Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File:                     UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier:          VTLtT+0nkxyzIj45jR+kE111A0dSRgsjm60DEo4d4j8=
Subject key identifier:   39:6A:18:30:A9:1E:69:20:62:8C:7F:81:73:E8:DC:40:C7:DA:83:61
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer:       /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial:       019F1B9F4C5AE652D1ACD244D8EB540859C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number:          0CF7
Signing time:             Wed 01 Jul 2026 03:00:52 +0000
Manifest this update:     Wed 01 Jul 2026 03:00:52 +0000
Manifest next update:     Thu 02 Jul 2026 03:00:52 +0000
Files and hashes:         1: AL0W8JafgnmPnnZBBZOLnMOElHU.roa (hash: W7hf6DI9RRqdDA51Pz50C4flOR9nQCePHPNNbBEGwT8=)
                          2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: mwkSgtV6faE6uC7ZGq9TtB0TFUdo7jNmk9UDH/K6tqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1b:9f:4c:5a:e6:52:d1:ac:d2:44:d8:eb:54:08:59:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
        Validity
            Not Before: Jul  1 03:00:52 2026 GMT
            Not After : Jul  2 03:00:52 2026 GMT
        Subject: CN=396a1830a91e6920628c7f8173e8dc40c7da8361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:52:f3:8b:c7:77:5e:3c:26:57:1a:e9:37:
                    1e:78:34:5e:47:ba:60:58:d5:f6:e3:e9:3a:0f:5d:
                    24:64:4c:ff:85:f5:07:6b:5a:eb:aa:29:a2:71:9a:
                    fe:2c:29:43:2f:b8:05:51:ae:ce:0f:bf:fc:24:30:
                    4a:4d:d8:94:59:a7:7c:b5:b1:cc:cb:a7:47:d9:08:
                    10:55:9b:17:d3:b0:de:29:ed:08:16:92:7d:e1:c0:
                    03:e7:d4:17:80:b2:10:76:b2:a6:cf:ec:e7:9b:6a:
                    ee:63:d1:c1:bd:8e:e9:a5:97:4a:3e:c7:1e:fd:7f:
                    79:af:45:79:28:b7:e8:23:66:65:3b:0d:1d:d6:7e:
                    10:47:9e:76:83:74:2a:3b:f6:4b:d5:fb:2a:b5:a9:
                    1b:03:28:79:9a:18:d2:ef:b4:08:ce:43:71:c2:b4:
                    5b:7c:45:36:47:34:b1:15:89:fd:dd:2f:a2:a1:1c:
                    15:b4:d7:b2:5a:a5:8c:4f:47:db:df:b7:1e:e0:5e:
                    f2:60:0e:30:74:5e:8d:ec:6d:da:71:49:2c:a1:3e:
                    f0:fb:56:7b:70:a7:a9:24:d2:4b:24:5d:ec:f7:bb:
                    1a:25:46:06:a7:d7:28:82:b4:5a:37:83:6e:95:6c:
                    ce:e7:40:d8:e2:d2:c9:50:81:99:90:f2:4e:80:8c:
                    69:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6A:18:30:A9:1E:69:20:62:8C:7F:81:73:E8:DC:40:C7:DA:83:61
            X509v3 Authority Key Identifier:
                keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:72:77:5d:d0:0e:f1:9a:bf:cd:62:4d:dc:ee:74:98:b1:fd:
         aa:67:f8:af:63:6f:b5:03:85:48:9a:47:9b:55:ad:f2:e5:5a:
         ce:6e:64:60:b8:73:1b:f9:44:55:e1:ab:fd:82:77:41:e3:34:
         8d:ba:03:6f:c7:11:fc:67:30:cc:9d:2a:24:50:cd:9f:48:79:
         af:6f:2b:e4:2b:87:e9:05:ef:90:f3:db:af:48:7d:de:a2:2a:
         a1:55:9a:8f:8c:b7:8d:25:30:7f:40:0f:a7:8c:60:87:a0:5a:
         cc:b0:bb:af:eb:97:2c:fa:b1:b4:3f:eb:13:9f:33:7e:6d:4d:
         eb:ae:69:7e:21:1d:22:06:4d:ba:11:49:a0:d0:42:cc:4a:22:
         01:63:26:4c:77:d2:3c:84:19:46:17:e1:d8:83:27:af:b1:2f:
         8a:b7:2a:05:5a:3b:c3:0d:91:47:3b:b0:78:3f:99:72:fc:56:
         fe:af:b1:da:f4:22:95:4d:05:cc:a2:05:a2:69:fb:d5:97:31:
         46:fa:76:28:ba:a3:ed:d5:85:dc:6d:ce:17:15:09:42:ae:a2:
         7e:8f:2d:4c:71:7d:fb:e0:d7:63:f3:dc:e6:a8:aa:e4:98:5f:
         49:ee:a5:fc:63:ee:50:67:3d:81:79:26:47:d4:2a:f9:33:48:
         d9:4e:18:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 06:31:41 2026 by rpki-client