Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File:                     UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier:          WY7LC1C2yYmgZo+T2CkDnYG/Qzjei2EUV9n+6dtPmBc=
Subject key identifier:   D8:D7:BA:43:2B:3F:F7:4A:3F:78:88:F5:D2:D8:9F:8C:04:43:CE:48
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer:       /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial:       01A16834EC9A9E01F8C95450319C8EA5DB4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number:          1A4F
Signing time:             Fri 23 Oct 2026 10:01:01 +0000
Manifest this update:     Fri 23 Oct 2026 10:01:01 +0000
Manifest next update:     Sat 24 Oct 2026 10:01:01 +0000
Files and hashes:         1: 5aow-99slZP8SVOes-TUh3rZ69w.roa (hash: LcVMTYwvGYnDzr+4t+xoLGSaGqGnbwNSajc10a7TVgs=)
                          2: R8VLlqxVzPN8ld2Tg0UaItsoYMs.roa (hash: O2XqZYJVg9I0qJHfw0FYVH2QGiz9GyNT5hxyGi4r7zA=)
                          3: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: KjHg8b6gSD6RwhotKZZL8GXIHWt11CRQ6jJVkNkMFes=)
                          4: ZPeEf7cS5BJ9rtofzmpA-ppl3C4.roa (hash: wudhnRSlAK+yCHqZdQgA8uGQw89NdGjYT7UnH7gteD0=)
                          5: c3rz_qnKouFWFsxqpnJ4-B9oKJ8.roa (hash: q1FoERSAG1CZ2+/I1H71ycDFKWpa3QIpL1CV49ZYyiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:68:34:ec:9a:9e:01:f8:c9:54:50:31:9c:8e:a5:db:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
        Validity
            Not Before: Oct 23 10:01:01 2026 GMT
            Not After : Oct 24 10:01:01 2026 GMT
        Subject: CN=d8d7ba432b3ff74a3f7888f5d2d89f8c0443ce48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ee:f0:d7:d9:ff:18:69:02:c5:51:d2:ae:e5:
                    14:dd:0f:99:6e:75:6d:71:e4:d8:a1:c2:8b:b4:5e:
                    78:43:ee:5a:87:4e:80:0c:32:bf:a3:20:ce:ef:70:
                    3d:ac:23:90:f1:ef:36:62:b5:25:d7:b1:8d:8f:bd:
                    82:b0:96:37:f6:45:43:9e:21:86:f6:f2:e1:a2:2f:
                    6a:b9:3c:cf:df:e1:38:31:74:92:b1:ff:34:2a:3e:
                    21:7f:66:ac:7c:c1:45:71:29:aa:c5:fc:b9:d0:36:
                    c6:20:d4:d0:3c:2d:7e:df:20:a4:b0:f9:25:e4:d8:
                    ea:03:f9:cc:9e:aa:b3:43:df:47:72:ea:79:6c:31:
                    19:7b:63:cd:1f:7e:3e:e5:a9:4d:52:59:df:e5:6a:
                    6c:6c:9f:f1:f2:37:26:4c:33:43:49:b1:cd:c1:66:
                    3d:e2:ab:c0:cd:d9:5a:6b:13:d9:f3:09:97:91:84:
                    84:40:5e:47:20:c6:34:ff:e7:4c:95:7c:43:54:0c:
                    cc:d7:87:e6:58:ec:1c:ea:bd:8f:6e:00:29:19:8e:
                    24:14:54:1b:25:a5:94:e6:8f:87:87:bd:03:3a:fd:
                    ad:52:e3:03:92:d8:5e:41:64:5c:3a:f9:f8:76:ee:
