Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File:                     ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier:          6rxJPZSYnoJknSGEBdIpfvL2tjt0NTOtCwPLcQZ4xyU=
Subject key identifier:   8F:5E:24:5F:62:43:6A:31:97:86:C5:99:23:E3:6A:62:5F:1C:D5:52
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer:       /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial:       019EBEED0CA800C6F24FCF8F054AF8C8C849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number:          0B29
Signing time:             Sat 13 Jun 2026 03:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:06 +0000
Files and hashes:         1: 0UnyCR-s9iVj-44nCnj3n-e4xtA.roa (hash: qIADwbji8igygxrgQjLDhHXbAfWGtCs+G3X3x04AbP0=)
                          2: MY0oyyxJxhBaxV6e35Jj6RwVRN4.roa (hash: b5AkjRiP8AjbeAnZmdI+p2iRLfqlwKytew/Xvvx0yg0=)
                          3: UIXymbU01AcELRK4XQgaDZSENDk.roa (hash: XHkCVd4jVL4ur9JpM+WZI6Fqyp3dAyt/v/b4jYj6KaE=)
                          4: eG6Nd0AEheFJzh2ZzgIc-HGYq9Y.roa (hash: tN9thuUXDSgdN1PacHIHF6V4krE+2Pkx1P2dF2wQPtI=)
                          5: lhhkdnjbTFcMf_WSQ6Vdc7cUgLg.roa (hash: vPcYoUUrECmWg0bzxsg1BXvUiLIZvalyKunX15L0XGc=)
                          6: q_YJm9uusZ1gdH6rfgf8d1zvcNE.roa (hash: 7dAiJ/6GQJnXgS5Q7uLwSzG/j868J9jWgDmOCQtKyWM=)
                          7: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: z4cW92PI5aUQ7QMdulfEWm/KRbszkdQ0fbSOdtedpWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:0c:a8:00:c6:f2:4f:cf:8f:05:4a:f8:c8:c8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
        Validity
            Not Before: Jun 13 03:01:06 2026 GMT
            Not After : Jun 14 03:01:06 2026 GMT
        Subject: CN=8f5e245f62436a319786c59923e36a625f1cd552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:b1:ec:14:99:3e:9f:16:10:5c:1d:2e:7f:
                    0a:1e:b2:86:4d:1f:22:24:44:01:ac:5a:f3:18:93:
                    dd:be:2b:1d:ad:bf:a8:e5:91:75:65:5a:b2:c1:0a:
                    4a:c3:73:5c:13:b4:e9:7d:2d:71:fe:a7:2a:ca:5d:
                    43:ef:fc:9d:f7:e8:41:aa:17:09:78:f5:9c:5e:54:
                    3c:50:10:03:34:f6:9d:6d:20:06:80:65:ad:fe:98:
                    df:9a:53:5f:46:69:01:50:eb:b4:f9:e3:05:20:f6:
                    29:fb:d2:76:ce:21:59:3c:82:1b:3a:90:75:1d:32:
                    14:35:f4:f8:31:30:fa:a7:04:18:f8:e2:bc:41:2c:
                    26:31:e8:ac:37:20:fa:c8:ce:47:dc:59:29:cd:1c:
                    4e:8f:49:e5:5f:88:1a:bb:61:1f:f3:7f:f9:16:2a:
                    de:79:58:d1:4d:ad:02:3d:5c:0b:5e:c1:76:21:17:
                    75:13:c6:36:f7:63:09:2e:74:4b:aa:28:ab:05:d8:
                    31:ef:f1:e9:a7:dc:75:d0:ab:bc:63:6f:de:7b:4c:
                    d7:60:7b:71:fa:f3:7a:3c:0f:33:e6:7b:1c:2d:4a:
                    96:53:f1:7f:80:5f:3f:b0:f6:37:3b:26:91:4d:3d:
                    ba:c4:e1:2b:fc:59:60:85:e9:56:4f:1a:d9:a9:54:
                    3f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5E:24:5F:62:43:6A:31:97:86:C5:99:23:E3:6A:62:5F:1C:D5:52
            X509v3 Authority Key Identifier:
                keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:11:2b:8a:57:35:9d:88:3d:1a:c7:9f:b6:41:2b:e1:4d:92:
         54:b9:3a:44:d4:64:54:9a:e9:74:2d:92:5b:c7:9b:d2:26:23:
         0e:28:d9:d5:c6:d1:dc:0e:3e:ff:e8:49:e3:55:d3:4a:f7:98:
         a3:d9:1a:fe:70:0d:9b:01:97:f7:a5:04:db:65:3a:9f:02:16:
         db:9a:79:74:79:99:1c:e2:2a:05:a7:e6:cf:72:f8:29:ab:e7:
         ab:86:7b:2d:21:ef:07:af:70:c2:34:75:48:1f:ff:ed:71:e1:
         4a:36:4e:8d:d7:ce:07:7f:8e:21:de:04:b1:76:e9:e0:d0:a8:
         38:73:84:c8:5c:4b:a4:bc:83:34:07:e3:67:c6:a3:37:68:22:
         5d:b6:f9:84:1d:a1:9f:48:40:bf:40:90:6f:d2:89:1e:dd:38:
         ab:f4:85:58:d6:2d:5c:20:c9:fb:ae:98:57:5b:68:43:f8:81:
         b5:79:cc:24:de:ba:bb:a6:f3:44:2e:31:4c:27:a8:58:1b:80:
         e6:10:0f:33:01:b1:b2:7f:5b:8c:61:13:4a:76:d3:d6:61:c3:
         96:00:d1:13:45:13:34:2c:2a:a1:ab:fb:60:ff:93:b8:de:f9:
         da:af:68:26:29:57:12:16:54:b5:5b:c4:0d:4b:53:03:0f:87:
         c0:f3:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:25 2026 by rpki-client