Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
File:                     UbSboN2GFRKGGNUBWcsPO16e5iY.mft (raw, json)
Hash identifier:          +AGa0m8GHkPJxzUeYjcIz4+Z8AfGF3NlGfNDgqriS28=
Subject key identifier:   E0:4E:09:EA:D6:CE:63:8A:0C:E2:90:1B:91:68:D5:29:01:9B:64:CD
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019FCA8142832B94B1991FCA906DFCD98838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
Manifest number:          1A33
Signing time:             Tue 04 Aug 2026 02:01:36 +0000
Manifest this update:     Tue 04 Aug 2026 02:01:36 +0000
Manifest next update:     Wed 05 Aug 2026 02:01:36 +0000
Files and hashes:         1: 4o-bt20-Klk9OGwhcdkI9KciRV0.roa (hash: sjuZ/oHVjNQGQYCn+VBpDH3q6eM0bSoLTp3EsyAorJA=)
                          2: 9Vrbw_O4xKekP96wP7Th2eNuRYI.roa (hash: IV5izac1mW6bg49QkQffAoeLf5HNafZtYdLzjJd/NaY=)
                          3: BkC40mbaOV_h_YwTP9f-9NLfy-Q.roa (hash: 4vfqykfujOiIEaQCahXyp7UqTA/5c3kGM0M/jQ0Yj54=)
                          4: F0IbAy4DBD4R1tpVF-eK43aChYk.roa (hash: g2J1Nb8U1OTOvAcJ8xV0/WW6sKBzgLg58jRt1vEU/0g=)
                          5: G61IGV-qVysE3AlGnQSF9E763kc.roa (hash: 5T8UszbYAghLZWYkvCSK1dY/hveIiGYcEnE0LvucPtE=)
                          6: JxTJlWHniZNfk1trJwieQsRUeiQ.roa (hash: zzMqkyf/W/K6fVGFV5UK4srsQK4I9Y31GE3w4mOIyjA=)
                          7: Km4hDOg0NbnFT0nsO7NSUDVxcaQ.roa (hash: ZCLR8jB5C2O5+EVArhApY0n3E/d8OXX+wwPGL3MYfFg=)
                          8: Nw9oUx1P_ZziFM706koS9GS7FJw.roa (hash: LBN1Ui1EWKIEFENTjLzYQ+tIWeEdr58O2UDEZN8eSZs=)
                          9: OcuQVorUCHi5WKUI39CmfdVdoWA.roa (hash: vcMjpebS0VIkKN2bsCeCpSkVlxV67avU5muisGEFZqU=)
                          10: U8N9V5f6g17PGUfG184qCViLX5M.roa (hash: PzBiN1lWfFbDU85F/jIvz75WIsJRfnh+fMMH8DJLyug=)
                          11: UbSboN2GFRKGGNUBWcsPO16e5iY.crl (hash: v4ZVBsBd17eCh5yvkK5T/OzLnL22QcDSaM99hxsDjqA=)
                          12: WToKy8rJrvfp8-TBSiHkACiFJsQ.roa (hash: PV5YjtO/rMXFglaUhhnfQYN+zHAXqH37jd2cH6GeN74=)
                          13: WxLhQW-BYYj1MCIdzCtRB1evZGI.roa (hash: 487fbb0witkUDry4Pl1JzYBOvcJK9C5a1Rd+loszMwM=)
                          14: YtYh52858tvFRXRrF4Yoq2mt-1U.roa (hash: IooLs7GIFuYVqgToYsrqhBFdbWxeSAM2xbljnr1et+8=)
                          15: jJwVz-Jdedm4kofDDixamlf1mnE.roa (hash: MEYCS8IqIgHLKEjQoiORKaEcoLqxNfD5TbE+WgHYD1I=)
                          16: sp4eXDrFmErVZ6Dk1aXUWw9GmSw.roa (hash: LanOB0N6OiW0u1qpF+oiRub4pPCTxR2tdcMDM8mFHK0=)
                          17: v1HgD32Ce7-tySs2xjX-vUslX0o.roa (hash: DNjNNi0jFs6bj2lpBoIBKwXpxJpmQcT0MSPaBOT0gg4=)
                          18: we1HhcHWphYj56bx4pbUty8AfoA.roa (hash: 1PIXugNWGKX8aBPaeifcn9qP+hmNxyZInT/FeXXmQsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ca:81:42:83:2b:94:b1:99:1f:ca:90:6d:fc:d9:88:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Aug  4 02:01:36 2026 GMT
            Not After : Aug  5 02:01:36 2026 GMT
        Subject: CN=e04e09ead6ce638a0ce2901b9168d529019b64cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:20:29:17:c3:47:e9:85:46:0e:44:a7:b5:
                    ce:d9:c1:67:43:97:53:e5:b6:ed:20:6e:36:f9:d4:
                    b0:85:01:bb:c1:23:68:61:c0:57:87:3d:1f:12:0f:
                    74:c7:77:8e:63:e3:ef:52:db:95:e5:50:c2:46:58:
