Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File:                     UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier:          U+zHwMCDS1BejJZycHyXmJTilFZYlwEuZfXXCmPXNZA=
Subject key identifier:   A6:4E:78:7D:78:3C:2E:2A:0B:9B:41:D3:8F:27:67:D7:10:51:12:66
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer:       /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial:       019E9BBC3A41E02874014DA4D39976EF433F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number:          18DC
Signing time:             Sat 06 Jun 2026 07:01:04 +0000
Manifest this update:     Sat 06 Jun 2026 07:01:04 +0000
Manifest next update:     Sun 07 Jun 2026 07:01:04 +0000
Files and hashes:         1: 5aow-99slZP8SVOes-TUh3rZ69w.roa (hash: LcVMTYwvGYnDzr+4t+xoLGSaGqGnbwNSajc10a7TVgs=)
                          2: R8VLlqxVzPN8ld2Tg0UaItsoYMs.roa (hash: O2XqZYJVg9I0qJHfw0FYVH2QGiz9GyNT5hxyGi4r7zA=)
                          3: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: kduThsUNr8l5aEyqreZNPy0USlwbgXtYbw/drFC84fk=)
                          4: ZPeEf7cS5BJ9rtofzmpA-ppl3C4.roa (hash: wudhnRSlAK+yCHqZdQgA8uGQw89NdGjYT7UnH7gteD0=)
                          5: c3rz_qnKouFWFsxqpnJ4-B9oKJ8.roa (hash: q1FoERSAG1CZ2+/I1H71ycDFKWpa3QIpL1CV49ZYyiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:bc:3a:41:e0:28:74:01:4d:a4:d3:99:76:ef:43:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
        Validity
            Not Before: Jun  6 07:01:04 2026 GMT
            Not After : Jun  7 07:01:04 2026 GMT
        Subject: CN=a64e787d783c2e2a0b9b41d38f2767d710511266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f9:4a:32:f5:c5:9e:46:cd:fd:db:73:31:73:
                    93:77:e6:2d:61:b3:08:88:3a:2e:c7:ae:ad:25:39:
                    ac:e7:dd:83:7c:3d:cf:ce:3f:78:c2:00:d3:3d:64:
                    79:f8:fe:8a:6f:f0:05:94:02:3c:f7:19:8a:1b:51:
                    2a:1a:ed:85:c7:4f:bc:ac:34:32:02:ad:34:b8:51:
                    3a:34:d0:e4:c7:43:58:60:ca:4f:c3:df:11:ae:4e:
                    e9:05:cb:be:97:57:ce:90:25:a5:a9:ef:b9:cc:0c:
                    ab:06:0d:c7:b0:c8:c8:9e:60:b6:7a:23:fc:e1:5f:
                    92:bb:f9:d1:00:e2:a1:40:65:b4:ac:6c:7a:7a:0e:
                    1e:96:7c:75:b2:a1:73:7d:60:62:c0:a9:cb:b0:a8:
                    6b:55:ff:ff:bb:38:3b:0d:07:7b:ca:bd:4b:30:cf:
                    a0:26:e7:99:65:2c:9e:f4:bd:e6:d2:e1:fb:d1:06:
                    e0:cd:e2:31:34:f5:d3:82:7f:87:fc:95:98:75:fa:
                    35:73:3f:80:46:66:e1:90:17:ac:50:f1:04:83:35:
                    78:8d:66:82:7f:d0:21:5d:48:e6:9c:73:3d:1a:31:
                    2a:32:61:fc:cd:91:9e:7f:1c:e2:da:de:11:ab:e7:
                    00:ee:39:db:38:0a:a1:3a:e0:d7:f1:3b:bd:5e:20:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4E:78:7D:78:3C:2E:2A:0B:9B:41:D3:8F:27:67:D7:10:51:12:66
            X509v3 Authority Key Identifier:
                keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:89:81:7c:59:6a:e7:d9:be:e8:5c:a2:49:d3:46:23:65:e5:
         bf:3d:82:2a:ea:d3:3e:49:f0:f1:90:87:24:0a:f3:4b:cf:81:
         d7:62:aa:a7:f6:97:5c:bd:f8:53:e7:20:c3:5d:ba:92:63:35:
         06:6a:95:ae:3b:20:15:40:5d:ae:e0:8d:a0:58:b2:d1:3c:e1:
         48:f6:87:66:94:96:86:53:29:49:9e:6b:da:e9:32:e4:ff:56:
         76:04:a3:d2:d2:6c:ea:65:bc:f0:7c:de:61:0a:38:6e:f0:9e:
         d5:9b:29:d0:e6:7d:91:8f:78:58:e0:8a:e6:dc:34:cb:28:13:
         a3:97:af:df:dd:5d:01:b1:f1:05:aa:83:32:46:af:81:51:40:
         10:8c:e6:17:7d:e1:3b:e5:2b:f6:c2:96:af:33:29:d8:42:3a:
         72:7e:14:54:9c:6d:54:51:a3:84:ee:5a:db:9f:9b:81:92:f7:
         8d:b1:93:cb:76:7d:af:ed:ec:cc:69:a4:61:57:1b:24:06:08:
         e2:58:0c:57:e2:96:15:06:ad:94:41:0d:fd:0f:62:5b:08:ff:
         e0:6b:1c:26:1d:05:fc:11:61:e4:db:9d:d6:6e:2d:bf:28:22:
         44:68:39:54:49:ee:9e:31:57:1a:0b:a5:9c:82:37:74:ca:55:
         71:fa:b3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:00:26 2026 by rpki-client