Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File:                     UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier:          vZ2tBwepj9NhzyrSnPCdHF51nYc2oFQr6HVmb7HKad4=
Subject key identifier:   95:D5:7C:F4:8C:1A:16:E3:54:A7:78:28:5D:CB:7F:FF:13:F4:66:E0
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer:       /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial:       019FF7FEE091894B4F4DD5AADB42CD5E03BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number:          0D60
Signing time:             Wed 12 Aug 2026 22:01:43 +0000
Manifest this update:     Wed 12 Aug 2026 22:01:43 +0000
Manifest next update:     Thu 13 Aug 2026 22:01:43 +0000
Files and hashes:         1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: O6e9KdLLQZrcMvNqCoD7UdbcF6A3LqBnupt10CdN+Rc=)
                          2: VsG7dVlUV6vUTjuVP6G8KrTsnyQ.asa (hash: EkuJk4PeNwUwFypv2fHrIrkEZkJzBGNr87+AlqDgMRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:fe:e0:91:89:4b:4f:4d:d5:aa:db:42:cd:5e:03:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
        Validity
            Not Before: Aug 12 22:01:43 2026 GMT
            Not After : Aug 13 22:01:43 2026 GMT
        Subject: CN=95d57cf48c1a16e354a778285dcb7fff13f466e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:64:39:d8:30:1a:26:ef:1d:1d:e2:f9:cb:
                    30:88:b3:b8:52:b2:45:80:77:21:58:91:d3:0e:51:
                    87:2f:43:04:af:e9:4b:43:61:7b:5e:f2:9b:17:ed:
                    57:57:9e:c3:58:e5:a9:c6:c5:5c:bf:61:0b:96:55:
                    d7:98:62:fc:16:ef:20:c4:6f:38:6d:9a:8a:d5:fe:
                    6a:b5:14:66:75:44:da:d7:7d:1e:b0:1d:b8:17:4b:
                    ba:ec:79:59:91:76:0e:48:a7:ce:e7:89:17:e1:63:
                    67:42:1d:13:69:61:18:ae:00:5a:94:7f:c8:4b:c6:
                    48:99:73:20:35:12:26:cb:88:df:e6:ab:d4:31:ec:
                    6c:96:41:c2:c0:17:d1:52:8e:40:4a:19:07:b0:b8:
                    8d:b0:73:71:aa:7d:a5:bb:ac:16:c8:e4:2d:03:11:
                    07:ae:35:c5:2a:14:8a:c9:10:b7:14:25:82:a3:e5:
                    24:1e:78:a8:2d:94:01:33:eb:06:10:01:b2:77:f8:
                    99:19:ab:a9:90:6b:ec:58:2d:e7:2e:5c:70:93:c8:
                    48:6f:29:87:01:4f:f1:30:3f:48:d2:6d:d4:d9:66:
                    d5:21:9e:68:e9:49:30:fb:13:25:a1:14:88:47:cd:
                    19:db:36:9b:ad:0b:f4:03:35:f5:e7:54:f5:54:aa:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D5:7C:F4:8C:1A:16:E3:54:A7:78:28:5D:CB:7F:FF:13:F4:66:E0
            X509v3 Authority Key Identifier:
                keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1c:3c:8b:d5:ec:cd:b6:32:c8:20:95:91:e9:df:f4:3e:99:
         8c:52:14:24:5a:de:c7:41:60:f0:9d:64:f4:21:d8:1e:ed:8a:
         42:9f:20:fd:ae:21:61:47:2b:0f:71:18:a4:a0:43:4f:31:33:
         fa:dc:f5:ed:e6:6c:08:77:3a:c7:7d:05:d5:b0:8b:de:dc:0b:
         eb:09:45:cd:31:4e:8d:65:e8:1e:73:4a:2a:4a:5c:2d:a6:23:
         29:cd:79:df:d6:9d:62:00:3d:1d:e1:59:c9:63:b0:2d:10:0c:
         f7:06:f6:ac:7b:0a:98:ab:2f:75:36:a2:2f:c0:fe:52:e9:fc:
         f4:af:77:66:aa:f4:3a:16:3d:91:a8:a2:9b:8f:82:d5:24:23:
         0a:e4:1f:95:8b:ef:e7:3b:bd:69:4a:d8:20:0a:c2:19:51:aa:
         72:ba:28:c2:c7:0d:d2:37:2b:3a:ea:f9:e2:16:17:a8:68:33:
         48:e5:1b:fd:1c:26:c8:71:ff:61:68:37:15:04:c3:3d:a6:b4:
         f4:e1:6b:4a:15:61:95:48:00:c9:2d:9c:8a:ae:ed:1c:97:d9:
         73:19:75:69:8c:ec:5b:51:5d:7a:81:60:dd:cd:25:e8:a5:25:
         02:94:08:68:2e:5a:76:ea:b5:9c:d9:f3:7a:61:eb:85:ba:82:
         ac:ea:99:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:58:57 2026 by rpki-client