Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
File:                     UbSboN2GFRKGGNUBWcsPO16e5iY.mft (raw, json)
Hash identifier:          ozLWotGadwa14WRrez8ZXDfoGSHqPS5QWscKyjurvA4=
Subject key identifier:   4C:C6:52:E3:C7:82:87:BC:43:61:2C:04:1A:12:F5:D9:75:02:A5:F7
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       01991F1DBA5C8654C547EFA275387E4A254F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
Manifest number:          1685
Signing time:             Sat 06 Sep 2025 13:01:05 +0000
Manifest this update:     Sat 06 Sep 2025 13:01:05 +0000
Manifest next update:     Sun 07 Sep 2025 13:01:05 +0000
Files and hashes:         1: 1-i5TRDPku6NeUdz2bRFMsPZIHUQ.roa (hash: VQK5n0tcKEtnqAcxB7o2wJcalg9cjbbfvMYz3zPe7hA=)
                          2: 1-idKtEyWPNAMJeIijPIWRfu03ys.roa (hash: ZFExyJVdtmrhUYVV87RFw7yeN570axMy9XT8ECtG1ao=)
                          3: 1fT9QhThDUmWjiSTulyVm7iSanI.roa (hash: ZFHnMjm10eAMrJdEqUvNbnD/2gQCuULv/d28A9/O3dw=)
                          4: 2wmtliVBxfozFrIlKB1-nwfdjAE.roa (hash: +lKNzr0mRWdZKlHpN+HQ/mkjY4gghuaP04gNQkK1wf4=)
                          5: 8_wnOuS18GM1ao7nxvTA4qStDkE.roa (hash: 2heDhd7j7cVBxa65WvdNzSCrZaRYSPWEzGdI91hFVro=)
                          6: A9a39XgLNreD6jCuPk2N9_yZJSI.roa (hash: yFrH7K4LO+J+VvdWgSDrGisbEkscTT9UDcQMArhnNvQ=)
                          7: AMjUNTOhnzREU8Jo1dm48smZP8I.roa (hash: zBT+5qzWj4dFZbdGDNdO3nHKN+CwepKtHTyn5tswDu8=)
                          8: FPr3CSTPTG3WcX0hY9kv8oCNP0o.roa (hash: lAL35wvI6bQCDKnV3kyebMtJMd1Ob5EhjuZvD+GyMK4=)
                          9: Lu76Y9Smh45WB63k1kFuTdEUEho.roa (hash: OnpzEXl/HnMZNzqcmNMVvatlRcG3aHMFwrKsS9eDZQc=)
                          10: R1jHiitnShPJgeMOsxIyqRpfSIA.roa (hash: f/dB8Qq/EF6L1f8tU8ZEvmabqV+r8OZu/F7cAntkkLI=)
                          11: T7i-71_8KfgiHfK1cluDI6ZLn6k.roa (hash: g1lLKLNogKIrN/BIi+OY8QfR3HAt+ZA7BFl8/r2LQUc=)
                          12: TLEa3wCwO1t-1JL9YarUBvTLUWg.roa (hash: bh29VzLkRnbq5JpBJxNAjIHlb9Jwta1NcqlqV0xj/v0=)
                          13: UbSboN2GFRKGGNUBWcsPO16e5iY.crl (hash: 7L48zUGpdXzhu2fIgq3YcsX0qoyLv1ACbB42cjRpihM=)
                          14: beVtJzHKFjK6Tr9t766WX9OMZkU.roa (hash: yCD9PoTbplc2BO2pqqdu5R1ia0ternlf7MiRt0DunYM=)
                          15: ceoybuXlQ3WBZEFv3SPqIdLZ-oY.roa (hash: vo1hQ6j3PLPi60vs7fMThg1KentqZj8Uvxrpo64hJVA=)
                          16: lfcGZ7Zd2mpr_lQntvdaWJ2zu8M.roa (hash: UHawUyvd2k+0s5ilnpHGhVUpniI30Hfj0TIOdOhhyxM=)
                          17: mFQb2zLIdf_n7vAW_tOigWd7bLY.roa (hash: WSFPFfxp/6VwHtu0rDoCFS5OV8ru2PXGW/D81axbqLg=)
                          18: mSeqrM6ax77e1mH4N20zXtId-dc.roa (hash: CxkChAE9kvtH6F03AdsKyAbq+7FWtLM6nALOJbgV1tM=)
                          19: o4guHyoWEz9ezylB_aKjjJ-AqaU.roa (hash: 4/zXqSB5+vALqyttqwzCcQyLqlBurzLl72Ng1pMtoAE=)
