Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File:                     UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier:          6CnzUa8LBF9kagU3WQ7N6Q62WoExTnZWHlUtsdJXCj8=
Subject key identifier:   77:F4:75:2D:A7:9B:E9:CD:C3:02:82:5A:A9:6E:ED:56:27:78:E4:B7
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer:       /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial:       019EC06DB3686889F99124CD88CEDF551507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number:          18EF
Signing time:             Sat 13 Jun 2026 10:01:15 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:15 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:15 +0000
Files and hashes:         1: 5aow-99slZP8SVOes-TUh3rZ69w.roa (hash: LcVMTYwvGYnDzr+4t+xoLGSaGqGnbwNSajc10a7TVgs=)
                          2: R8VLlqxVzPN8ld2Tg0UaItsoYMs.roa (hash: O2XqZYJVg9I0qJHfw0FYVH2QGiz9GyNT5hxyGi4r7zA=)
                          3: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: p35Rj22Mgq8egQ2ePcHywZ2xWjN16zeBbtnHWnsxjbk=)
                          4: ZPeEf7cS5BJ9rtofzmpA-ppl3C4.roa (hash: wudhnRSlAK+yCHqZdQgA8uGQw89NdGjYT7UnH7gteD0=)
                          5: c3rz_qnKouFWFsxqpnJ4-B9oKJ8.roa (hash: q1FoERSAG1CZ2+/I1H71ycDFKWpa3QIpL1CV49ZYyiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:b3:68:68:89:f9:91:24:cd:88:ce:df:55:15:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
        Validity
            Not Before: Jun 13 10:01:15 2026 GMT
            Not After : Jun 14 10:01:15 2026 GMT
        Subject: CN=77f4752da79be9cdc302825aa96eed562778e4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:f6:f3:c5:b8:15:ca:30:d0:ff:f7:00:18:
                    5d:3c:f6:6c:51:74:a1:87:ac:e0:bd:df:6f:0f:a3:
                    a4:29:92:6b:68:a3:88:88:30:78:0b:1e:a3:78:fe:
                    ce:b3:57:42:67:82:92:7d:d6:9b:b7:98:04:b3:ce:
                    c3:45:99:2c:08:f6:87:31:a3:cb:1f:7b:a1:81:0e:
                    2f:6e:cb:89:6d:72:25:7a:b4:06:fc:b4:7d:a5:42:
                    5e:96:a2:7a:45:35:95:df:34:5a:ca:93:9c:04:c0:
                    fd:f0:f8:50:a8:59:3a:0d:c1:7d:b4:61:5d:15:32:
                    80:df:70:c1:84:2c:ee:e9:b3:4e:c2:bb:cc:fe:48:
                    6e:88:78:10:e8:fe:34:75:ef:28:bd:ed:0f:e9:7f:
                    8c:b9:c0:20:92:79:bb:6d:8a:95:47:6d:f5:9d:5a:
                    af:53:64:92:63:12:1d:9f:22:f3:2f:b0:12:0c:6c:
                    cc:e9:b6:0c:cc:40:2d:6b:6c:f2:4f:55:5e:92:93:
                    e1:f9:bb:62:e8:40:7f:b6:4f:fb:bd:eb:8b:65:53:
                    20:52:93:48:06:d7:a6:33:6e:83:56:9b:6b:a2:f2:
                    38:e4:93:8e:42:92:0f:93:2b:f0:87:cf:c9:e5:17:
