Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File:                     UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier:          BVCDIVeddNue2sLcXjrQBmUCWG4uZ+QKjBaZUK+jy/4=
Subject key identifier:   B3:86:DC:CE:24:C1:8F:19:8D:62:18:99:10:CF:5E:51:C9:34:C2:CF
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer:       /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial:       019FAC764F03AAA717CCB53304A496F2009A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number:          0D42
Signing time:             Wed 29 Jul 2026 06:01:02 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:02 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:02 +0000
Files and hashes:         1: AL0W8JafgnmPnnZBBZOLnMOElHU.roa (hash: W7hf6DI9RRqdDA51Pz50C4flOR9nQCePHPNNbBEGwT8=)
                          2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: XG/iydeII91FOD+eSaxjBvWQaNHSHbhFzl1req2pAjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:4f:03:aa:a7:17:cc:b5:33:04:a4:96:f2:00:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
        Validity
            Not Before: Jul 29 06:01:02 2026 GMT
            Not After : Jul 30 06:01:02 2026 GMT
        Subject: CN=b386dcce24c18f198d62189910cf5e51c934c2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:10:2f:f2:bf:ee:5c:55:b2:9f:96:ef:c0:
                    e4:07:8b:d6:ba:e1:3b:aa:64:14:10:ce:cb:24:f7:
                    60:e8:2e:ac:b3:02:07:29:13:ad:f5:b0:91:29:96:
                    15:96:5a:bc:db:a4:8e:59:94:3f:34:56:bb:0f:f9:
                    b8:d5:83:84:2c:04:9f:70:a1:25:90:26:9f:5e:cb:
                    47:7a:da:61:b4:37:fc:51:68:fa:80:dc:6e:f1:9a:
                    21:03:c8:58:8d:39:54:a2:a7:fa:50:ea:0e:d3:39:
                    89:39:57:7d:d6:49:ba:05:c8:8a:92:b3:29:a9:ca:
                    c1:ce:7e:b1:f4:72:6b:79:fc:ae:6a:b7:fc:0e:56:
                    cb:a8:63:ad:c0:66:46:74:7a:26:5e:d4:5e:78:d2:
                    b6:b8:23:79:3d:4d:97:50:19:aa:ca:0e:3a:a7:3c:
                    bc:e5:b5:14:1c:40:7f:ac:3d:34:e1:a0:84:32:51:
                    c6:49:f8:9a:b0:20:24:98:d0:89:0b:16:2c:ad:ec:
                    03:21:89:b9:82:15:a3:f0:74:cb:a9:cf:c0:c8:f6:
                    4a:30:fa:e5:70:e7:67:98:52:d1:4f:88:62:06:c2:
                    0c:aa:80:a3:18:f6:ef:2f:06:e7:8e:6c:30:f0:36:
                    23:80:48:16:d1:7d:4c:0c:73:f2:d9:dd:bb:8d:17:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:86:DC:CE:24:C1:8F:19:8D:62:18:99:10:CF:5E:51:C9:34:C2:CF
            X509v3 Authority Key Identifier:
                keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c3:9f:fa:28:ac:17:e0:52:cb:7c:aa:84:1a:a3:3b:44:e7:
         40:c6:ce:a8:74:5f:14:57:df:71:c6:2d:c7:15:a2:c4:41:13:
         61:3b:3f:6f:72:9f:9a:dd:42:40:d0:02:52:74:ca:b3:be:65:
         92:72:62:14:ce:8f:a5:a4:78:bc:cd:3c:30:a7:96:18:5b:bf:
         70:ae:2c:d7:1a:e6:49:37:8f:7d:db:e5:30:8a:b2:28:33:b1:
         14:fa:3b:b6:fe:a4:53:96:82:43:a3:7b:2d:55:28:6b:9f:c3:
         f7:1c:f2:05:7c:fc:dd:39:0c:fa:29:01:c7:28:af:5c:c5:a0:
         6e:fb:74:a1:f6:a3:f2:42:4b:f9:2a:46:a8:a0:18:a5:d9:cf:
         a4:15:8c:9b:b5:09:1e:43:78:31:f0:b6:88:ad:32:d5:ee:46:
         e9:a3:9a:bb:b7:dc:20:b9:2b:21:81:07:71:83:2e:8b:c7:ef:
         77:3e:e1:e4:96:c4:4c:5e:5e:18:45:5c:f5:92:19:5f:01:28:
         df:19:f2:e3:b4:35:14:fb:0b:27:10:de:5b:47:49:88:43:a2:
         a1:aa:37:72:49:ad:a2:bc:54:8d:7d:cb:48:a1:a4:30:ed:b3:
         c2:ae:6b:31:2b:d0:a4:de:00:2f:1b:34:ec:42:80:4a:d1:ba:
         0d:36:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:47:13 2026 by rpki-client