                    2f:fd:1b:68:b0:ed:3f:6a:3a:ee:cb:73:94:66:d4:
                    cf:36:d5:97:c6:07:37:55:15:e0:78:87:48:ae:c1:
                    b3:dc:bf:8e:ca:6c:f9:59:e4:cb:20:3c:f4:bb:59:
                    63:b7:5d:67:c1:f2:a5:53:f0:ce:05:2e:82:d1:56:
                    32:c9:e9:5b:a6:8d:fc:44:76:0a:13:14:82:7a:cb:
                    d0:71:4b:13:a7:b1:e8:80:7b:41:ad:d0:2b:6b:6c:
                    f8:c5:7f:9c:e1:eb:8a:f3:1f:36:79:ac:f0:e7:ca:
                    ee:6d:25:48:67:72:d9:d8:d2:58:63:2f:11:96:25:
                    bf:d4:5e:7f:0f:04:24:a6:8c:86:88:39:8d:9c:81:
                    c2:3d:8f:92:b1:9a:e2:df:db:b7:86:a3:8c:15:d8:
                    99:8e:3d:32:c5:db:42:fb:86:fa:6c:4f:ee:78:a1:
                    69:5f:b0:64:de:b6:a9:0e:e9:eb:68:28:cf:32:fb:
                    ba:01:f1:86:ad:db:e3:3a:5f:b7:0a:9a:f1:04:9a:
                    93:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4E:09:EA:D6:CE:63:8A:0C:E2:90:1B:91:68:D5:29:01:9B:64:CD
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:23:a3:d6:6a:64:52:9a:6f:71:fc:5c:d6:82:36:ff:01:bf:
         73:a2:07:ed:2e:85:4e:09:40:98:5a:28:6a:88:fa:0e:16:e0:
         2d:65:9e:85:3f:bb:d4:6f:69:2d:cf:3c:52:5b:54:bb:08:9d:
         30:1f:41:d0:b1:27:03:f8:c2:c3:6f:14:ce:c0:e4:1d:09:99:
         27:9a:01:70:71:d8:db:2d:05:10:a4:cf:36:9d:cc:25:bf:13:
         c7:33:81:8a:8e:84:86:66:16:9b:4c:07:48:5a:4d:3f:ce:0c:
         32:50:6a:d8:71:64:8b:11:8a:d2:0c:ae:3a:2e:d5:45:a8:1a:
         fd:c0:a5:e7:a2:b5:2a:bc:88:1f:38:bc:6a:78:7b:d4:0e:43:
         79:b9:f1:ad:52:71:52:8c:1f:1c:f8:61:15:fc:97:f4:90:f9:
         ae:a2:9a:28:38:22:cb:7b:af:60:b4:c3:a3:4d:ad:7f:64:10:
         7a:af:be:be:ff:32:b8:a6:62:2e:c8:41:c2:a7:ee:e7:30:be:
         3d:9b:35:a1:21:ea:2c:82:a6:5b:dc:af:66:6d:50:1b:da:a3:
         5a:7c:c6:97:24:d4:45:f2:0f:1c:1c:f6:28:45:b0:b6:78:a4:
         8c:98:eb:91:5e:9a:45:f6:21:3d:91:7e:97:3b:f3:34:ab:d5:
         03:f2:a2:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/KgUKDK5SxmR/KkG382Yg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5
ZWU2MjYwHhcNMjYwODA0MDIwMTM2WhcNMjYwODA1MDIwMTM2WjAzMTEwLwYDVQQD
EyhlMDRlMDllYWQ2Y2U2MzhhMGNlMjkwMWI5MTY4ZDUyOTAxOWI2NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IsgKRfDR+mFRg5Ep7XO2cFnQ5dT
5bbtIG42+dSwhQG7wSNoYcBXhz0fEg90x3eOY+PvUtuV5VDCRlgv/RtosO0/ajru
y3OUZtTPNtWXxgc3VRXgeIdIrsGz3L+Oymz5WeTLIDz0u1ljt11nwfKlU/DOBS6C
0VYyyelbpo38RHYKExSCesvQcUsTp7HogHtBrdAra2z4xX+c4euK8x82eazw58ru
bSVIZ3LZ2NJYYy8RliW/1F5/DwQkpoyGiDmNnIHCPY+SsZri39u3hqOMFdiZjj0y
xdtC+4b6bE/ueKFpX7Bk3rapDunraCjPMvu6AfGGrdvjOl+3CprxBJqTxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBOCerWzmOKDOKQG5Fo1SkBm2TNMB8GA1UdIwQY
MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt
NGFiOWU4YWEzMjYyLzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy
LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSOj1mpk
Uppvcfxc1oI2/wG/c6IH7S6FTglAmFooaoj6DhbgLWWehT+71G9pLc88UltUuwid
MB9B0LEnA/jCw28UzsDkHQmZJ5oBcHHY2y0FEKTPNp3MJb8TxzOBio6EhmYWm0wH
SFpNP84MMlBq2HFkixGK0gyuOi7VRaga/cCl56K1KryIHzi8anh71A5DebnxrVJx
UowfHPhhFfyX9JD5rqKaKDgiy3uvYLTDo02tf2QQeq++vv8yuKZiLshBwqfu5zC+
PZs1oSHqLIKmW9yvZm1QG9qjWnzGlyTURfIPHBz2KEWwtnikjJjrkV6aRfYhPZF+
lzvzNKvVA/KicQ==
-----END CERTIFICATE-----
Generated at Tue Aug 4 08:53:57 2026 by rpki-client