Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File:                     UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier:          HJ+zH437+rpUDhLODFeX4vNGDnm15hcLMft5P3JYEaI=
Subject key identifier:   07:EA:7B:1F:E0:40:BA:04:ED:17:A8:31:0A:D2:DF:09:33:9C:50:14
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer:       /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial:       019CAB6AFE50D592F42447951CFF7B502CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number:          17DB
Signing time:             Sun 01 Mar 2026 22:00:41 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:41 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:41 +0000
Files and hashes:         1: 5aow-99slZP8SVOes-TUh3rZ69w.roa (hash: LcVMTYwvGYnDzr+4t+xoLGSaGqGnbwNSajc10a7TVgs=)
                          2: R8VLlqxVzPN8ld2Tg0UaItsoYMs.roa (hash: O2XqZYJVg9I0qJHfw0FYVH2QGiz9GyNT5hxyGi4r7zA=)
                          3: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: bWn2Tjg1inHYUX1n/eYyqBroj9etdm+x3+yTY/EQf2A=)
                          4: ZPeEf7cS5BJ9rtofzmpA-ppl3C4.roa (hash: wudhnRSlAK+yCHqZdQgA8uGQw89NdGjYT7UnH7gteD0=)
                          5: c3rz_qnKouFWFsxqpnJ4-B9oKJ8.roa (hash: q1FoERSAG1CZ2+/I1H71ycDFKWpa3QIpL1CV49ZYyiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:fe:50:d5:92:f4:24:47:95:1c:ff:7b:50:2c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
        Validity
            Not Before: Mar  1 22:00:41 2026 GMT
            Not After : Mar  2 22:00:41 2026 GMT
        Subject: CN=07ea7b1fe040ba04ed17a8310ad2df09339c5014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:a8:f3:5b:14:04:34:52:04:1b:45:c0:0a:
                    a2:8a:2b:9a:f3:66:84:62:fa:29:fc:41:77:bd:ba:
                    32:9e:fc:05:c2:48:0c:b7:f4:c1:23:9a:ef:a8:01:
                    ad:a0:5d:27:26:fb:a1:e5:4a:72:c7:3a:94:f8:89:
                    2c:68:d0:fc:22:e8:fe:cc:cd:d3:6c:2b:3d:10:72:
                    70:00:b0:69:86:04:9d:fc:16:52:e3:c9:2b:35:81:
                    62:5d:b3:e8:14:bd:56:b7:1e:76:44:ab:06:b8:8e:
                    8a:ea:44:f4:51:94:64:1f:c9:38:38:6d:6b:fa:79:
                    42:95:c6:0a:9d:a4:0c:42:41:87:95:e8:8d:97:88:
                    9b:a7:93:85:cd:4b:55:ed:6a:f7:ad:42:14:c5:61:
                    09:2a:d6:10:76:24:1b:47:61:18:23:86:84:d5:07:
                    d0:ca:83:e8:71:3c:19:d8:93:a9:80:42:b3:c1:76:
                    da:b7:81:83:22:2d:ad:53:9c:fd:93:e5:1a:05:8c:
                    66:68:63:56:80:23:ff:4a:b5:57:5e:d9:d0:07:84:
                    43:f2:f5:81:a0:d7:1d:d8:74:71:a4:85:b6:f8:69:
                    3e:e3:e3:c7:89:81:ad:0e:3d:55:fe:3e:26:92:c9:
