Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File:                     ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier:          +ZnllJBdnyA2RHJqjyAJLliBaWjri8giEHIb8HKRDv0=
Subject key identifier:   3C:26:E6:D2:40:24:10:14:A7:44:B5:60:BE:37:6C:81:2B:F7:4E:7A
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer:       /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial:       019CAA21D6001A6AC35FB878C4EE71318768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number:          0C19
Signing time:             Sun 01 Mar 2026 16:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:10 +0000
Files and hashes:         1: 1-Y2vjSjF6gXRq6I6kzf8-SGCL8Q.asa (hash: DdT5c/3q+BGyWUydZ3FkM3RX71y9vyzAcIHaVlT8fro=)
                          2: DyNt3o9uIabPGMyLwBL1LgyHrIg.roa (hash: gG5xZr77ZeZmjXnGAzSRXzAOpUijJO5uYNAWkPGYFA8=)
                          3: QCLNg4PNOl11XDmyCY2IfSAv4u4.roa (hash: jT4JDY6Kk9V6/J+VGMgmAaLrU2fWlyxRaRtTYMCcfOY=)
                          4: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: awvbAcVG3iFrXiBT/6xks8UIUUqoBKwKw2lcX07mHHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:d6:00:1a:6a:c3:5f:b8:78:c4:ee:71:31:87:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
        Validity
            Not Before: Mar  1 16:01:10 2026 GMT
            Not After : Mar  2 16:01:10 2026 GMT
        Subject: CN=3c26e6d240241014a744b560be376c812bf74e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:d2:d1:0a:6a:bf:70:50:16:ac:2d:5c:50:
                    7d:16:28:9b:72:53:08:5c:f2:f0:7f:02:ea:78:f4:
                    98:e4:2e:40:b3:59:ef:d6:09:dc:b3:8a:23:81:62:
                    36:0a:b7:ea:50:13:5e:bc:55:fc:cc:85:7f:40:da:
                    42:dc:08:a9:3c:82:01:e4:4c:f4:47:53:7c:86:da:
                    ea:6c:d4:a1:f9:f9:ee:a5:61:83:d2:a6:02:61:09:
                    30:29:02:8c:8a:fd:53:99:21:bd:9c:be:0a:86:c7:
                    b2:67:16:d0:7d:f0:dc:3a:c2:92:9b:9f:8a:8d:9b:
                    07:79:f5:7f:91:6a:74:e5:d0:a5:c7:5d:6e:03:de:
                    32:55:37:d6:67:46:63:57:b4:95:c1:30:9b:85:1b:
                    b1:c2:d0:c2:7c:87:e5:ec:e7:ce:3a:aa:82:49:42:
                    0b:0f:2e:7f:9d:97:28:1b:6c:e3:4c:ca:67:49:67:
                    35:1b:d9:4b:92:4c:c7:4c:69:a5:a4:e2:13:df:a8:
                    b4:47:ad:9f:6c:72:32:48:0e:e5:1b:16:1e:fa:c1:
                    6e:fd:88:87:4c:61:8c:82:91:ae:8a:26:ee:de:62:
                    06:fb:ea:e2:9f:8e:10:50:de:76:cd:62:2c:52:b0:
                    ed:b3:c4:87:3a:d5:f0:74:3d:db:be:5f:3a:68:d0:
                    ed:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:26:E6:D2:40:24:10:14:A7:44:B5:60:BE:37:6C:81:2B:F7:4E:7A
            X509v3 Authority Key Identifier:
                keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:8d:bc:dc:94:28:f8:3f:12:a7:83:cf:df:b2:d2:b7:3e:
         05:b9:8f:59:b6:84:e2:88:b3:70:f4:30:99:8f:c1:bc:4a:ba:
         ba:d4:da:7a:3b:76:70:17:39:3e:0c:10:ed:16:c2:ba:a6:ff:
         29:d0:29:0c:75:20:6f:93:bb:06:69:48:a3:0e:26:90:91:92:
         ce:7f:b9:1e:a2:cb:f8:b0:0e:bd:83:a7:e2:51:34:6e:4a:30:
         66:b0:b5:be:d0:17:c8:d9:84:c6:d4:5c:aa:52:fa:03:86:f8:
         9b:c5:c7:54:73:96:83:92:8b:0b:10:b6:93:78:d5:2d:24:35:
         46:5a:f2:24:6f:56:65:c6:59:1d:5a:93:cb:fd:28:92:1e:c1:
         8b:7e:cb:12:27:9a:a5:60:c4:88:71:33:5c:86:7e:61:27:c1:
         b0:ab:81:b5:f0:39:c8:ed:87:0b:bf:d7:46:6c:c8:2a:62:bb:
         9e:9a:19:8d:b0:bb:d5:1c:39:c6:90:e3:05:22:bc:da:78:0a:
         e0:d2:f5:31:b0:6d:88:0a:4d:b4:46:1e:2c:30:14:52:07:51:
         1b:07:3a:bb:5a:be:a1:83:69:b0:ca:de:a1:f8:38:40:9f:e6:
         bd:68:e1:9b:13:62:fb:39:09:5c:9d:ea:2a:12:7b:9a:f2:d8:
         6f:0c:5b:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIdYAGmrDX7h4xO5xMYdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjgxMzk5OTNiZTY2NWYzYjVkMGY2OTA5ZWYwNThmYThm
OTc5MjIwHhcNMjYwMzAxMTYwMTEwWhcNMjYwMzAyMTYwMTEwWjAzMTEwLwYDVQQD
EygzYzI2ZTZkMjQwMjQxMDE0YTc0NGI1NjBiZTM3NmM4MTJiZjc0ZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TXS0Qpqv3BQFqwtXFB9FiibclMI
XPLwfwLqePSY5C5As1nv1gncs4ojgWI2CrfqUBNevFX8zIV/QNpC3AipPIIB5Ez0
R1N8htrqbNSh+fnupWGD0qYCYQkwKQKMiv1TmSG9nL4KhseyZxbQffDcOsKSm5+K
jZsHefV/kWp05dClx11uA94yVTfWZ0ZjV7SVwTCbhRuxwtDCfIfl7OfOOqqCSUIL
Dy5/nZcoG2zjTMpnSWc1G9lLkkzHTGmlpOIT36i0R62fbHIySA7lGxYe+sFu/YiH
TGGMgpGuiibu3mIG++rin44QUN52zWIsUrDts8SHOtXwdD3bvl86aNDtRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwm5tJAJBAUp0S1YL43bIEr9056MB8GA1UdIwQY
MBaAFLm4E5mTvmZfO10PaQnvBY+o+XkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEt
N2JjNzNlZWUxNDQ3LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEtN2JjNzNlZWUxNDQ3
LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0WNvNyU
KPg/EqeDz9+y0rc+BbmPWbaE4oizcPQwmY/BvEq6utTaejt2cBc5PgwQ7RbCuqb/
KdApDHUgb5O7BmlIow4mkJGSzn+5HqLL+LAOvYOn4lE0bkowZrC1vtAXyNmExtRc
qlL6A4b4m8XHVHOWg5KLCxC2k3jVLSQ1RlryJG9WZcZZHVqTy/0okh7Bi37LEiea
pWDEiHEzXIZ+YSfBsKuBtfA5yO2HC7/XRmzIKmK7npoZjbC71Rw5xpDjBSK82ngK
4NL1MbBtiApNtEYeLDAUUgdRGwc6u1q+oYNpsMreofg4QJ/mvWjhmxNi+zkJXJ3q
KhJ7mvLYbwxbTg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:13:57 2026 by rpki-client