                    7c:c9:28:a5:4c:38:68:10:80:4c:84:e1:89:42:06:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D7:BA:43:2B:3F:F7:4A:3F:78:88:F5:D2:D8:9F:8C:04:43:CE:48
            X509v3 Authority Key Identifier:
                keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:85:da:35:10:ee:90:6a:98:2a:46:4e:ba:35:83:c1:fb:23:
         78:43:2f:ef:5e:22:78:0d:ea:33:1e:ee:65:e5:7b:8e:62:4d:
         3c:7a:28:b6:5f:6e:6c:b4:c9:93:56:2a:45:eb:d2:ce:49:a2:
         97:68:ac:10:52:5a:e1:2e:5a:a2:da:0a:d1:fb:b0:65:d4:dc:
         d2:ca:ec:b9:f1:7c:55:e7:c7:72:5c:8a:2b:45:4f:26:b0:dd:
         94:18:8f:1a:95:15:a7:4a:83:b9:77:ea:f8:d4:fb:8d:b3:46:
         9c:4e:b5:2b:81:90:c0:e3:5b:74:8e:9c:2f:e9:e5:93:a2:4f:
         a5:44:61:f1:06:7c:10:1b:f7:b6:e5:ed:60:9a:0d:dd:8c:38:
         fc:55:cd:6a:71:03:87:c0:4c:35:1e:58:76:02:c3:8c:95:d6:
         74:88:05:1b:07:fd:4a:28:79:f4:32:ba:52:51:5e:33:09:53:
         d9:77:ee:ec:10:87:b5:80:b7:49:ad:aa:45:ac:3a:8e:1b:be:
         1e:b3:b3:f5:02:32:a2:a6:9f:c3:2d:1a:c6:8a:0c:2f:95:97:
         3e:ce:91:9b:ec:0a:f0:dd:fe:30:12:c0:d7:1a:ab:63:66:89:
         2a:56:e6:a5:cf:4a:76:51:19:1f:4d:a8:59:4b:cb:82:76:8c:
         7c:ff:03:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFoNOyangH4yVRQMZyOpdtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTQ1OWMwMjdhODZlMWE1NTcwOWY4NjA5MzdmZTJmODFi
MzEyZjAwHhcNMjYxMDIzMTAwMTAxWhcNMjYxMDI0MTAwMTAxWjAzMTEwLwYDVQQD
EyhkOGQ3YmE0MzJiM2ZmNzRhM2Y3ODg4ZjVkMmQ4OWY4YzA0NDNjZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5u7w19n/GGkCxVHSruUU3Q+ZbnVt
ceTYocKLtF54Q+5ah06ADDK/oyDO73A9rCOQ8e82YrUl17GNj72CsJY39kVDniGG
9vLhoi9quTzP3+E4MXSSsf80Kj4hf2asfMFFcSmqxfy50DbGINTQPC1+3yCksPkl
5NjqA/nMnqqzQ99Hcup5bDEZe2PNH34+5alNUlnf5WpsbJ/x8jcmTDNDSbHNwWY9
4qvAzdlaaxPZ8wmXkYSEQF5HIMY0/+dMlXxDVAzM14fmWOwc6r2PbgApGY4kFFQb
JaWU5o+Hh70DOv2tUuMDktheQWRcOvn4du58ySilTDhoEIBMhOGJQgYl+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjXukMrP/dKP3iI9dLYn4wEQ85IMB8GA1UdIwQY
MBaAFFAUWcAnqG4aVXCfhgk3/i+BsxLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYt
MTYyYjAyYmIxNWJkLzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYtMTYyYjAyYmIxNWJk
LzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYXaNRDu
kGqYKkZOujWDwfsjeEMv714ieA3qMx7uZeV7jmJNPHootl9ubLTJk1YqRevSzkmi
l2isEFJa4S5aotoK0fuwZdTc0srsufF8VefHclyKK0VPJrDdlBiPGpUVp0qDuXfq
+NT7jbNGnE61K4GQwONbdI6cL+nlk6JPpURh8QZ8EBv3tuXtYJoN3Yw4/FXNanED
h8BMNR5YdgLDjJXWdIgFGwf9Sih59DK6UlFeMwlT2Xfu7BCHtYC3Sa2qRaw6jhu+
HrOz9QIyoqafwy0axooML5WXPs6Rm+wK8N3+MBLA1xqrY2aJKlbmpc9KdlEZH02o
WUvLgnaMfP8DOQ==
-----END CERTIFICATE-----
Generated at Fri Oct 23 14:40:17 2026 by rpki-client