa:b6:56:d8:
         e2:0d:f9:1d:79:4b:60:4e:d8:a2:23:24:a1:e0:64:3e:2b:29:
         02:43:59:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:40 2026 by rpki-client