Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File:                     ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier:          4klnPmjp0CjGASdxrkkZP7Lq3bbMPdWf85udUGra1Bg=
Subject key identifier:   00:62:EE:4D:39:43:A9:41:42:3D:B9:29:D3:D0:04:15:7B:C7:2D:C7
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer:       /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial:       019EB921DA91C0FF4C3E48F61A7870341A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number:          0B26
Signing time:             Fri 12 Jun 2026 00:01:03 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:03 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:03 +0000
Files and hashes:         1: 0UnyCR-s9iVj-44nCnj3n-e4xtA.roa (hash: qIADwbji8igygxrgQjLDhHXbAfWGtCs+G3X3x04AbP0=)
                          2: MY0oyyxJxhBaxV6e35Jj6RwVRN4.roa (hash: b5AkjRiP8AjbeAnZmdI+p2iRLfqlwKytew/Xvvx0yg0=)
                          3: UIXymbU01AcELRK4XQgaDZSENDk.roa (hash: XHkCVd4jVL4ur9JpM+WZI6Fqyp3dAyt/v/b4jYj6KaE=)
                          4: eG6Nd0AEheFJzh2ZzgIc-HGYq9Y.roa (hash: tN9thuUXDSgdN1PacHIHF6V4krE+2Pkx1P2dF2wQPtI=)
                          5: lhhkdnjbTFcMf_WSQ6Vdc7cUgLg.roa (hash: vPcYoUUrECmWg0bzxsg1BXvUiLIZvalyKunX15L0XGc=)
                          6: q_YJm9uusZ1gdH6rfgf8d1zvcNE.roa (hash: 7dAiJ/6GQJnXgS5Q7uLwSzG/j868J9jWgDmOCQtKyWM=)
                          7: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: 76DMK2NQe0wcBnFZH41eGp/tKltCpIc2HGl4sumCpZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:da:91:c0:ff:4c:3e:48:f6:1a:78:70:34:1a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
        Validity
            Not Before: Jun 12 00:01:03 2026 GMT
            Not After : Jun 13 00:01:03 2026 GMT
        Subject: CN=0062ee4d3943a941423db929d3d004157bc72dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:33:89:04:81:77:11:1e:47:57:04:fa:07:
                    44:14:bd:b7:23:84:6a:59:19:6c:03:cf:db:61:89:
                    fc:96:e9:41:39:bf:f9:27:ac:89:86:e5:ba:55:d9:
                    18:98:5d:8c:8a:47:2c:54:b6:5b:c6:64:f0:1f:6b:
                    a8:2f:55:e2:0f:63:cb:d0:34:05:b4:3a:1a:c3:58:
                    3c:87:7c:fe:11:b7:2e:b8:ef:72:4c:47:3a:77:78:
                    09:73:14:34:bc:42:b8:d5:c9:86:d5:bf:10:79:4f:
                    5e:1b:dc:15:e5:6d:82:1e:a6:39:5b:ed:9a:06:07:
                    d8:ff:82:b3:8f:55:dd:d0:8a:90:4a:e6:1a:7d:ce:
                    8f:83:78:4b:3c:49:f9:4b:45:e4:4a:7d:3f:90:d7:
                    4b:c9:de:ce:9f:9f:eb:bf:9d:f2:3c:7c:0e:2a:fe:
                    53:b3:d5:42:e7:1c:20:48:7e:b5:5a:4f:16:d1:28:
                    dd:b0:11:38:54:31:38:57:79:ed:4c:9f:26:ae:f9:
                    7d:45:f6:29:d8:b2:6a:d8:9c:98:34:9c:42:a4:c0:
                    2e:45:dd:cc:5e:26:ed:6c:cb:d3:73:d2:ae:e1:88:
                    a7:dc:d7:49:4a:c6:01:8d:99:f0:9b:fd:70:a6:52:
                    12:64:7c:81:23:3d:f1:f1:fe:fc:c4:84:9b:d0:b7:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:62:EE:4D:39:43:A9:41:42:3D:B9:29:D3:D0:04:15:7B:C7:2D:C7
            X509v3 Authority Key Identifier:
                keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b3:42:a8:de:ab:5d:a2:45:c7:b6:37:9d:22:5c:c0:95:73:
         8e:e8:13:cc:f5:8b:47:63:83:16:f5:41:34:ed:77:36:4d:6d:
         6a:45:44:02:d4:dd:45:05:f7:55:29:83:c2:3a:bd:4f:3e:65:
         52:87:59:96:dc:dd:93:a2:de:12:2a:02:1d:63:d8:f1:be:ec:
         73:11:e3:f5:2a:7d:7f:b5:6f:1a:3a:2b:b0:11:d2:f9:38:bf:
         46:a9:20:58:f6:7e:c8:5a:b8:27:88:b8:97:54:26:09:66:db:
         f9:62:9c:8b:73:04:83:43:9a:44:7a:91:b4:1d:62:a3:4a:6f:
         a3:89:49:52:f3:bd:0c:00:6b:cd:91:ca:4d:63:d0:0c:b6:bb:
         69:e4:f7:bc:94:48:89:c6:59:fd:2a:92:9b:d8:1b:92:bb:53:
         3f:91:d2:e5:3d:54:01:7a:1e:e8:47:b7:4f:9f:e0:9d:92:bf:
         8d:55:40:f4:7b:7b:44:ce:ed:18:01:41:60:4f:6f:17:e1:a1:
         ab:18:62:21:ab:fa:fd:29:f9:fc:27:34:f2:7d:da:ca:75:79:
         7a:b2:a0:8a:9c:ca:4f:11:4d:e7:2b:83:72:44:1b:22:18:e3:
         0d:78:2f:1d:ea:ef:58:2d:78:1f:01:16:cb:35:76:ab:31:05:
         16:08:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:09:57 2026 by rpki-client