Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
File:                     u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json)
Hash identifier:          pc+JECRiAG5+tRKDoeUBB8US+bnhGjJN2oBWdwcUAmA=
Subject key identifier:   E4:54:85:23:10:AA:48:C6:38:22:11:42:C1:55:C8:3A:83:18:78:DA
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Certificate issuer:       /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial:       019D27A8B7D28C5F44D058DB8A9B6749D3BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
Manifest number:          0224
Signing time:             Thu 26 Mar 2026 01:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:01 +0000
Files and hashes:         1: I7p2CVdLUND1ZRszmGKzKIrLt74.roa (hash: jiBTRZ5olwGDj0RvfZj3FhxYBTormm6OVToMfN4KMps=)
                          2: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: q0Vhtytw5ssJ8VR1bQM7QPxX6BAbc2cvkuYuYl8QZPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:b7:d2:8c:5f:44:d0:58:db:8a:9b:67:49:d3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
        Validity
            Not Before: Mar 26 01:01:01 2026 GMT
            Not After : Mar 27 01:01:01 2026 GMT
        Subject: CN=e454852310aa48c638221142c155c83a831878da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6b:f6:3f:40:81:d2:09:a9:ae:26:07:56:ae:
                    14:a2:50:cf:8a:79:dd:5a:2d:ea:59:3d:df:3d:8f:
                    67:ee:76:55:d3:24:5a:93:3b:82:fd:d0:ab:c4:eb:
                    fd:f7:f8:99:2e:1c:2d:ba:f7:76:7b:09:ef:b9:1e:
                    8f:07:14:b6:52:33:78:de:89:1d:fb:4c:f9:ee:a3:
                    1d:66:ba:ca:a5:5d:c1:c2:00:f1:1d:a2:20:9f:fc:
                    78:31:28:96:3d:d9:7d:85:62:b9:e9:e2:aa:cc:8e:
                    15:b5:23:84:79:6a:6e:6c:62:1e:4a:68:df:c2:b2:
                    b1:ee:73:f5:9d:97:a5:d8:e4:bd:4b:86:ff:07:c2:
                    2f:44:ec:dc:22:7a:82:83:00:a7:0a:09:f6:69:de:
                    a8:7e:59:51:76:02:75:3d:c1:d1:7a:43:85:cc:55:
                    bc:48:a8:ae:28:cc:ae:fb:c1:be:69:4a:8a:65:8a:
                    cd:00:ae:c3:b5:51:ee:7b:13:b0:c4:1b:54:a4:76:
                    46:7f:5a:f9:35:45:b1:3f:bd:a0:45:26:da:e9:82:
                    b3:c0:6d:cf:a2:0a:0e:ef:c0:ef:ff:fe:37:6b:96:
                    3f:3e:6d:a9:a5:91:18:e4:91:27:0a:5c:7b:21:dc:
                    59:3a:ef:d5:48:54:29:8b:bc:62:ee:03:1c:68:65:
                    ad:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:54:85:23:10:AA:48:C6:38:22:11:42:C1:55:C8:3A:83:18:78:DA
            X509v3 Authority Key Identifier:
                keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:3f:6b:44:5d:45:12:43:e7:73:71:ab:53:f2:5c:34:ab:af:
         20:9c:57:91:38:10:86:fe:72:fe:59:50:4c:76:80:6a:9b:84:
         77:76:d1:d5:08:77:d5:68:c8:d4:92:04:b2:cf:29:58:40:16:
         04:38:57:ab:b0:d0:99:8a:7b:af:cf:84:ab:8a:16:a0:1d:35:
         a9:76:c1:84:cd:03:da:73:a1:8f:9f:6e:63:3e:a4:a7:f6:a6:
         41:60:72:b7:31:bd:81:6e:f3:39:72:bb:d3:8c:84:1e:74:86:
         83:a5:6b:9e:d6:88:67:a1:da:64:0a:13:fd:92:0c:93:ae:22:
         0b:13:ec:34:88:31:cf:f3:17:30:1f:0e:1d:a4:7c:54:a2:55:
         99:d3:9d:f7:84:71:7b:cf:af:a2:0f:39:9f:bd:f9:4f:51:95:
         44:1f:51:05:c4:97:8a:18:68:38:58:bb:0e:df:b4:3b:0b:bc:
         f9:79:39:7b:eb:3d:dc:cd:9f:5f:ce:e9:16:94:34:a6:2b:d7:
         63:36:85:e3:34:7c:29:f3:56:4a:ad:39:16:47:37:3d:5d:dd:
         2a:f7:af:32:43:2e:5d:04:ed:69:50:0d:ff:b5:00:9f:31:e8:
         e5:80:88:b7:ac:c3:83:ed:eb:02:c1:3b:6b:da:90:76:90:4e:
         08:32:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:12 2026 by rpki-client