Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft
File:                     _ubQl9bBh0oVzIxu61MpAULPB6k.mft (raw, json)
Hash identifier:          qpGPF3S0u2QH/opk+Dw27TD3BW7QH5TVXgK5t1hfpnA=
Subject key identifier:   0B:5B:27:A9:E3:DB:4E:52:9B:EF:64:DE:29:40:E3:21:9A:FD:9C:C0
Authority key identifier: FE:E6:D0:97:D6:C1:87:4A:15:CC:8C:6E:EB:53:29:01:42:CF:07:A9
Certificate issuer:       /CN=fee6d097d6c1874a15cc8c6eeb53290142cf07a9
Certificate serial:       019FF83596EE7E0223A4A54F5B03C91EBC68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ubQl9bBh0oVzIxu61MpAULPB6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft
Manifest number:          09
Signing time:             Wed 12 Aug 2026 23:01:29 +0000
Manifest this update:     Wed 12 Aug 2026 23:01:29 +0000
Manifest next update:     Thu 13 Aug 2026 23:01:29 +0000
Files and hashes:         1: X9MygZSKSL6QlOO0UVIquYhu0Fo.asa (hash: Oin11/QLAtTIeyxZUGkGGrAhnCjiS0Q0Kg95zmjFkRI=)
                          2: _ubQl9bBh0oVzIxu61MpAULPB6k.crl (hash: S+fNV/eKF/NrGupbX8ohz4y2EnlUWfQy0YSTx5QYEXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ubQl9bBh0oVzIxu61MpAULPB6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:35:96:ee:7e:02:23:a4:a5:4f:5b:03:c9:1e:bc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee6d097d6c1874a15cc8c6eeb53290142cf07a9
        Validity
            Not Before: Aug 12 23:01:29 2026 GMT
            Not After : Aug 13 23:01:29 2026 GMT
        Subject: CN=0b5b27a9e3db4e529bef64de2940e3219afd9cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:4e:1d:d8:ff:0b:5f:87:da:5f:52:09:ce:
                    93:01:89:d4:67:66:11:e5:c5:6d:8d:aa:98:c5:4f:
                    8f:3a:f2:af:85:a9:84:9e:14:85:25:83:47:21:96:
                    1a:1c:05:c3:3e:2e:37:82:2f:0b:67:32:ce:05:d5:
                    f8:23:2d:d6:d8:98:54:3c:1b:f2:ca:d6:fa:b4:f5:
                    50:af:46:7a:9c:22:59:04:28:00:93:31:db:2e:fd:
                    95:14:16:26:e0:09:d0:fc:69:7e:74:eb:e4:43:05:
                    7c:a7:dc:71:17:fb:02:20:5d:af:e3:be:51:49:f5:
                    80:ab:4b:e1:4f:4d:3c:27:84:74:e8:39:ce:98:3e:
                    dd:03:00:74:32:a2:11:61:f0:5b:0b:57:a6:f6:15:
                    ed:9a:6c:0f:dd:c1:ce:61:94:6e:f4:83:60:9d:0e:
                    f3:a7:21:39:3c:c0:f2:05:37:bc:f2:b9:5e:56:0f:
                    8a:18:dc:51:17:d1:12:b6:a4:2b:4a:af:1f:d1:65:
                    33:4e:11:24:46:59:ee:c3:e8:a5:49:7f:5c:0a:83:
                    85:e1:3d:9e:04:19:e0:84:d8:26:31:c9:35:94:9b:
                    03:5e:28:85:0d:2d:a5:3a:f0:48:98:7c:84:58:86:
                    82:b3:69:ca:95:bf:c2:f2:a2:50:51:19:cc:7c:ba:
                    d2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5B:27:A9:E3:DB:4E:52:9B:EF:64:DE:29:40:E3:21:9A:FD:9C:C0
            X509v3 Authority Key Identifier:
                keyid:FE:E6:D0:97:D6:C1:87:4A:15:CC:8C:6E:EB:53:29:01:42:CF:07:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ubQl9bBh0oVzIxu61MpAULPB6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:fe:09:0e:e7:48:0b:02:5b:c7:8d:a5:43:68:2a:1f:db:50:
         7d:4c:3c:85:c1:7b:2c:f9:16:9d:8d:63:65:d9:d2:d4:3c:c5:
         aa:b5:be:0a:be:97:af:86:05:76:2d:08:19:d7:9a:ac:1a:cb:
         ef:71:6d:ff:05:94:08:d6:8c:7a:a1:ae:d4:34:9c:a6:c4:de:
         15:95:44:74:04:5e:41:48:ea:a6:47:82:ac:5c:45:e4:d3:53:
         e9:88:e7:6b:eb:92:35:36:f5:46:c9:33:c0:b9:9f:03:91:59:
         be:5e:14:51:d7:5d:26:a8:42:3b:0d:77:1f:e4:ae:01:4b:4d:
         61:58:06:31:ea:a3:0b:70:c8:13:1f:e9:e4:c1:49:2c:c8:f1:
         50:20:9c:75:f4:33:d4:8c:b6:3b:35:83:52:20:79:7f:7f:c6:
         3a:ef:d3:2f:76:e0:cf:61:09:7c:b7:0a:c6:58:78:fe:c1:eb:
         79:ab:44:5e:19:1f:24:79:6d:e5:4c:14:67:98:60:84:d0:41:
         b2:f0:97:b4:f3:b8:c3:2d:d7:0d:60:c6:26:66:f6:e3:f8:ba:
         cb:87:01:22:37:c3:f7:04:7c:87:a8:98:82:07:30:b9:25:02:
         95:af:4b:23:cb:3a:b3:8f:7b:13:02:d2:cc:ad:c6:2d:4a:8c:
         17:7d:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:37 2026 by rpki-client