Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File:                     ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier:          oqL8istVGZALFtbHFuXdvL6FmIL8YudB0zwGsR2Mlwo=
Subject key identifier:   24:27:E4:48:BE:63:FA:A6:4F:C4:96:D6:1A:AC:6D:F6:8A:BC:2B:5E
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer:       /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial:       019EBEB5A9323B6B86540B0DF7C0D4AE4B85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number:          0D32
Signing time:             Sat 13 Jun 2026 02:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:36 +0000
Files and hashes:         1: 0maovDntuB-r4dB2oYpYKrRT1Zk.roa (hash: IwmmJgUZFadFMNSlEhzI4JB4ZOkonDbhULNxWNxh3Gg=)
                          2: 1-Y2vjSjF6gXRq6I6kzf8-SGCL8Q.asa (hash: DdT5c/3q+BGyWUydZ3FkM3RX71y9vyzAcIHaVlT8fro=)
                          3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: BtiZhF9dC2MirXViCSWV3RKtDAnOnEb7dufd6Tu5CCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:a9:32:3b:6b:86:54:0b:0d:f7:c0:d4:ae:4b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
        Validity
            Not Before: Jun 13 02:00:36 2026 GMT
            Not After : Jun 14 02:00:36 2026 GMT
        Subject: CN=2427e448be63faa64fc496d61aac6df68abc2b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:89:d9:d8:f7:19:94:24:e4:07:d5:fa:71:
                    61:38:e3:da:26:a7:ae:c3:b6:48:6e:59:81:28:22:
                    c0:d5:ef:10:b0:c1:78:b4:9d:80:bd:b7:9a:4b:44:
                    47:a1:6a:27:8a:1b:3e:57:d8:18:51:85:8d:68:cc:
                    e3:41:5b:1e:c9:5d:22:a7:0d:f2:26:31:c3:98:36:
                    db:c1:67:5e:bc:1b:23:98:a1:0f:73:24:16:e7:2f:
                    b2:ac:2f:c7:cf:ae:06:5f:1b:35:f3:03:fe:ee:48:
                    f2:e1:e3:39:d4:7c:e4:fe:2e:1f:1c:b3:80:59:e2:
                    0c:c5:be:bd:c4:56:ec:a5:60:97:4f:d6:6b:e7:c4:
                    e6:49:14:a8:25:2c:4a:c9:89:05:41:b1:da:2e:38:
                    d2:bd:5a:f5:63:5a:5e:f6:49:34:9d:90:a4:f9:cb:
                    ae:08:f4:6d:34:52:6d:58:f4:73:2e:a8:dc:6b:28:
                    f5:95:f9:e8:82:b8:36:83:d8:c5:dc:4b:15:d8:5b:
                    05:6a:f5:b5:5b:fb:ed:c4:ab:08:d2:a0:b2:a0:0e:
                    31:28:9f:cd:8b:41:be:d3:fd:8b:a3:af:18:a2:e4:
                    86:6c:95:ae:6a:7d:9b:a3:ea:4e:4c:ea:d7:bf:68:
                    55:db:af:4b:06:4e:0b:50:67:3b:fd:54:8b:18:d2:
                    0d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:27:E4:48:BE:63:FA:A6:4F:C4:96:D6:1A:AC:6D:F6:8A:BC:2B:5E
            X509v3 Authority Key Identifier:
                keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:45:f2:81:ff:48:a8:41:88:fb:08:3c:9b:63:1e:46:6f:9b:
         8f:39:b7:da:af:9a:5e:b2:07:b5:08:0a:b7:f6:20:92:b0:6b:
         50:c0:c3:19:a3:a7:c3:02:0e:dc:a8:14:8d:59:16:60:1b:28:
         35:ae:6c:23:fe:62:e2:f9:31:f4:d4:8c:41:82:a4:7b:58:a2:
         ee:04:83:de:9c:34:af:ae:21:6c:dc:99:f5:30:ba:da:75:4f:
         2b:e5:46:46:92:58:48:5b:8a:53:db:a3:a0:96:9f:2d:65:ab:
         91:25:ad:d9:42:e9:2c:29:85:b4:58:2c:4f:7a:b8:7a:f9:89:
         c8:e9:53:3a:68:3c:c3:02:21:50:c0:73:04:6d:fe:81:63:bb:
         e2:52:13:14:0a:9e:41:8c:de:d0:f8:92:7d:d1:55:d0:81:a3:
         ec:ff:a3:0f:14:3e:41:2f:09:1b:40:1d:6a:19:f2:f1:34:d1:
         02:74:21:6e:fb:8d:2f:96:79:e9:be:0a:42:61:6b:47:4e:7c:
         49:4b:ab:06:67:7e:99:56:33:11:ce:51:b4:8c:e3:ae:f9:eb:
         a2:32:49:19:f9:c0:2c:9b:f7:e9:1b:e7:d6:47:2b:6e:41:b0:
         24:91:d7:40:10:9a:ed:b2:19:b4:f0:f1:9c:02:17:bb:a6:50:
         91:0d:3e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:11 2026 by rpki-client