Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File:                     UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier:          e11k0oXJxUJud8ZaTukR1cZoiXHVowAoeMJ5Pk0o7jo=
Subject key identifier:   F0:EE:40:54:ED:CD:C6:CF:61:F2:95:C5:DD:10:61:0B:9E:B8:6E:9C
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer:       /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial:       01A0C9D89EAA99F9BE2C98DD8951CF660F8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number:          19FD
Signing time:             Tue 22 Sep 2026 16:00:11 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:11 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:11 +0000
Files and hashes:         1: 5aow-99slZP8SVOes-TUh3rZ69w.roa (hash: LcVMTYwvGYnDzr+4t+xoLGSaGqGnbwNSajc10a7TVgs=)
                          2: R8VLlqxVzPN8ld2Tg0UaItsoYMs.roa (hash: O2XqZYJVg9I0qJHfw0FYVH2QGiz9GyNT5hxyGi4r7zA=)
                          3: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: vhpWC/Pw8GwCc2tRuIZg2zGtALfM8IOIhUo7Tnk5ArY=)
                          4: ZPeEf7cS5BJ9rtofzmpA-ppl3C4.roa (hash: wudhnRSlAK+yCHqZdQgA8uGQw89NdGjYT7UnH7gteD0=)
                          5: c3rz_qnKouFWFsxqpnJ4-B9oKJ8.roa (hash: q1FoERSAG1CZ2+/I1H71ycDFKWpa3QIpL1CV49ZYyiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d8:9e:aa:99:f9:be:2c:98:dd:89:51:cf:66:0f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
        Validity
            Not Before: Sep 22 16:00:11 2026 GMT
            Not After : Sep 23 16:00:11 2026 GMT
        Subject: CN=f0ee4054edcdc6cf61f295c5dd10610b9eb86e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:02:62:91:6d:d7:2a:2e:d2:37:ec:83:e3:
                    1d:75:da:9a:24:6d:47:45:53:27:af:fa:11:2a:ae:
                    93:43:d1:d4:fe:ed:be:c7:e7:db:bd:0d:dc:b1:c8:
                    18:47:98:92:3a:03:79:7b:40:41:e1:71:66:9d:16:
                    ec:2d:d1:25:0b:13:c4:1e:0c:38:cc:34:a2:17:5c:
                    b1:a6:d8:5a:25:a3:37:de:01:50:6d:d1:33:60:88:
                    f5:05:23:43:4f:e6:31:7f:9b:d0:83:09:03:ff:6d:
                    bb:e6:14:58:b1:9c:69:ce:d3:fb:e0:99:44:32:c6:
                    8d:45:29:de:2f:fa:35:8c:c9:df:f6:7d:e9:43:e6:
                    fb:14:3a:f8:4d:a3:01:43:56:4e:8f:a4:d1:98:21:
                    f1:59:6e:5d:b9:56:d2:19:43:8e:56:af:e7:8c:8f:
                    69:84:c0:ef:14:e9:c1:eb:36:ba:55:6c:b0:e8:b6:
                    54:17:fc:22:a8:09:1d:3a:b8:b7:73:62:d6:fb:79:
                    ed:d9:4d:bc:fd:42:b5:d0:ed:5a:32:0e:38:9b:19:
                    ef:10:5b:46:26:3d:46:9b:99:62:98:32:0b:5c:6f:
                    4e:cb:39:b7:0a:28:bf:49:18:00:7c:ba:30:37:37:
                    57:84:9a:6b:d6:a7:c8:e6:bf:bf:f3:85:a3:e4:bd:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EE:40:54:ED:CD:C6:CF:61:F2:95:C5:DD:10:61:0B:9E:B8:6E:9C
            X509v3 Authority Key Identifier:
                keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:49:a0:1c:a6:dc:05:58:67:95:ab:a7:5f:6a:fd:30:22:7a:
         2d:a8:32:02:ab:a4:35:b5:be:02:b8:13:fe:4f:a3:14:8d:c4:
         b5:b9:e8:8e:15:ad:98:65:d6:91:bd:df:e6:91:46:cc:af:c6:
         29:f7:f1:bd:8f:04:11:b7:45:e5:43:f7:3a:bd:ab:05:3d:59:
         9b:ae:ff:29:79:84:29:9c:2a:e8:16:70:83:f5:ce:e3:1a:35:
         bd:01:91:cc:5b:0c:f8:ab:17:f9:65:80:3a:a7:3d:bd:d1:6c:
         5f:ce:d5:87:8f:df:d3:35:7b:f5:ce:3e:86:a1:ad:e0:33:89:
         90:46:92:c1:77:5e:04:1c:6f:24:34:2e:0e:00:c2:53:9c:7d:
         b1:c3:17:08:d4:33:0e:bf:9e:e5:3f:7d:de:83:2b:74:d8:84:
         2b:fc:0d:e1:70:d5:49:41:cc:97:0b:19:82:92:5b:dc:72:a8:
         9c:03:e1:c8:fd:51:56:6c:ea:2c:46:58:70:db:9b:a3:b6:23:
         2a:36:dc:39:29:6b:1f:2a:73:ab:bd:44:7c:b5:b6:51:18:77:
         8e:5b:b1:32:60:60:80:83:94:9e:5d:f5:60:19:b6:8d:14:83:
         13:19:60:9b:58:06:c7:81:ec:8f:27:21:a6:2d:36:a1:f0:07:
         df:92:8c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:29:49 2026 by rpki-client