Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
File:                     u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json)
Hash identifier:          UCbrzXm4ZYbrW6W2b8n1lfWL6WRxS5s1Xhs01+JCI2w=
Subject key identifier:   16:5B:E6:EA:B5:0E:09:4C:4A:7A:A4:DF:3D:53:A4:BE:48:D7:2A:03
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Certificate issuer:       /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial:       019D2816D0439340084A41A8E86B312071FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
Manifest number:          025C
Signing time:             Thu 26 Mar 2026 03:01:16 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:16 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:16 +0000
Files and hashes:         1: GRbOxMtystP_abdOU7IPfTRksLo.roa (hash: Qf9umPgPmRu2Fd9xEaKBzrLeI8Nv9dYFfVdW3Z8loMI=)
                          2: IF-dQIrNICfVhG9zO_nJPALR-dQ.roa (hash: 28voGBv/WZH5Cfsgew8XwJMKo8y9ShAkKaFAqMfu7Q4=)
                          3: V73bm1kSNmHg-C0_nIo7CkeSIXs.roa (hash: CVQL9co2yo6FCueWNiD8EvSqpDL8q8jnyz+ynK1Hx2E=)
                          4: _9OTnWhfptNmahMwIUd6M8KUigY.roa (hash: gOfBWU8NyLveB72fRV3TQVbWthwb/Lqj0yi3WTcOUM4=)
                          5: nue0zLCdoQpgxGStseN2fkjSnI4.roa (hash: VSsTvgcmCl/+CH4M98aAryux6Otm4nE6txZTSh2dlVw=)
                          6: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: CmaJ1KpRY1VzVaxFY8+Zlf+I55870XDtu0QaTce2/XU=)
                          7: yp_V2SDm61CRWvjnGT6m5_yIOPI.roa (hash: bpOGJYyMnTqmj9p+ne0ebzB6DmKNjVReNZUhs0YS4n4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:d0:43:93:40:08:4a:41:a8:e8:6b:31:20:71:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
        Validity
            Not Before: Mar 26 03:01:16 2026 GMT
            Not After : Mar 27 03:01:16 2026 GMT
        Subject: CN=165be6eab50e094c4a7aa4df3d53a4be48d72a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:da:72:f1:1f:cd:0b:cc:f2:22:88:70:b6:
                    d3:53:4b:e9:b1:4c:6a:a1:48:2e:35:f9:4f:e1:74:
                    53:0c:4b:bd:bb:25:3c:89:4d:98:e4:f8:18:b2:be:
                    4a:ee:91:0c:d1:35:e1:65:97:41:b7:04:fa:d8:d4:
                    d7:d6:d5:b4:66:94:27:32:88:cb:0c:3d:bc:bf:88:
                    e2:ec:c1:b5:3b:df:34:02:fc:0c:7d:7e:f7:07:b8:
                    a5:80:38:02:cd:37:19:c3:84:81:ed:c0:15:8a:7f:
                    72:ac:2c:01:6d:ce:46:81:a4:89:8e:25:27:78:fd:
                    65:b3:ed:aa:f5:b2:25:21:a0:52:93:96:86:75:7a:
                    61:3a:c5:ae:6b:38:91:5c:6a:e5:21:8a:62:eb:d1:
                    50:71:6a:e6:6a:78:70:c9:24:c4:9a:15:b1:d4:69:
                    a4:32:bd:95:95:03:75:d9:26:9c:00:3e:1f:3d:b2:
                    2c:79:3d:31:07:6b:90:26:94:56:aa:d3:44:42:ad:
                    34:b4:04:16:3e:e8:68:a3:bb:09:db:cb:b0:09:9a:
                    60:e0:e3:59:8f:ca:05:4c:3c:08:8f:1e:81:7f:ae:
                    0e:1e:12:d5:f3:65:2f:a5:c2:c8:81:37:75:7b:9d:
                    75:be:17:01:01:0e:b2:a1:6a:a4:00:24:a0:0f:59:
                    b4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5B:E6:EA:B5:0E:09:4C:4A:7A:A4:DF:3D:53:A4:BE:48:D7:2A:03
            X509v3 Authority Key Identifier:
                keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d8:ca:02:a0:12:e4:30:e8:ac:9c:03:17:ad:01:20:a1:fd:
         af:63:1d:30:0f:de:4f:f7:ea:ff:4f:ef:cc:10:e4:63:6e:ea:
         e7:9f:a2:90:4a:59:f6:ac:e6:25:92:b2:73:09:54:69:0d:8a:
         b9:57:ac:1b:d1:5c:31:cd:1a:5b:97:94:1f:b1:ec:09:44:17:
         19:e3:17:86:af:b1:8c:a5:2b:fc:3a:ae:74:31:f8:30:6e:29:
         f3:04:6c:22:36:f9:fd:55:f1:3d:a2:a5:5e:73:f4:94:8d:55:
         e8:7d:91:4f:03:54:e3:92:09:08:81:63:41:4c:50:a2:4c:9a:
         03:aa:8b:91:8b:46:0f:08:f4:54:96:bd:b5:a1:f6:04:98:59:
         85:5b:47:e5:7c:e5:24:21:25:e7:cd:29:3f:3d:2a:bc:d8:7d:
         70:d5:5b:3e:be:e3:89:d0:50:24:93:10:ae:03:b3:9d:2b:41:
         46:11:6d:46:2e:03:b9:0b:c2:b7:d2:ee:16:1b:ef:97:fe:e4:
         a1:b9:6f:2c:ad:24:95:3b:2d:dd:99:88:f5:63:6a:14:b0:5d:
         84:e6:6c:df:bc:4f:e8:ea:57:6a:4a:67:de:0f:fa:33:ea:32:
         f7:fe:e8:c0:b7:6e:3b:e0:53:49:56:75:07:bf:a5:b0:1d:26:
         f3:21:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:14 2026 by rpki-client