Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
File:                     Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft (raw, json)
Hash identifier:          a6391Am159NUsXFP4SAxB6TQzAj+zpPwdn++rRpU5oI=
Subject key identifier:   91:7A:FF:3E:F2:9C:AD:D0:F7:BA:2F:AB:3E:70:78:4A:AD:8E:9F:11
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Certificate issuer:       /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial:       01A0E9D23110339511BA543F4EF81A535EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
Manifest number:          0A94
Signing time:             Mon 28 Sep 2026 21:01:01 +0000
Manifest this update:     Mon 28 Sep 2026 21:01:01 +0000
Manifest next update:     Tue 29 Sep 2026 21:01:01 +0000
Files and hashes:         1: Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl (hash: aTlTyw9Jdpb4AOs9V1rpP9hEJna346GHpTowpaDGMaU=)
                          2: cYBrnaocLjA_DaHgp5BukHetZEw.roa (hash: WSYQBuYEacORy4ZqYo8p12iSgdVpFErki2QNc5JX+Q8=)
                          3: nfAlOJt-tJuBQ6TVdWgraK4LPcs.roa (hash: u0sCdtCOmFGO0vVCgVhH5vis+INdwLq690ISXBM58Ak=)
                          4: re1kMr4ZO4EcntSxzQLItfZHji4.roa (hash: pb/ZpVFwMQItfSjJxD0Eukfy73dUuFN63jAongafzPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:d2:31:10:33:95:11:ba:54:3f:4e:f8:1a:53:5e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
        Validity
            Not Before: Sep 28 21:01:01 2026 GMT
            Not After : Sep 29 21:01:01 2026 GMT
        Subject: CN=917aff3ef29cadd0f7ba2fab3e70784aad8e9f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:4f:96:2a:0c:79:9e:c2:e4:cf:75:39:26:
                    31:3e:8c:fc:5a:f5:bd:85:db:25:b8:82:b3:51:d9:
                    79:96:53:86:9d:82:84:bc:de:59:2d:e5:2e:5b:03:
                    52:9a:1d:57:2b:d3:5f:36:9b:2c:ad:f4:2c:d2:40:
                    32:c0:42:0f:22:6a:89:9a:fd:e7:f2:bd:dd:74:96:
                    a1:4e:53:c4:bd:fd:47:97:89:85:05:8e:81:dd:ba:
                    70:0e:3b:91:c8:e8:a7:19:3b:7b:b0:8c:a1:7b:20:
                    91:cf:cd:8f:89:3c:71:1c:fc:3a:6b:f1:29:1f:e9:
                    72:fc:c2:a3:f4:09:fb:47:ee:8d:c8:4e:e6:d7:7e:
                    fb:5c:1a:2c:47:56:d8:bc:db:e2:d0:2a:ca:f9:5c:
                    b6:7c:06:33:7f:0c:ac:c9:3d:9b:8e:48:8b:73:9a:
                    66:3e:51:3d:8d:33:38:a6:d5:b1:43:7d:be:32:b9:
                    52:dd:f4:a7:92:10:91:f8:77:e6:2d:87:b4:55:71:
                    4c:60:79:0e:4f:55:a7:0c:80:de:62:71:1b:c0:d5:
                    3c:67:a0:54:48:99:05:98:96:17:7b:d9:27:91:bb:
                    d3:61:2b:97:5b:0d:1e:2c:19:75:60:b2:ad:a9:df:
