Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File:                     ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier:          dr5c52dCJhOp36zAy+f9I0Bm88Ba9jdCFM7Fup+1ZJ0=
Subject key identifier:   4B:BA:D5:F4:FC:85:FD:6B:E4:13:12:1B:3A:C4:1F:90:EC:01:AB:16
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer:       /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial:       019FA03AF9CDD37D109C611F80E1280F5309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number:          0E52
Signing time:             Sun 26 Jul 2026 21:00:47 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:47 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:47 +0000
Files and hashes:         1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: tTHecLVGB+VaUh3vWTNnMR5PYHnD6VE2PSJGAnjDgH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:f9:cd:d3:7d:10:9c:61:1f:80:e1:28:0f:53:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
        Validity
            Not Before: Jul 26 21:00:47 2026 GMT
            Not After : Jul 27 21:00:47 2026 GMT
        Subject: CN=4bbad5f4fc85fd6be413121b3ac41f90ec01ab16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:7e:fd:57:63:c4:6d:2f:50:9d:b8:45:9b:
                    78:ea:53:1c:69:0a:90:09:99:e6:88:a6:32:98:4a:
                    3a:ab:dd:62:dd:18:f1:87:4d:23:bb:6e:e0:b3:2b:
                    08:3c:48:ad:4b:b5:fa:17:15:f2:80:ca:49:03:da:
                    85:88:be:2b:e7:df:05:d5:59:f0:2e:b6:5d:d8:55:
                    41:1d:09:f7:67:8b:ec:f5:c4:e2:9a:89:33:5f:e8:
                    73:f9:bf:94:e5:bd:36:ee:0e:51:1d:1a:e8:85:fb:
                    9e:b9:92:30:ef:59:8e:30:f5:06:d6:b0:f7:3a:4e:
                    38:c1:f3:20:5c:5b:74:e1:74:be:2a:d8:d6:8d:ee:
                    92:e8:35:77:74:39:4b:48:36:ea:ab:6e:b0:39:0e:
                    fa:1e:e8:f4:bd:55:65:b1:ac:12:95:e3:7b:4b:c4:
                    fa:91:73:d2:b4:71:16:3d:31:2b:8b:bc:ea:26:01:
                    90:15:0d:9d:9b:20:52:06:d7:bd:e5:4b:92:be:fa:
                    ea:fc:04:9e:86:97:82:88:ea:7c:48:52:fd:dd:a5:
                    7d:d6:06:e5:c2:0c:b9:0e:f0:ab:e2:13:62:86:7c:
                    7e:e6:0d:0e:a6:4a:b2:71:d3:e3:31:3a:56:9b:14:
                    15:43:56:92:e5:73:3e:9e:4c:92:4f:00:a4:c1:66:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BA:D5:F4:FC:85:FD:6B:E4:13:12:1B:3A:C4:1F:90:EC:01:AB:16
            X509v3 Authority Key Identifier:
                keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e5:ea:8f:53:a5:bc:1a:5b:7f:1e:4a:45:c1:c8:82:ea:e5:
         de:dc:99:24:b5:18:26:0c:63:29:4b:b7:2d:74:b9:9e:d4:97:
         ea:07:68:e6:5a:8c:58:7a:b1:01:12:ad:bc:2e:ef:90:32:0b:
         cd:a4:b8:a0:35:52:da:19:fc:32:0a:07:ce:78:4d:4d:11:c4:
         0b:e3:f8:5b:24:a0:af:73:97:d8:02:31:16:c0:fd:53:70:9b:
         e4:52:79:56:a1:b6:32:7e:68:fd:23:2e:81:86:0e:ee:84:3b:
         f4:49:7d:f2:55:89:1d:9f:d7:1f:02:d7:dc:0d:22:7f:ea:d4:
         df:eb:69:b3:a5:a4:62:74:73:2c:c9:d1:e3:14:9e:ac:a9:32:
         c0:0b:82:83:d8:09:d6:5e:bc:e0:5a:10:3a:e0:09:0a:81:29:
         14:c5:c1:bc:51:a0:78:70:44:61:60:10:80:d0:6e:b3:0d:48:
         63:c2:01:47:2a:d9:ed:86:23:92:90:ae:db:2b:02:1c:37:8d:
         52:05:38:0d:86:c3:a2:71:29:2d:1c:ff:25:0a:f2:d3:eb:6c:
         2c:0b:2a:41:10:6d:63:b5:98:5f:f3:c8:ae:f4:e8:e1:41:18:
         5c:2e:8c:db:8a:10:6d:03:64:dd:b5:a4:eb:73:2c:0f:05:ef:
         7e:b1:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:24 2026 by rpki-client