Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File:                     UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier:          3i62gb7465H2R6HHHfPe7+6d6+FEoEXx+Xpd6NXJ0qM=
Subject key identifier:   7F:33:52:50:B3:73:7B:0B:8C:8B:14:54:EC:AD:EB:83:6A:98:74:DA
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer:       /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial:       019FAE6449856CCE37DE3B1599D560933B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number:          0D43
Signing time:             Wed 29 Jul 2026 15:00:35 +0000
Manifest this update:     Wed 29 Jul 2026 15:00:35 +0000
Manifest next update:     Thu 30 Jul 2026 15:00:35 +0000
Files and hashes:         1: AL0W8JafgnmPnnZBBZOLnMOElHU.roa (hash: W7hf6DI9RRqdDA51Pz50C4flOR9nQCePHPNNbBEGwT8=)
                          2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: tB0aFLLmYW8y9UFvSPfN1jbZ1u3lbM03R3dpdEJC3sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ae:64:49:85:6c:ce:37:de:3b:15:99:d5:60:93:3b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
        Validity
            Not Before: Jul 29 15:00:35 2026 GMT
            Not After : Jul 30 15:00:35 2026 GMT
        Subject: CN=7f335250b3737b0b8c8b1454ecadeb836a9874da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:f6:1e:9f:db:b9:45:54:48:56:0e:03:66:
                    c0:ce:2d:97:61:a3:85:65:ac:9d:56:a4:50:b7:a6:
                    6c:f4:5c:ea:b5:c2:53:77:3a:92:14:86:30:e6:fa:
                    b4:0c:2c:33:74:a6:0b:d6:a4:fc:d2:dd:3c:67:a5:
                    19:9d:9d:3a:88:4c:40:d6:7b:a3:01:20:f1:cc:d7:
                    83:de:92:b4:f9:fe:5c:0d:03:00:98:9a:fe:78:e3:
                    72:6f:59:3b:e9:24:57:f6:f0:37:aa:c7:be:33:40:
                    86:3c:c1:10:f4:25:8f:b8:91:1e:76:9f:19:8e:21:
                    b7:fa:32:e1:30:01:69:e6:aa:08:76:47:48:5c:72:
                    90:91:53:c5:ff:62:5c:15:a4:95:31:d6:14:e7:11:
                    20:d9:5a:c5:a3:be:cf:32:a8:74:38:48:9d:69:f3:
                    83:a2:1e:1a:e2:4a:ff:c1:42:71:6a:5d:55:b0:bb:
                    36:20:1b:ea:4c:f9:28:cd:26:99:53:25:db:89:07:
                    fc:19:c6:b8:f3:d3:b5:7a:71:b0:f7:1a:17:7a:8a:
                    c6:dc:c5:6a:cc:b7:d6:47:0e:31:1d:7f:b4:00:12:
                    f5:e2:ae:6c:de:96:9c:16:52:11:a7:7b:30:5d:bd:
                    1b:a6:36:67:95:41:81:0c:1e:18:ab:ed:e3:93:98:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:33:52:50:B3:73:7B:0B:8C:8B:14:54:EC:AD:EB:83:6A:98:74:DA
            X509v3 Authority Key Identifier:
                keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9b:08:86:d5:12:d0:59:06:82:59:11:2a:bc:af:72:05:19:
         aa:2f:e3:27:e0:6c:6d:75:14:a6:46:e6:a6:5c:36:ab:21:12:
         f4:60:db:93:22:0a:ef:79:45:bd:95:59:da:53:fd:cf:82:71:
         35:09:a7:aa:33:bb:72:9a:38:84:e9:ff:f7:f6:f4:d7:6a:79:
         25:04:aa:a3:e1:44:34:11:cc:5d:e5:32:cb:8d:47:58:70:f8:
         f3:6f:c0:a5:ba:1d:4b:59:62:44:a9:86:33:fd:6a:d2:ba:5f:
         24:19:ee:b4:de:d5:25:44:5e:4d:ab:9d:71:b9:9e:8d:63:9e:
         4c:c3:6f:66:89:18:fa:09:1e:9d:ae:48:80:a6:a5:7a:98:1c:
         d4:74:d8:7d:c4:f3:6b:de:62:28:2e:84:63:21:78:4f:ec:a7:
         ab:24:d3:20:93:40:2f:f7:4e:7b:ce:a9:ca:6d:f9:5f:81:8c:
         33:27:b1:2e:50:21:1d:4e:c8:73:e2:de:eb:b2:cc:94:a6:07:
         88:58:6f:2e:c8:b9:e3:ca:7f:f3:fe:b8:10:e0:da:7e:6a:c1:
         04:de:d3:f7:50:eb:aa:1c:39:c3:9d:6a:a0:64:80:b9:a5:ec:
         63:a6:42:7a:ea:16:0b:be:8d:32:f2:fd:ca:59:42:5d:73:4b:
         4a:7f:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:02:06 2026 by rpki-client