Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File:                     UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier:          wjFtSLk/7X2OOP9/rXDZfe3xPunBIKFzG4cp5J+5wvo=
Subject key identifier:   E3:E2:B4:D5:0A:29:60:23:21:BC:F4:E9:56:F8:07:CC:51:35:29:6D
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer:       /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial:       01A0035E1562E1D26D2AFE08D36E99BA4CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number:          0D6F
Signing time:             Sat 15 Aug 2026 03:01:32 +0000
Manifest this update:     Sat 15 Aug 2026 03:01:32 +0000
Manifest next update:     Sun 16 Aug 2026 03:01:32 +0000
Files and hashes:         1: AL0W8JafgnmPnnZBBZOLnMOElHU.roa (hash: W7hf6DI9RRqdDA51Pz50C4flOR9nQCePHPNNbBEGwT8=)
                          2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: oneyFghnHYJLUG5h/1/6KcMtvuJMQrqOkcum3b9GZ7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:15:62:e1:d2:6d:2a:fe:08:d3:6e:99:ba:4c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
        Validity
            Not Before: Aug 15 03:01:32 2026 GMT
            Not After : Aug 16 03:01:32 2026 GMT
        Subject: CN=e3e2b4d50a29602321bcf4e956f807cc5135296d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:71:9f:5c:ff:99:05:07:83:40:f4:82:f1:
                    0b:24:b1:3e:ca:a4:08:45:b5:c5:0a:a0:bc:08:d3:
                    db:db:c1:37:20:ab:41:7a:75:5a:6b:8d:37:0d:bf:
                    e9:38:b3:e3:56:a2:25:c7:80:57:f9:a3:39:ad:13:
                    bb:17:05:03:e5:f1:09:13:f7:6e:08:16:cc:8d:e1:
                    8b:8c:20:d0:f8:3d:09:6c:b8:53:59:ee:98:f3:94:
                    0f:e0:fd:39:c2:21:eb:a3:90:cc:5d:df:9e:5d:e6:
                    71:bb:ea:3b:e6:07:07:e0:d2:61:d9:f3:33:44:96:
                    1c:33:66:26:ac:b6:e8:42:7a:b0:8b:1d:1b:9e:d6:
                    bc:b9:48:9f:37:66:39:3b:09:84:1b:19:01:01:1c:
                    35:bf:6c:f6:05:69:71:c4:84:ca:b7:45:98:8c:aa:
                    1c:8d:ea:37:19:9c:71:4b:74:dd:ae:91:66:9d:6d:
                    a0:7b:df:62:d1:27:04:46:16:d0:f7:43:9c:3c:97:
                    19:03:c7:3a:4c:96:be:e5:df:4f:16:82:21:cc:b3:
                    e9:ab:c2:c4:d6:84:c7:0a:31:ea:16:bd:71:8f:55:
                    8f:27:c1:df:86:5e:f5:d4:7e:f8:51:a7:d7:ee:4c:
                    b2:69:fb:e3:31:0e:95:b9:8a:97:4f:e6:d0:cc:7e:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E2:B4:D5:0A:29:60:23:21:BC:F4:E9:56:F8:07:CC:51:35:29:6D
            X509v3 Authority Key Identifier:
                keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8a:a9:0d:fc:f4:b7:89:ab:ff:6b:2a:98:cc:36:1e:db:75:
         db:ba:fb:ec:dc:22:f9:39:76:1a:81:4c:0b:6e:b9:30:8d:e1:
         22:ef:a2:9a:7e:f2:c7:1c:0d:c2:dd:05:09:91:a9:a3:77:95:
         07:ff:bc:45:57:48:10:3a:7a:9b:e4:8f:72:08:86:09:1e:da:
         cb:0d:27:99:14:96:6d:4b:18:57:d2:76:37:16:43:a4:da:f3:
         64:b4:a9:2d:93:9a:a3:1e:77:30:ef:63:64:18:40:d3:67:b3:
         c2:ed:0d:35:fa:62:8e:34:7d:10:f5:f9:c0:23:80:d2:0c:2e:
         8e:52:cc:d6:ee:d7:91:e5:91:de:69:ad:3f:30:d8:9e:39:46:
         81:73:cf:5e:36:4b:4b:0e:38:30:be:70:cc:3f:15:1c:2f:57:
         5e:c2:27:c7:42:02:c6:c4:d3:1c:5a:50:f9:ea:bf:0e:7a:99:
         bc:32:02:cc:d0:a8:a3:29:22:1e:c1:a0:10:02:7e:4a:fe:49:
         75:a2:e8:4b:b8:31:41:d3:ab:2b:96:18:8f:2f:01:87:19:9c:
         7a:8d:f6:d3:d9:86:6e:ce:e8:cd:68:a9:b2:6a:38:68:c3:49:
         74:73:4d:31:ee:a2:ad:e5:7b:85:76:aa:0b:35:59:89:f8:74:
         83:e4:3b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:54:34 2026 by rpki-client