Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File:                     ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier:          ChmdPeJSaTf8TWVG1w8nz3j7knuOKthEFhgPDWPEDuE=
Subject key identifier:   7E:57:74:E6:0B:94:DE:9E:42:F2:41:DB:3B:F6:92:D2:F3:8F:B6:7F
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer:       /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial:       01A1133C5E0C8C17B268E414EF49E18E1E64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number:          0E67
Signing time:             Tue 06 Oct 2026 22:01:25 +0000
Manifest this update:     Tue 06 Oct 2026 22:01:25 +0000
Manifest next update:     Wed 07 Oct 2026 22:01:25 +0000
Files and hashes:         1: 1-Y2vjSjF6gXRq6I6kzf8-SGCL8Q.asa (hash: DdT5c/3q+BGyWUydZ3FkM3RX71y9vyzAcIHaVlT8fro=)
                          2: lLOn1a_u_YC3vJ_LFQzYUJYz5bw.roa (hash: E7hSojMc3tDdmz8A/pzP/+XY9Q3UAlYQtQ1nExLgNd8=)
                          3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: r1nkVFe2ArKGFRKluXChBK9oVCnZ4BEmHRfHItckd+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:3c:5e:0c:8c:17:b2:68:e4:14:ef:49:e1:8e:1e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
        Validity
            Not Before: Oct  6 22:01:25 2026 GMT
            Not After : Oct  7 22:01:25 2026 GMT
        Subject: CN=7e5774e60b94de9e42f241db3bf692d2f38fb67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:a8:f1:c6:5c:0f:13:e1:6d:34:83:51:a8:
                    fb:32:5d:03:b5:6c:66:65:c8:4e:00:35:94:90:da:
                    84:2a:70:0c:66:5c:81:7c:71:38:bb:7d:ba:1d:d5:
                    dc:42:96:eb:fb:a4:57:b7:6e:72:60:a9:72:90:57:
                    3f:23:1e:70:82:37:fc:cb:69:b5:0a:4b:fb:d1:86:
                    6d:00:db:bc:e5:25:d8:91:8e:a2:f3:2d:65:c6:bf:
                    c9:3a:4c:61:a6:5f:9b:f1:b0:21:aa:c7:95:a4:a1:
                    a7:7a:3a:da:61:db:c9:9a:78:86:87:5a:f6:cc:3a:
                    e0:3a:6a:17:5b:c0:82:e1:b5:83:ca:64:5e:16:54:
                    b5:3b:61:ac:d2:96:63:3e:1d:21:75:51:3a:50:5d:
                    d9:b8:f9:de:5b:5f:fa:11:b2:c8:c1:b4:4f:2d:f7:
                    1e:4c:77:b1:f1:ea:4d:03:d0:9b:0b:b5:51:18:ed:
                    e2:48:70:ee:ec:1d:05:8c:1a:6a:11:df:b9:1e:c1:
                    a6:46:b2:6c:d6:01:b3:76:a7:47:15:1d:3d:f2:bf:
                    13:9d:74:e8:36:81:c0:52:18:f0:14:78:8b:84:89:
                    44:85:e0:55:6f:c8:2a:ae:18:12:ad:ba:0a:c2:8f:
                    86:3d:48:38:2b:73:ae:77:6b:f4:51:29:71:ae:44:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:57:74:E6:0B:94:DE:9E:42:F2:41:DB:3B:F6:92:D2:F3:8F:B6:7F
            X509v3 Authority Key Identifier:
                keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:dd:6b:b6:de:6d:dd:2f:92:93:39:10:92:37:67:86:a5:00:
         52:60:91:b8:9e:4b:2a:e9:7c:d1:d7:e9:87:c5:ad:e0:7a:89:
         25:56:1b:f8:c0:49:fa:d1:e9:d6:dd:27:59:55:0a:da:08:e2:
         ed:47:ca:eb:4d:57:ad:e7:f5:cb:f4:2b:b9:90:c4:a8:27:f6:
         1e:4f:e7:00:2e:cd:a5:54:3f:ca:45:0d:12:55:aa:d8:b7:18:
         6c:33:09:f5:c2:fa:b8:e0:48:86:1e:d3:62:2f:24:c3:47:d0:
         92:c0:2b:05:c9:f7:ac:28:f4:79:c7:43:d9:da:3f:9f:cf:49:
         41:e9:46:f0:78:35:42:d9:99:0a:df:76:ad:53:c7:1e:e9:55:
         81:98:65:a8:fb:f6:01:57:24:51:91:b4:95:3e:f9:be:09:30:
         ac:a7:72:06:b1:69:ca:50:fa:c7:53:4c:b4:54:90:cc:60:92:
         09:e4:8c:a6:de:e0:17:e0:47:e0:aa:3b:0d:7f:d4:c9:34:15:
         5f:a0:b5:8f:d4:3c:38:13:9f:73:98:5a:f0:a6:da:6f:fb:05:
         17:ca:22:50:e5:7e:07:79:cd:00:fb:a2:50:be:64:23:87:cd:
         1f:f1:86:5c:47:e8:0d:75:69:b6:b3:db:62:3c:82:60:1a:e0:
         31:09:d8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:22:59 2026 by rpki-client