                    4e:07:3a:4e:9f:e9:13:a5:9e:eb:d7:43:1b:ac:c8:
                    ba:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7A:FF:3E:F2:9C:AD:D0:F7:BA:2F:AB:3E:70:78:4A:AD:8E:9F:11
            X509v3 Authority Key Identifier:
                keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d9:40:01:91:bb:93:db:65:69:01:3b:65:bc:48:98:e6:f4:
         f0:cc:c8:d0:74:97:7f:68:82:83:1e:80:3b:41:05:b0:dd:d7:
         80:56:a8:d3:20:b8:c9:6c:e2:16:13:bd:3e:b9:e8:42:4e:4f:
         6c:f9:08:9c:77:09:db:c2:13:d3:f2:4d:b4:91:7a:da:b6:07:
         0e:ef:32:9c:f2:9a:84:4a:5c:05:3e:8b:fb:96:6e:05:d8:09:
         ee:6e:e1:a6:d2:b9:47:2e:e9:de:8d:f8:94:3d:20:cb:3d:23:
         50:52:f8:d1:c4:f5:43:e0:31:c8:05:68:e5:98:d7:64:16:53:
         fe:bc:d7:40:ee:e9:05:84:b9:d6:90:55:81:f7:f8:86:db:eb:
         95:01:08:dd:3b:88:0f:aa:9a:c0:a0:7e:5c:30:a1:26:aa:07:
         18:1b:3d:63:2c:3d:01:8d:ad:ee:6a:2e:71:26:58:fd:51:cc:
         27:7b:81:48:b0:80:a9:87:60:cf:ca:62:ec:d1:dc:60:f9:6e:
         f0:83:44:98:08:15:7a:e6:2d:20:2e:46:7d:8e:ab:99:38:cf:
         fa:ea:d6:e3:63:28:5a:25:82:9a:55:c0:8f:6f:1b:ec:cd:0d:
         4d:d2:60:f2:fd:9d:4e:6f:95:0c:33:4e:04:e4:70:8b:df:f1:
         b8:00:bc:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDp0jEQM5URulQ/TvgaU162MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYmZiNDYzNTNiZmNjY2ZmOTQxMmRjYmRkNDgwZjE5YjRj
OTgzOTcwHhcNMjYwOTI4MjEwMTAxWhcNMjYwOTI5MjEwMTAxWjAzMTEwLwYDVQQD
Eyg5MTdhZmYzZWYyOWNhZGQwZjdiYTJmYWIzZTcwNzg0YWFkOGU5ZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo35PlioMeZ7C5M91OSYxPoz8WvW9
hdsluIKzUdl5llOGnYKEvN5ZLeUuWwNSmh1XK9NfNpssrfQs0kAywEIPImqJmv3n
8r3ddJahTlPEvf1Hl4mFBY6B3bpwDjuRyOinGTt7sIyheyCRz82PiTxxHPw6a/Ep
H+ly/MKj9An7R+6NyE7m1377XBosR1bYvNvi0CrK+Vy2fAYzfwysyT2bjkiLc5pm
PlE9jTM4ptWxQ32+MrlS3fSnkhCR+HfmLYe0VXFMYHkOT1WnDIDeYnEbwNU8Z6BU
SJkFmJYXe9knkbvTYSuXWw0eLBl1YLKtqd9OBzpOn+kTpZ7r10MbrMi6NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJF6/z7ynK3Q97ovqz5weEqtjp8RMB8GA1UdIwQY
MBaAFFG/tGNTv8zP+UEty91IDxm0yYOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgt
YzFlOTc0YmVkMTJlLzEvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgtYzFlOTc0YmVkMTJl
LzEvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNlAAZG7
k9tlaQE7ZbxImOb08MzI0HSXf2iCgx6AO0EFsN3XgFao0yC4yWziFhO9PrnoQk5P
bPkInHcJ28IT0/JNtJF62rYHDu8ynPKahEpcBT6L+5ZuBdgJ7m7hptK5Ry7p3o34
lD0gyz0jUFL40cT1Q+AxyAVo5ZjXZBZT/rzXQO7pBYS51pBVgff4htvrlQEI3TuI
D6qawKB+XDChJqoHGBs9Yyw9AY2t7moucSZY/VHMJ3uBSLCAqYdgz8pi7NHcYPlu
8INEmAgVeuYtIC5GfY6rmTjP+urW42MoWiWCmlXAj28b7M0NTdJg8v2dTm+VDDNO
BORwi9/xuAC8VA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 05:02:43 2026 by rpki-client