                    0f:bf:db:89:55:63:7e:2b:b3:04:4a:ec:5c:d0:28:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EA:7B:1F:E0:40:BA:04:ED:17:A8:31:0A:D2:DF:09:33:9C:50:14
            X509v3 Authority Key Identifier:
                keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3c:d1:58:9e:b2:e6:7b:32:ef:cf:f0:00:71:92:a0:b5:07:
         0f:4f:de:df:89:d3:db:cd:b6:be:95:bb:de:58:ae:92:98:97:
         64:93:b9:f4:4d:12:a3:f4:d0:20:a6:91:e1:53:d6:9f:e3:6d:
         4a:a3:ed:fd:55:7a:21:49:30:7d:a1:27:29:92:6c:2d:c7:ec:
         e3:2a:72:71:bf:63:50:35:38:68:b9:2b:e8:e4:74:07:83:58:
         cf:49:10:d5:35:31:4e:74:ac:be:43:63:13:25:fc:ac:bf:52:
         7d:64:e8:74:16:63:9e:ee:c3:7e:d3:07:2b:2f:55:86:e6:3e:
         66:be:94:b1:5d:dd:b2:ec:e7:9d:6a:82:00:10:1c:5b:ca:8f:
         ea:83:c5:69:c7:b3:dc:55:b1:d5:0f:94:fd:90:56:43:6b:98:
         53:4c:96:5d:5c:b6:6e:51:9a:e7:32:9c:b2:20:dc:fe:47:cf:
         d0:fc:a6:34:29:bb:2c:a5:95:9e:2a:07:37:5a:51:ea:aa:f4:
         58:c5:c8:90:a6:22:18:67:da:cc:d9:7a:b5:f5:b7:8b:71:2a:
         13:88:8a:4f:f7:d1:59:53:21:e4:32:9f:cd:33:d6:2d:49:e5:
         b8:9c:dd:e8:7d:c0:17:a4:97:4c:71:32:42:37:3b:ca:4a:5b:
         56:12:07:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrav5Q1ZL0JEeVHP97UCz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTQ1OWMwMjdhODZlMWE1NTcwOWY4NjA5MzdmZTJmODFi
MzEyZjAwHhcNMjYwMzAxMjIwMDQxWhcNMjYwMzAyMjIwMDQxWjAzMTEwLwYDVQQD
EygwN2VhN2IxZmUwNDBiYTA0ZWQxN2E4MzEwYWQyZGYwOTMzOWM1MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzCo81sUBDRSBBtFwAqiiiua82aE
Yvop/EF3vboynvwFwkgMt/TBI5rvqAGtoF0nJvuh5UpyxzqU+IksaND8Iuj+zM3T
bCs9EHJwALBphgSd/BZS48krNYFiXbPoFL1Wtx52RKsGuI6K6kT0UZRkH8k4OG1r
+nlClcYKnaQMQkGHleiNl4ibp5OFzUtV7Wr3rUIUxWEJKtYQdiQbR2EYI4aE1QfQ
yoPocTwZ2JOpgEKzwXbat4GDIi2tU5z9k+UaBYxmaGNWgCP/SrVXXtnQB4RD8vWB
oNcd2HRxpIW2+Gk+4+PHiYGtDj1V/j4mkskPv9uJVWN+K7MESuxc0ChHywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfqex/gQLoE7ReoMQrS3wkznFAUMB8GA1UdIwQY
MBaAFFAUWcAnqG4aVXCfhgk3/i+BsxLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYt
MTYyYjAyYmIxNWJkLzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYtMTYyYjAyYmIxNWJk
LzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDzRWJ6y
5nsy78/wAHGSoLUHD0/e34nT2822vpW73liukpiXZJO59E0So/TQIKaR4VPWn+Nt
SqPt/VV6IUkwfaEnKZJsLcfs4ypycb9jUDU4aLkr6OR0B4NYz0kQ1TUxTnSsvkNj
EyX8rL9SfWTodBZjnu7DftMHKy9VhuY+Zr6UsV3dsuznnWqCABAcW8qP6oPFacez
3FWx1Q+U/ZBWQ2uYU0yWXVy2blGa5zKcsiDc/kfP0PymNCm7LKWVnioHN1pR6qr0
WMXIkKYiGGfazNl6tfW3i3EqE4iKT/fRWVMh5DKfzTPWLUnluJzd6H3AF6SXTHEy
Qjc7ykpbVhIHfw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:12 2026 by rpki-client