Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File:                     ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier:          dBbU/SGVwEoTEIJmLuexM1ZsUm7dJGZUWJY0miHV7lo=
Subject key identifier:   C3:8E:D4:8E:D9:C3:F2:E8:26:CD:8A:F6:36:16:36:E1:62:B2:EB:91
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer:       /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial:       019CE222482D1DF4A39C92B4325882F55590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number:          0C36
Signing time:             Thu 12 Mar 2026 13:00:23 +0000
Manifest this update:     Thu 12 Mar 2026 13:00:23 +0000
Manifest next update:     Fri 13 Mar 2026 13:00:23 +0000
Files and hashes:         1: 1-Y2vjSjF6gXRq6I6kzf8-SGCL8Q.asa (hash: DdT5c/3q+BGyWUydZ3FkM3RX71y9vyzAcIHaVlT8fro=)
                          2: DyNt3o9uIabPGMyLwBL1LgyHrIg.roa (hash: gG5xZr77ZeZmjXnGAzSRXzAOpUijJO5uYNAWkPGYFA8=)
                          3: QCLNg4PNOl11XDmyCY2IfSAv4u4.roa (hash: jT4JDY6Kk9V6/J+VGMgmAaLrU2fWlyxRaRtTYMCcfOY=)
                          4: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: y9hpnKHhVT0VtGVreXGwbd0mmABIBMG63QJxuLyJvFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:22:48:2d:1d:f4:a3:9c:92:b4:32:58:82:f5:55:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
        Validity
            Not Before: Mar 12 13:00:23 2026 GMT
            Not After : Mar 13 13:00:23 2026 GMT
        Subject: CN=c38ed48ed9c3f2e826cd8af6361636e162b2eb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:47:1b:6c:e6:eb:6d:ae:26:50:fb:1b:8e:6e:
                    9d:95:09:27:6f:52:36:b6:c3:2d:52:70:ff:a2:e8:
                    82:d0:29:cf:53:1f:88:f9:00:03:e2:10:08:49:17:
                    0c:2f:bf:0f:6d:ff:e3:69:9f:c9:f1:91:75:ed:ca:
                    a3:30:31:89:f8:55:31:47:3b:81:7c:e8:db:8f:c4:
                    8c:3d:c9:89:ef:fe:23:47:de:5f:e9:9d:67:7f:89:
                    ee:2b:db:ee:3f:cc:d9:f0:26:b3:9e:8c:c1:4d:6e:
                    15:fb:3b:59:55:d8:6e:26:b0:46:94:8f:19:22:7e:
                    b4:f0:73:61:96:4f:c8:e6:37:30:b6:9e:eb:37:d5:
                    ce:a7:d1:76:c2:93:30:7a:58:24:6e:04:55:fb:d4:
                    7a:4d:26:64:04:35:aa:92:37:21:d4:1e:90:fb:13:
                    e8:3b:bc:be:ea:00:f4:6e:31:ac:9b:cb:ed:55:63:
                    3f:1a:0a:0a:ab:c3:de:bc:3b:e9:3c:c7:5b:bc:a6:
                    30:f1:da:b2:a3:63:91:7f:40:24:fd:f2:ed:5b:07:
                    6b:fb:71:da:db:10:5b:cf:f9:da:aa:9d:0a:4a:3f:
                    d3:ff:e1:37:65:66:8d:2a:b1:d5:a7:dd:da:6f:e6:
                    27:8d:29:27:30:b2:2a:9a:66:58:80:62:da:2a:a2:
