Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
File:                     UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft (raw, json)
Hash identifier:          vgS3yw4wgKKpfr8SLDj+JzUKDzNbO8Qgz4ubeXvXYZc=
Subject key identifier:   73:F7:AE:33:89:74:36:BC:1D:4B:F9:6A:42:78:C6:96:69:EB:A5:7C
Authority key identifier: 50:10:9C:EA:34:8A:09:D3:90:17:0B:2B:50:FD:4F:2F:4F:A0:C0:71
Certificate issuer:       /CN=50109cea348a09d390170b2b50fd4f2f4fa0c071
Certificate serial:       01A094354262B9010E0914F04A92F3D06376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
Manifest number:          0148
Signing time:             Sat 12 Sep 2026 06:01:53 +0000
Manifest this update:     Sat 12 Sep 2026 06:01:53 +0000
Manifest next update:     Sun 13 Sep 2026 06:01:53 +0000
Files and hashes:         1: UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl (hash: PWidskdPJRltloZYSUeo2SzjdE6zgjAlcr6l6BQKvG8=)
                          2: VlDvPryAuk2PGBFGwuY-gCe_F5A.roa (hash: TJR1bUgs/pW0JpJ4B506N0MthyLFTUA8QuoRDNEKpko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Sep 2026 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:94:35:42:62:b9:01:0e:09:14:f0:4a:92:f3:d0:63:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50109cea348a09d390170b2b50fd4f2f4fa0c071
        Validity
            Not Before: Sep 12 06:01:53 2026 GMT
            Not After : Sep 13 06:01:53 2026 GMT
        Subject: CN=73f7ae33897436bc1d4bf96a4278c69669eba57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:92:b2:90:48:54:8e:00:3d:36:c1:6d:c4:
                    8b:39:70:a4:ae:3d:7d:60:72:96:ca:a6:43:9e:40:
                    d3:69:ed:61:9f:12:4b:13:16:84:ef:89:88:e2:44:
                    c1:ad:a8:5c:a4:dc:c3:ba:06:33:49:0f:fc:ba:2f:
                    80:7d:73:95:ed:80:82:4a:06:a0:85:47:00:25:ea:
                    8a:70:29:7e:45:7e:c6:40:e7:81:ae:e3:98:48:f6:
                    98:19:f2:5f:94:57:52:3e:26:f4:22:97:99:2c:38:
                    ed:92:0f:38:99:7a:bd:83:b6:10:88:4c:bd:44:66:
                    9f:42:c2:92:31:8b:aa:07:d4:29:20:84:51:96:c2:
                    ea:16:40:26:3b:b7:d0:36:b2:93:89:3b:0b:a1:9b:
                    4c:4a:a4:bb:25:a4:9c:61:6a:8c:71:db:06:72:74:
                    3a:72:4a:0d:51:a9:4d:fb:27:ea:62:1f:56:db:84:
                    3b:1a:0d:82:75:22:56:ef:19:7c:e9:54:e1:25:2c:
                    f7:a0:8a:b5:b4:4d:46:db:92:25:4f:93:83:8c:9c:
                    fc:31:26:85:e1:a9:2c:60:24:43:cd:e4:57:e1:84:
                    41:08:7e:28:98:8c:ae:fe:1d:7f:76:ad:80:f3:62:
                    c0:03:73:49:b6:93:09:26:8b:17:a5:2e:68:22:3c:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F7:AE:33:89:74:36:BC:1D:4B:F9:6A:42:78:C6:96:69:EB:A5:7C
            X509v3 Authority Key Identifier:
                keyid:50:10:9C:EA:34:8A:09:D3:90:17:0B:2B:50:FD:4F:2F:4F:A0:C0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:fa:96:40:35:ca:e3:9b:b3:d8:37:95:81:e5:46:77:24:b3:
         2d:3a:77:8b:be:ac:9e:d9:92:74:00:d0:12:d4:f8:0c:8a:f7:
         03:86:6e:ec:29:eb:e5:5d:9e:00:7f:f9:6e:8f:c1:cc:f9:48:
         39:64:d7:25:a8:ac:8e:1c:57:f4:46:48:43:d7:50:33:83:cb:
         98:2e:9c:70:f3:9f:5d:71:67:f9:30:9c:f8:10:19:93:db:74:
         c0:f6:54:e6:4d:f0:b9:98:7b:ba:ac:3f:d1:b4:92:fe:a2:02:
         ff:b4:4b:30:68:f6:7c:3c:54:90:77:bd:5c:e5:02:4d:80:90:
         71:52:78:b9:bc:ed:f7:d4:77:46:30:ab:5e:f7:9e:95:72:07:
         86:6d:a5:36:b8:a3:5a:29:69:46:65:5d:74:bc:cc:f1:1f:67:
         2e:58:a7:40:20:07:64:3b:f7:0b:ae:e5:9d:2f:7f:85:e7:05:
         e7:59:f3:47:e7:94:89:09:40:a8:dd:11:e5:56:6c:57:b7:f7:
         c9:4c:b4:73:af:2f:44:c7:b2:d3:1e:92:a7:cb:3c:40:ac:bc:
         0f:b2:91:32:2e:8a:cd:ab:41:e6:2e:4f:79:ca:17:96:78:57:
         7e:4d:42:04:d5:80:d2:2c:0d:ef:ba:10:eb:39:67:ff:c5:f9:
         e0:81:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 13:37:22 2026 by rpki-client