Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
File:                     Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft (raw, json)
Hash identifier:          zHT6pa/ghB4qBi3/7Q+cygusa6HJgicZT+ZuMGDe2hs=
Subject key identifier:   9E:BD:06:8F:36:42:AC:20:C3:FD:E4:E5:D1:6F:AC:7B:73:D8:37:9F
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Certificate issuer:       /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial:       01A08B311D5A3231C8DEA88C4F6CA22EB96D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
Manifest number:          0A63
Signing time:             Thu 10 Sep 2026 12:00:46 +0000
Manifest this update:     Thu 10 Sep 2026 12:00:46 +0000
Manifest next update:     Fri 11 Sep 2026 12:00:46 +0000
Files and hashes:         1: Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl (hash: NDPoGqT0Fn3eB7RUuKxGWQ6kOzCOZ9lHhGUe5c0bOXA=)
                          2: cYBrnaocLjA_DaHgp5BukHetZEw.roa (hash: WSYQBuYEacORy4ZqYo8p12iSgdVpFErki2QNc5JX+Q8=)
                          3: nfAlOJt-tJuBQ6TVdWgraK4LPcs.roa (hash: u0sCdtCOmFGO0vVCgVhH5vis+INdwLq690ISXBM58Ak=)
                          4: re1kMr4ZO4EcntSxzQLItfZHji4.roa (hash: pb/ZpVFwMQItfSjJxD0Eukfy73dUuFN63jAongafzPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:31:1d:5a:32:31:c8:de:a8:8c:4f:6c:a2:2e:b9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
        Validity
            Not Before: Sep 10 12:00:46 2026 GMT
            Not After : Sep 11 12:00:46 2026 GMT
        Subject: CN=9ebd068f3642ac20c3fde4e5d16fac7b73d8379f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:fa:ad:b3:42:bb:f5:b1:04:56:92:aa:70:
                    78:5c:25:15:de:50:dc:ed:4a:e8:06:c4:b0:e4:7b:
                    d4:3c:f1:92:24:6c:a4:ca:4e:10:c0:0c:02:99:c9:
                    c1:86:23:a8:fd:a8:c3:d4:4a:5c:51:dc:fc:17:c7:
                    30:17:2b:38:dc:59:9c:16:a4:3e:cc:88:0a:2f:45:
                    83:16:63:70:32:05:73:bd:3d:a6:be:6b:7c:5a:6c:
                    77:32:e7:a3:46:85:0e:4e:6a:eb:87:2b:7c:52:cd:
                    78:12:73:81:a5:95:67:5f:94:b3:c5:56:07:bf:b5:
                    f1:61:8a:fb:cd:03:7b:58:65:6a:a6:b2:4a:63:bf:
                    3f:1f:45:70:e4:6c:f7:ca:96:5e:88:45:f0:a1:2d:
                    fc:98:a2:c3:b3:96:bf:1a:fb:bf:c0:49:f0:c1:e3:
                    91:6f:b7:10:37:8c:66:f0:13:99:d9:57:c1:25:84:
                    2b:1d:d0:29:46:76:3b:58:f8:bd:4a:3a:e8:21:15:
                    33:5e:2d:df:2d:69:ec:63:a1:e3:b1:cc:a7:5b:8b:
                    f3:b4:1e:a3:77:ac:11:1a:5a:41:5b:67:d9:68:5d:
                    31:f4:0c:6e:75:a5:de:5a:3a:87:ae:a5:61:9f:cf:
                    b1:8a:2f:2a:74:10:84:bc:bc:b7:f7:ae:5b:32:7f:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BD:06:8F:36:42:AC:20:C3:FD:E4:E5:D1:6F:AC:7B:73:D8:37:9F
            X509v3 Authority Key Identifier:
                keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e3:89:06:7a:b5:99:46:2a:dd:69:90:9c:a7:31:1d:95:f4:
         af:f5:4a:8f:af:c8:33:d1:c8:07:68:1f:20:43:34:3b:3d:51:
         44:52:5f:86:32:d2:66:7e:59:21:e9:1a:35:15:85:f2:09:f4:
         e3:91:e4:f1:8c:f4:5d:b6:a0:60:9d:bb:eb:05:e5:01:c2:ed:
         aa:47:a3:25:9b:2c:bb:cb:5f:82:bd:4e:43:d4:83:c0:4a:1d:
         5f:7a:60:32:23:02:f0:5f:df:e2:90:2a:19:2e:b2:36:c5:83:
         6e:e2:25:dc:db:b3:40:bd:8c:29:d0:62:d6:7f:ed:5b:b7:f6:
         54:09:c4:74:0b:0d:5d:b9:55:49:70:15:b7:3d:dc:8f:86:91:
         76:c6:c9:e4:9d:db:94:ad:bf:05:35:41:3d:e8:e4:a7:46:14:
         14:8b:15:91:6e:51:fc:e2:43:a1:35:5b:4e:fa:37:01:69:1b:
         33:d8:69:00:89:a1:ad:28:6a:e3:a2:e7:b9:f0:6f:56:96:5a:
         57:cc:90:7c:48:fe:b1:96:7e:ad:25:59:b6:4a:2e:a2:00:57:
         d2:04:3d:7d:1b:3f:09:d6:c7:0a:14:95:6b:af:00:c1:61:ce:
         65:42:e7:30:3f:05:d5:56:41:8d:92:42:87:b5:50:63:73:76:
         97:df:b8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:32:48 2026 by rpki-client