                    b9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8E:D4:8E:D9:C3:F2:E8:26:CD:8A:F6:36:16:36:E1:62:B2:EB:91
            X509v3 Authority Key Identifier:
                keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1c:c2:e5:17:1f:38:2f:9b:e9:6e:e2:61:e9:33:77:17:7b:
         b4:f9:2a:60:e5:91:21:9e:6d:d7:90:f6:c2:58:44:f8:fd:bf:
         d3:7a:58:06:46:78:c8:4f:d8:12:c4:d8:2d:8a:90:65:f9:fa:
         51:c7:18:06:38:38:b9:7b:03:84:f5:6c:2e:5b:aa:1e:8e:05:
         d1:c2:a4:34:bb:99:3d:b3:f7:3f:d3:ed:f5:ec:4c:1b:89:f7:
         7f:31:e0:81:16:3d:82:ef:9b:0f:c2:24:5c:49:fa:52:9d:39:
         bf:cd:4e:58:da:3c:3e:ed:c6:39:25:b8:19:11:3b:f8:60:37:
         15:73:74:36:e1:48:5a:3a:01:a8:7f:41:46:ac:f8:6f:bc:4c:
         4d:2a:aa:18:9c:e7:12:84:99:de:98:24:64:d3:39:da:81:9c:
         76:47:26:19:58:64:ad:da:89:cf:d3:0a:3b:d8:ca:91:11:4c:
         6e:a2:ee:f3:a4:e3:16:53:53:d0:d7:97:42:34:2b:a6:2c:e0:
         92:35:82:fd:a2:ad:cc:c4:06:0b:d8:ae:20:f1:d5:07:c4:b6:
         2d:1f:1b:54:d4:0c:e3:90:7e:5c:53:cc:0b:5d:e1:62:3a:46:
         f9:6b:da:5f:39:42:b6:35:9e:79:16:7f:49:d5:a2:c4:46:ae:
         91:a2:5c:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZziIkgtHfSjnJK0MliC9VWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjgxMzk5OTNiZTY2NWYzYjVkMGY2OTA5ZWYwNThmYThm
OTc5MjIwHhcNMjYwMzEyMTMwMDIzWhcNMjYwMzEzMTMwMDIzWjAzMTEwLwYDVQQD
EyhjMzhlZDQ4ZWQ5YzNmMmU4MjZjZDhhZjYzNjE2MzZlMTYyYjJlYjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UcbbObrba4mUPsbjm6dlQknb1I2
tsMtUnD/ouiC0CnPUx+I+QAD4hAISRcML78Pbf/jaZ/J8ZF17cqjMDGJ+FUxRzuB
fOjbj8SMPcmJ7/4jR95f6Z1nf4nuK9vuP8zZ8CaznozBTW4V+ztZVdhuJrBGlI8Z
In608HNhlk/I5jcwtp7rN9XOp9F2wpMwelgkbgRV+9R6TSZkBDWqkjch1B6Q+xPo
O7y+6gD0bjGsm8vtVWM/GgoKq8PevDvpPMdbvKYw8dqyo2ORf0Ak/fLtWwdr+3Ha
2xBbz/naqp0KSj/T/+E3ZWaNKrHVp93ab+YnjSknMLIqmmZYgGLaKqK53QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOO1I7Zw/LoJs2K9jYWNuFisuuRMB8GA1UdIwQY
MBaAFLm4E5mTvmZfO10PaQnvBY+o+XkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEt
N2JjNzNlZWUxNDQ3LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEtN2JjNzNlZWUxNDQ3
LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRzC5Rcf
OC+b6W7iYekzdxd7tPkqYOWRIZ5t15D2wlhE+P2/03pYBkZ4yE/YEsTYLYqQZfn6
UccYBjg4uXsDhPVsLluqHo4F0cKkNLuZPbP3P9Pt9exMG4n3fzHggRY9gu+bD8Ik
XEn6Up05v81OWNo8Pu3GOSW4GRE7+GA3FXN0NuFIWjoBqH9BRqz4b7xMTSqqGJzn
EoSZ3pgkZNM52oGcdkcmGVhkrdqJz9MKO9jKkRFMbqLu86TjFlNT0NeXQjQrpizg
kjWC/aKtzMQGC9iuIPHVB8S2LR8bVNQM45B+XFPMC13hYjpG+WvaXzlCtjWeeRZ/
SdWixEaukaJcFA==
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:53 2026 by rpki-client