                    d4:b9:3a:64:ab:6e:4a:7f:3e:0d:62:39:7b:c3:aa:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F4:75:2D:A7:9B:E9:CD:C3:02:82:5A:A9:6E:ED:56:27:78:E4:B7
            X509v3 Authority Key Identifier:
                keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:1f:d7:af:df:87:ea:ef:1a:ba:d1:93:24:1c:cd:1e:3a:ab:
         a8:6b:c1:ee:d1:a9:1a:0c:84:43:7d:b0:ca:f1:5d:c3:02:e0:
         ab:70:fa:27:68:77:6d:da:14:7c:33:85:d6:6f:b6:72:04:01:
         2d:bf:9d:c4:84:9a:aa:e0:ca:46:a2:3b:0d:de:57:e5:7f:36:
         8b:13:78:e1:a2:0c:57:80:7a:70:fe:f8:0d:b1:e9:c8:bd:6f:
         07:9e:80:20:da:4e:f3:12:26:ac:57:d2:b2:2e:36:95:51:27:
         78:bb:2d:8e:7e:a0:30:93:c0:c4:65:7f:72:68:22:63:26:1d:
         50:52:60:e4:15:b1:44:c9:98:a9:0d:ce:72:3a:9e:e3:f9:d2:
         ee:fb:6e:3f:4d:d9:b5:9b:18:3d:f8:74:97:34:56:d2:2d:da:
         73:25:ea:95:3b:b5:b6:db:cc:6b:bd:36:55:93:15:ce:e9:7e:
         3a:be:e5:0d:be:dc:ea:27:ae:f4:d9:fc:5f:a8:38:e5:61:26:
         43:f1:9a:4c:79:30:f8:cd:a9:a8:6f:0e:73:a4:b5:17:29:19:
         1f:52:4e:00:a0:c9:4c:0e:d9:a3:27:9a:b6:2b:f2:c4:1b:29:
         e4:4d:7b:4f:7f:48:f8:6d:d1:6a:5d:0f:c5:5d:82:a7:73:e2:
         4a:c1:15:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbbNoaIn5kSTNiM7fVRUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTQ1OWMwMjdhODZlMWE1NTcwOWY4NjA5MzdmZTJmODFi
MzEyZjAwHhcNMjYwNjEzMTAwMTE1WhcNMjYwNjE0MTAwMTE1WjAzMTEwLwYDVQQD
Eyg3N2Y0NzUyZGE3OWJlOWNkYzMwMjgyNWFhOTZlZWQ1NjI3NzhlNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/v288W4Fcow0P/3ABhdPPZsUXSh
h6zgvd9vD6OkKZJraKOIiDB4Cx6jeP7Os1dCZ4KSfdabt5gEs87DRZksCPaHMaPL
H3uhgQ4vbsuJbXIlerQG/LR9pUJelqJ6RTWV3zRaypOcBMD98PhQqFk6DcF9tGFd
FTKA33DBhCzu6bNOwrvM/khuiHgQ6P40de8ove0P6X+MucAgknm7bYqVR231nVqv
U2SSYxIdnyLzL7ASDGzM6bYMzEAta2zyT1VekpPh+bti6EB/tk/7veuLZVMgUpNI
BtemM26DVptrovI45JOOQpIPkyvwh8/J5RfUuTpkq25Kfz4NYjl7w6oMewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHf0dS2nm+nNwwKCWqlu7VYneOS3MB8GA1UdIwQY
MBaAFFAUWcAnqG4aVXCfhgk3/i+BsxLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYt
MTYyYjAyYmIxNWJkLzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYtMTYyYjAyYmIxNWJk
LzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyh/Xr9+H
6u8autGTJBzNHjqrqGvB7tGpGgyEQ32wyvFdwwLgq3D6J2h3bdoUfDOF1m+2cgQB
Lb+dxISaquDKRqI7Dd5X5X82ixN44aIMV4B6cP74DbHpyL1vB56AINpO8xImrFfS
si42lVEneLstjn6gMJPAxGV/cmgiYyYdUFJg5BWxRMmYqQ3Ocjqe4/nS7vtuP03Z
tZsYPfh0lzRW0i3acyXqlTu1ttvMa702VZMVzul+Or7lDb7c6ieu9Nn8X6g45WEm
Q/GaTHkw+M2pqG8Oc6S1FykZH1JOAKDJTA7ZoyeativyxBsp5E17T39I+G3Ral0P
xV2Cp3PiSsEV8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:26 2026 by rpki-client