Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File:                     ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier:          bBrHKq1ViE2nlW6SXBFwAngRL7yH0fNtk43QEkHuKik=
Subject key identifier:   3E:04:BE:BA:47:63:1B:93:C1:EF:BA:25:BE:04:35:6F:8A:0E:43:4A
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer:       /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial:       019CA83374F1C7FF31F57E7082B9E460CB93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number:          0C18
Signing time:             Sun 01 Mar 2026 07:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 07:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 07:01:10 +0000
Files and hashes:         1: 1-Y2vjSjF6gXRq6I6kzf8-SGCL8Q.asa (hash: DdT5c/3q+BGyWUydZ3FkM3RX71y9vyzAcIHaVlT8fro=)
                          2: DyNt3o9uIabPGMyLwBL1LgyHrIg.roa (hash: gG5xZr77ZeZmjXnGAzSRXzAOpUijJO5uYNAWkPGYFA8=)
                          3: QCLNg4PNOl11XDmyCY2IfSAv4u4.roa (hash: jT4JDY6Kk9V6/J+VGMgmAaLrU2fWlyxRaRtTYMCcfOY=)
                          4: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: kung6geHlTdauCPzJEGLrI7eXlljlnGw3vMlRLr9V5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:33:74:f1:c7:ff:31:f5:7e:70:82:b9:e4:60:cb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
        Validity
            Not Before: Mar  1 07:01:10 2026 GMT
            Not After : Mar  2 07:01:10 2026 GMT
        Subject: CN=3e04beba47631b93c1efba25be04356f8a0e434a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:35:89:3c:09:5c:1e:a0:cf:6a:cc:40:9d:
                    5d:8e:c2:5f:01:25:cc:83:2c:c7:ad:74:7d:b0:aa:
                    fc:85:c7:28:d6:7b:9d:be:38:27:31:85:5a:e0:38:
                    d6:fc:f1:99:f6:06:c9:6b:d4:9b:90:18:25:8d:b5:
                    85:a2:06:a5:e4:da:f7:c5:f3:0f:cf:f4:ec:72:35:
                    6b:37:1b:18:20:79:5c:74:66:7f:34:24:b3:9f:6d:
                    39:96:da:eb:fc:93:59:9c:da:18:9e:b9:fb:5b:92:
                    a0:31:4b:f7:21:33:a5:b1:4e:89:06:f8:96:5a:d4:
                    da:c0:90:3f:e3:f6:be:22:9c:21:96:ae:84:b3:e3:
                    7e:e3:94:dc:01:01:44:a5:84:9b:45:93:ff:21:3a:
                    07:06:25:13:15:94:bd:27:19:1e:eb:85:17:21:bd:
                    1f:e2:df:2f:d8:f0:9e:bb:ea:e6:65:fe:26:f9:ee:
                    31:2e:1a:94:f9:69:79:7b:51:62:f9:90:99:7e:39:
                    aa:df:d9:57:71:3a:c1:d1:b3:b8:4c:f4:f1:cc:26:
                    00:f8:0b:c9:0d:38:58:4f:3e:c6:01:80:6a:50:b1:
                    f0:e4:21:6c:88:e6:38:7f:06:50:c1:5a:11:7e:65:
                    38:9f:c0:a5:5e:dc:3d:7a:d9:09:ca:34:b2:4c:f0:
                    51:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:04:BE:BA:47:63:1B:93:C1:EF:BA:25:BE:04:35:6F:8A:0E:43:4A
            X509v3 Authority Key Identifier:
                keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:36:bd:c9:37:ea:70:30:02:35:1d:cf:6a:ad:ab:dd:e8:4c:
         34:65:17:bc:da:0e:6f:0f:72:27:80:6b:69:37:17:8b:f0:cc:
         d9:c0:b0:e6:ae:1e:80:50:5a:37:f2:75:11:c8:06:f9:da:03:
         cf:c7:e1:4a:b7:1a:27:f9:f3:74:62:9e:46:84:ea:db:fc:71:
         3e:b9:f0:44:08:94:05:78:78:62:18:37:17:ac:e9:7c:46:ca:
         a0:45:21:3f:3c:eb:32:2b:b2:a5:34:df:2e:b5:db:4b:3f:fc:
         98:ef:f7:ef:88:b6:25:6e:33:f7:41:53:dc:b3:56:e4:61:99:
         20:fd:de:6b:3e:ef:17:d1:90:fa:5c:2f:61:f2:0e:79:39:cb:
         e7:1e:b8:03:32:b2:ee:bb:b5:fd:17:ff:c5:d8:d7:db:9f:a3:
         a0:d1:e9:79:6a:12:fb:da:98:55:68:66:36:7f:f0:47:af:37:
         95:09:9a:92:c5:c6:bb:a0:ab:7c:eb:74:e8:5c:50:f9:42:99:
         22:80:49:5f:f7:e9:d0:ca:34:61:5c:f6:f5:a5:e3:42:f2:7a:
         7f:a9:9f:7f:51:4b:c2:72:7c:0d:dc:64:2e:b5:40:85:82:67:
         32:24:bb:fc:c9:97:88:b1:df:59:ee:0c:b4:bf:5a:5f:cc:00:
         d4:ed:87:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:31 2026 by rpki-client