Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
File:                     ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft (raw, json)
Hash identifier:          JIrb/8CL2SRGKIKzAwhwJQCghS0nPfIPBL9o+xgIZYw=
Subject key identifier:   A9:EF:B8:A9:8C:31:A8:1E:E5:22:E4:38:9A:FE:7A:CE:D6:F7:46:2D
Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Certificate issuer:       /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Certificate serial:       019EB80EAAB67EF2D61B9F92145A716B8C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 19:00:29 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:29 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:29 +0000
Files and hashes:         1: 0Td6CpG-ym_-K5b4WeUNjXePjUc.roa (hash: 8r4ggp6PxqO1ZrZZe1PjZkrnXadGZdj4c8IAkyVPoI8=)
                          2: UV5sC4K1_1F-z4dW9PMgPKHi4iw.roa (hash: 1nK47WRZwAvKB9ouMkN1V/iLxMpccr6CTRWd93nbh9I=)
                          3: VI02z2FHl_uy1YfJADZkMaattiI.roa (hash: iGaV6V98vbELrIXxsPeIiB2rSTsDaubi3a7rszzR+rI=)
                          4: kq1xYxFloxajo4ocaHFVoXWbLDY.roa (hash: 5lt2etlP+aPgpUw9DddCPVJWXAZYWqwLCkqKVkNEao4=)
                          5: rnJIlbs2iVDtWflxRJ2ZBYeF__I.roa (hash: YKlhZLI+VkzsmAVmF0CZzBKBT9NCGEV+DX5m19LqsF4=)
                          6: ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl (hash: tT6Ed2iPVGQl2WF5dci9POvoIV3qajBalFJ2XzHPnnI=)
                          7: xywtwPVtKI2c3GfGQ6zEtHEmcuk.roa (hash: rjSOo1Wse8hlTDW23Au03BF12xwjNXnRbuXo4liko2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:aa:b6:7e:f2:d6:1b:9f:92:14:5a:71:6b:8c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
        Validity
            Not Before: Jun 11 19:00:29 2026 GMT
            Not After : Jun 12 19:00:29 2026 GMT
        Subject: CN=a9efb8a98c31a81ee522e4389afe7aced6f7462d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:40:79:3a:cb:4f:de:f5:df:19:ba:56:74:
                    e5:1f:d0:41:04:88:52:2c:05:e6:f1:78:b1:5e:d7:
                    75:12:ae:62:25:bc:61:a3:4b:b2:45:03:31:9d:89:
                    c3:c3:69:3e:64:90:9a:c2:32:fb:1e:bc:36:23:18:
                    b4:40:62:a7:7a:ea:24:bf:ef:26:4e:2b:74:2d:98:
                    20:9c:e9:65:69:82:3f:da:38:32:76:3c:f7:5e:a6:
                    f8:15:d3:21:36:a8:c1:a6:00:b2:9f:67:09:82:0d:
                    be:ed:86:26:04:01:8d:ce:81:82:40:64:0d:7d:5a:
                    e2:2e:78:f4:6d:57:4c:d2:a6:37:cc:0e:b5:63:2d:
                    f6:f5:8d:58:31:c7:60:24:1f:f2:40:db:16:09:d6:
                    20:c9:6b:e2:17:26:17:1c:b9:40:a6:2e:a2:d8:88:
                    3e:43:bf:e7:cb:21:36:d6:14:5c:4c:ef:ba:46:d5:
                    fe:25:b7:ff:da:a7:d5:ff:ff:0b:00:0a:36:3b:d0:
                    aa:0b:e9:b3:a3:4f:6a:4d:c0:24:a7:d2:04:7e:6e:
                    6d:c1:77:1c:41:e4:90:d7:85:03:23:db:84:76:16:
                    8d:ee:b0:39:ff:09:bf:f5:eb:0a:e7:db:e8:65:8d:
                    d6:4e:b1:07:b3:0f:5a:48:80:53:2d:3b:32:e3:32:
                    c1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EF:B8:A9:8C:31:A8:1E:E5:22:E4:38:9A:FE:7A:CE:D6:F7:46:2D
            X509v3 Authority Key Identifier:
                keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ef:30:4a:d1:a7:65:15:f4:04:93:a2:33:2b:31:5d:41:44:
         3e:d8:98:24:98:6a:96:8e:12:47:51:5b:f4:c6:5e:40:9b:23:
         09:95:c0:d4:de:70:70:df:27:cd:83:14:a9:f2:19:27:d3:c4:
         f0:8b:08:71:4a:6f:3c:27:5b:2a:ea:17:92:23:aa:cf:51:78:
         24:ea:08:d2:cb:68:07:4c:da:38:90:a1:ba:68:8a:18:57:53:
         d6:72:ab:07:44:75:f0:ef:04:6d:31:d8:c7:40:84:4d:84:bd:
         ea:38:c2:7b:b2:7e:1d:13:e1:61:bf:8b:91:f2:57:5d:c3:86:
         1b:af:6b:ba:03:2b:1d:19:d4:68:74:10:b5:41:2e:34:8d:75:
         71:2a:7e:41:14:82:b5:ce:c4:f5:f6:1a:14:7e:13:76:c2:75:
         b3:56:6c:f8:a3:23:90:f0:43:dc:28:f0:47:c7:1d:1b:a6:5c:
         c0:99:d6:a7:1d:97:11:75:56:f9:7a:40:e0:b8:0e:0f:2d:d1:
         50:6c:ee:65:9f:ca:08:a0:95:54:2e:51:92:95:47:aa:08:1c:
         cc:7e:b1:38:af:e8:e9:69:ae:81:8b:86:d9:a8:26:4e:f9:3e:
         db:c6:0c:d1:09:1a:35:aa:c0:ae:b3:0b:49:86:e5:13:33:88:
         23:c7:b6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:52 2026 by rpki-client