Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File:                     uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier:          2xVh5klh1DG0wf1yxkIrzSLgVczj8njYzzJfBLW7tv4=
Subject key identifier:   BF:3D:4E:43:3B:D6:C0:60:29:B2:0F:F5:B3:6D:98:A9:04:32:3D:2E
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer:       /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial:       019E28B8F5385CE4775B8C7AA81B115ABDFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number:          0F89
Signing time:             Thu 14 May 2026 23:01:10 +0000
Manifest this update:     Thu 14 May 2026 23:01:10 +0000
Manifest next update:     Fri 15 May 2026 23:01:10 +0000
Files and hashes:         1: aVdPfU4dss32Ry8yMEI__necPPw.roa (hash: dEwEWAPf2LGlFYLBWr0q6EXerCJ3GpMpvQYiCO1t82Q=)
                          2: i_2ZzMu3wvr5fPJXtrh3ZZ0VWPY.roa (hash: Pv2BiLhGzzZYh+rTS0GF7L9S2emxKMywXwopnvCEbWo=)
                          3: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: wj9ho21RLtOmY8VfM7YZJzRCicbq/9H1bcKt/n/UqR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:b8:f5:38:5c:e4:77:5b:8c:7a:a8:1b:11:5a:bd:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
        Validity
            Not Before: May 14 23:01:10 2026 GMT
            Not After : May 15 23:01:10 2026 GMT
        Subject: CN=bf3d4e433bd6c06029b20ff5b36d98a904323d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:ee:86:86:ed:bd:8f:5e:88:cf:37:6f:f6:
                    3a:ce:57:f1:c5:d0:79:e4:56:00:cb:34:97:f2:53:
                    06:5a:50:21:7b:8d:8f:c1:91:34:a2:bf:21:0d:0b:
                    8c:3a:c9:6f:82:61:81:82:6e:0d:d4:09:13:91:cc:
                    13:67:f4:51:01:6a:e4:55:ce:3b:0a:80:c2:e1:61:
                    f9:52:82:0f:0e:26:12:67:b3:ae:db:48:aa:e5:b6:
                    30:d3:72:e4:47:31:28:65:09:cd:a1:66:0f:6e:4a:
                    c6:94:80:29:65:b9:e8:bf:3d:15:b3:6f:e1:f5:a7:
                    74:80:15:d4:a4:11:00:ee:51:f9:33:d3:d5:30:7e:
                    96:c4:33:2f:ed:df:9b:3d:8d:d6:c3:7b:2c:11:15:
                    d6:cf:62:b1:0b:88:6f:3b:99:b8:2d:28:13:f5:1a:
                    c2:49:c9:1b:4e:ef:5c:ca:49:6c:41:06:7c:d7:a5:
                    d9:d8:99:36:c1:5f:05:29:83:24:c2:6d:02:63:ec:
                    d3:7c:ee:90:8f:22:2c:6b:f9:2a:7c:42:ab:3b:45:
                    33:2e:3e:2d:b5:cf:13:1e:8d:ca:a4:ed:54:e3:b4:
                    a2:7f:18:fe:ec:94:bd:c6:12:62:e3:c1:93:ee:2c:
                    eb:bc:cb:0f:b4:24:e2:4d:4e:28:e2:dd:99:5e:f4:
                    b3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3D:4E:43:3B:D6:C0:60:29:B2:0F:F5:B3:6D:98:A9:04:32:3D:2E
            X509v3 Authority Key Identifier:
                keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:90:67:01:e0:21:c6:e6:74:cf:f2:51:0f:bc:22:5b:36:cb:
         e0:65:2c:e5:ee:7d:d2:e1:a3:9b:f9:2b:59:fa:cf:2d:44:ce:
         32:05:9e:a4:43:14:f1:a0:e0:ef:c9:50:5f:af:e8:58:08:90:
         a9:89:af:d9:58:d0:5d:f2:09:5d:a1:4b:66:aa:21:f3:83:be:
         cc:cc:0c:e9:8b:11:af:c9:ff:f3:67:a9:ae:b3:46:54:f1:3f:
         78:d5:24:fb:f5:ae:e4:47:1b:75:d2:77:37:a8:d3:6a:e0:cb:
         d7:6d:a4:a9:37:b2:7d:a2:ce:71:54:24:ef:a4:7f:d2:53:1a:
         8c:bc:c9:c6:fb:4a:47:4d:13:58:ac:f0:d9:9a:8c:35:88:af:
         fb:b2:0f:ef:54:fa:d4:a3:56:9e:c9:9c:6c:d2:08:d6:f3:73:
         67:cb:b4:37:ed:71:af:59:cf:9e:7e:b7:61:55:80:94:70:9d:
         24:9c:b2:20:ac:85:4c:a3:20:59:42:f1:69:b4:c5:27:62:31:
         45:50:f4:c9:ac:18:4a:39:81:49:e6:f5:8e:87:77:2c:3a:56:
         cd:66:50:d2:91:ce:da:e7:80:e6:77:3b:9d:46:68:be:ee:61:
         5a:f6:c4:d6:e4:8f:4c:d9:d2:5e:0b:22:c6:2a:1f:dd:22:65:
         b7:75:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:42:06 2026 by rpki-client