Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
File:                     ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft (raw, json)
Hash identifier:          0efLc77SgjS9gN9kmz3iGML3c+2WUTcNgClA9wz0yjc=
Subject key identifier:   44:FB:1F:A8:6D:57:E3:06:3F:90:21:39:54:74:BB:83:AD:26:AA:71
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Certificate issuer:       /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial:       01A001DD7C03DB82652B814A2C2ADFC09ACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
Manifest number:          1A0A
Signing time:             Fri 14 Aug 2026 20:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:27 +0000
Files and hashes:         1: 5UYip_xBbzn2CNjLpZ_CoIpPzFE.roa (hash: 3j/AqF0wCGzG1PH65aCoZmdbg6/ubr1uvvDyr43tFG8=)
                          2: MLQlbC7wuHhJHajOqMOEcE0X_1c.roa (hash: GK+D/xRGcBdbiuOOUYdtTTEuV9w8Gk6wgcBpg3nBzkA=)
                          3: TM2a_AtbHtu62DfJsvptScTKk4s.roa (hash: Pmun9G4KM00LP9UCnH4fI3onhtXKKZDUrch2QtVQaDk=)
                          4: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl (hash: UxejzEjToiPACVmdWUrzvco6xmX+9Ny/LYSDi9jEJ7A=)
                          5: zWulcOGUKE9gn7BLOYEPh_X0DTk.roa (hash: uGfAeVxd65oJ8xTyTnsrCS4kQ2nFKFRp0QLyA8tXOho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 20:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:7c:03:db:82:65:2b:81:4a:2c:2a:df:c0:9a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
        Validity
            Not Before: Aug 14 20:01:27 2026 GMT
            Not After : Aug 15 20:01:27 2026 GMT
        Subject: CN=44fb1fa86d57e3063f9021395474bb83ad26aa71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:c5:b4:78:f2:aa:78:b6:bb:ec:2a:4c:20:
                    cf:68:f2:da:36:1f:d0:c9:1c:f0:57:b9:9c:8e:82:
                    da:d2:d8:19:ac:fd:0c:12:19:88:9b:33:30:6e:cb:
                    81:aa:41:c8:ef:0e:2e:1e:79:1b:78:9a:48:0b:6d:
                    d7:a3:e1:c5:14:f1:40:13:84:91:33:6a:12:c3:3e:
                    f9:0e:01:06:b7:d0:7d:6c:f4:f2:08:15:17:9e:e7:
                    0c:3b:7e:4c:e8:ee:ae:b6:d7:fc:f7:e0:2c:a4:b6:
                    34:8a:7f:94:f4:4f:17:db:ca:f3:d0:12:cc:4c:7f:
                    76:43:70:e5:95:62:8a:4c:57:8d:56:98:f9:10:d3:
                    b9:e7:e5:3b:d4:a4:a7:24:5c:8a:d0:44:b8:ab:73:
                    be:88:03:81:ec:60:ff:6e:a5:ab:d5:b4:a7:ef:09:
                    7d:6c:23:ed:e2:fb:54:27:92:38:41:b7:59:28:61:
                    15:1d:62:2d:68:51:01:a5:8a:a8:54:80:87:a6:19:
                    2d:c1:34:a4:d0:c0:55:33:60:91:25:a1:41:9a:d8:
                    30:d3:ae:ba:03:ee:04:16:27:67:3f:5c:5d:cc:72:
                    00:1e:0b:2b:e2:1f:7a:fc:74:75:0b:79:e8:6f:04:
                    bb:37:56:8d:3d:46:6a:76:d5:92:84:8b:c8:e5:c5:
                    e4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FB:1F:A8:6D:57:E3:06:3F:90:21:39:54:74:BB:83:AD:26:AA:71
            X509v3 Authority Key Identifier:
                keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d8:47:1b:06:92:8c:09:0d:0f:e0:7b:83:88:42:45:c5:f8:
         a4:51:09:f7:d9:ec:1d:be:c7:c5:14:1d:c0:79:e9:6a:cc:a4:
         8e:aa:6f:69:3b:42:05:a2:ba:b5:f4:fd:3f:4b:00:08:0e:0a:
         72:cb:b7:cc:f0:b1:c5:a4:3c:53:9b:9a:c8:96:5f:4c:32:e3:
         fb:3d:e7:c2:d8:de:cd:24:e2:24:b4:d0:41:20:da:4b:d0:e4:
         f2:27:43:a1:77:39:cc:11:3d:2c:8f:48:17:4e:e7:86:24:73:
         12:95:1c:24:a5:cc:f7:ae:1a:32:05:51:f8:a8:01:95:28:0a:
         89:af:86:dc:c4:d3:45:95:bb:c6:8b:bd:07:5b:10:64:86:31:
         31:13:7b:14:0c:fb:d6:4b:62:b5:bc:e4:88:a0:75:cb:3b:51:
         de:5d:39:a9:d5:a1:d2:0b:8e:90:a3:bc:3d:3e:53:59:d6:6c:
         b5:ad:44:1d:78:bc:52:f3:cf:5e:e8:f5:4b:54:16:39:14:5e:
         c8:1e:78:97:07:31:2d:62:ec:4a:72:10:ed:ab:14:9a:8e:fa:
         1f:b7:7f:f7:db:07:50:17:21:64:a4:21:6d:ba:31:1d:5a:08:
         db:0a:ba:c7:d5:51:bf:ae:aa:77:c6:e3:f6:d1:26:75:78:a3:
         17:af:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:34:44 2026 by rpki-client