                          20: oI5e-_SAjq5-KOljgvoqOH5qZ1c.roa (hash: AIZiiItx/uaHOcFi94L5EQmi0wVJ5oU+ej7y5Lf4eHQ=)
                          21: zo6G0Y9UPoHVswt3oHfvLrTVfMM.roa (hash: /hZvfcK+4NJwZBTy4hFuAn1JJaQAl3wZfQNBn0vPIVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1f:1d:ba:5c:86:54:c5:47:ef:a2:75:38:7e:4a:25:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Sep  6 13:01:05 2025 GMT
            Not After : Sep  7 13:01:05 2025 GMT
        Subject: CN=4cc652e3c78287bc43612c041a12f5d97502a5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4c:4d:5b:d5:77:f2:ce:a8:73:ae:82:ed:77:
                    b3:f9:0f:9b:fd:8f:96:8f:f9:b0:f9:7e:d1:67:61:
                    a8:55:9d:c7:e8:24:4c:a4:2a:b2:47:68:77:8b:ea:
                    ba:6d:8d:bf:ab:56:72:74:f4:ef:5e:9e:e6:f9:4f:
                    f0:b3:7d:5f:d7:0e:5e:47:a9:80:ba:cc:fc:4f:23:
                    b4:99:8f:c9:9c:64:9b:89:89:8c:31:ef:92:89:50:
                    4a:34:41:ef:e6:44:42:4d:f5:ae:74:19:b1:15:c8:
                    a0:fa:39:43:f6:98:1e:bd:db:84:73:4a:b3:b6:47:
                    16:b8:e4:ee:c9:cd:8d:bc:25:f5:1e:c9:8e:aa:23:
                    e8:fc:9d:c0:5a:30:3b:e1:3e:27:a3:c8:93:86:99:
                    95:19:db:65:3d:d5:c5:56:db:34:5e:63:3c:ac:2e:
                    b9:16:89:de:2d:5d:b0:80:14:37:80:46:50:a6:6d:
                    64:42:52:64:bb:b5:4e:59:77:08:c5:b3:87:6e:c5:
                    aa:e2:07:7e:20:b5:20:99:95:c0:94:c8:15:ed:4c:
                    6c:09:c1:24:eb:3b:20:9f:b1:39:82:53:83:91:0d:
                    d3:af:7e:45:d9:3e:1e:d1:6d:7c:c5:62:71:54:56:
                    a3:a4:ff:cf:e6:1b:71:1e:91:dd:6b:80:0a:1c:1e:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C6:52:E3:C7:82:87:BC:43:61:2C:04:1A:12:F5:D9:75:02:A5:F7
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b6:22:ba:3f:80:9d:e5:2d:a9:a7:97:99:f3:5f:b6:2e:14:
         35:67:2c:7e:00:37:0f:e7:5c:7a:e6:38:cf:90:60:c1:c3:ba:
         b1:11:47:e6:9d:b5:88:0e:a2:8a:f2:c2:df:42:ec:aa:49:79:
         73:6e:d6:50:74:71:79:9b:51:2d:6e:02:66:c0:02:f7:d5:92:
         cc:6e:56:36:ed:32:bc:21:ea:15:96:af:f5:26:ef:5c:55:99:
         a9:20:e8:64:26:e3:25:d4:83:34:53:38:38:fa:ad:4c:dc:dd:
         d1:f1:ff:7f:11:b0:6a:b0:3d:98:5f:c6:34:67:b7:e2:f9:35:
         d4:ef:2e:1c:5e:0d:4d:32:66:51:bd:80:36:fb:99:62:a5:71:
         77:c5:0a:e2:e0:4d:9b:43:02:a7:60:ca:5f:bd:06:a1:e1:18:
         26:81:24:0e:b2:a2:b2:60:ae:c5:d8:f1:5f:7a:63:8a:64:6d:
         e3:32:96:97:69:0d:ba:9a:ca:24:5a:d5:e1:61:56:aa:96:dd:
         1f:12:fb:e2:7a:f5:fe:c3:eb:3a:be:58:4a:87:02:58:a0:e4:
         e3:32:8c:74:5c:a7:d5:12:c3:13:4a:58:d9:5e:13:d3:db:d7:
         34:fc:2c:68:29:62:8f:34:e9:be:10:ef:19:ed:47:8d:fa:be:
         fb:51:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:28:39 2025 by rpki-client