Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File:                     u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier:          tR4a3q6W/DCttplsprzWmUGPoFfT75AaTqYjhmK8U1g=
Subject key identifier:   47:96:8B:1B:B8:D1:02:B3:EE:8C:E9:62:2F:DE:47:AE:73:D9:76:4B
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer:       /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial:       01A1163CD07F4C7DD7252050027265B89011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number:          0824
Signing time:             Wed 07 Oct 2026 12:00:46 +0000
Manifest this update:     Wed 07 Oct 2026 12:00:46 +0000
Manifest next update:     Thu 08 Oct 2026 12:00:46 +0000
Files and hashes:         1: MC5MG-Z6VtT9_YIrjUXUEcfUGlw.roa (hash: gMM1r77gBOSVZXRH+MUIS9ejwECkB+oIOrPuTalHxFg=)
                          2: U749CR9_WlAi1xJYGuyn6GjT2NU.roa (hash: 6G+ZaRLJOfKdFp5MjptlVjWRCyME9VMpUPPRnUdd/ms=)
                          3: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: QezLdLUBpt9cOfeotA0wmXtuRZRtN+BDWjmCD82LcSQ=)
                          4: ye9CJv-gRnNlmaYw7SD_tgaq9eI.roa (hash: joTKLvlxOsVk56Ag3bqf527kK8bL1jJHNadx5Q0xskM=)
                          5: ymAj9efrc4iFY_0So-yc0MrAp7E.roa (hash: 0RVzMDPDhXTkKrBe4COdDJUwa/RLXdTmgG4ILjY2Rgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:3c:d0:7f:4c:7d:d7:25:20:50:02:72:65:b8:90:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Validity
            Not Before: Oct  7 12:00:46 2026 GMT
            Not After : Oct  8 12:00:46 2026 GMT
        Subject: CN=47968b1bb8d102b3ee8ce9622fde47ae73d9764b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:69:62:15:e2:40:e6:d1:7c:a2:45:94:00:f2:
                    9a:03:99:03:4f:ba:5b:25:68:f5:f6:7b:10:7a:4e:
                    87:2c:51:53:81:d8:f7:c0:d6:f0:da:5a:76:cb:1a:
                    30:36:50:f5:a4:9f:29:52:e2:da:0a:7f:94:7d:af:
                    c9:a3:39:fd:04:96:55:13:5e:ba:46:a4:cc:2f:14:
                    4c:6f:67:b8:50:22:e8:b8:b4:7e:46:cd:02:b3:34:
                    48:19:85:89:cb:53:10:d2:cc:1a:cf:cb:26:05:03:
                    62:7e:53:65:63:8d:db:99:57:fc:ec:ee:94:04:84:
                    cb:b8:13:76:84:47:75:76:5a:6b:b2:3b:f0:58:14:
                    45:bb:80:12:ff:5b:1e:f4:8a:65:94:09:a3:1a:80:
                    5e:8b:79:d6:c5:2c:a8:c0:3c:4f:54:b6:25:7f:e3:
                    3d:70:74:77:11:9e:d6:14:6c:65:0d:6c:4a:6d:09:
                    c3:84:87:2d:fe:37:bd:83:e5:51:81:5b:5f:87:4c:
                    03:b5:0c:21:d7:f0:85:8a:a7:a3:82:31:ac:e4:a8:
                    1e:57:f8:34:41:49:8b:1e:77:51:2e:c1:a6:40:95:
                    7d:a7:99:90:b5:26:41:ce:bc:32:7c:6a:ee:74:76:
                    f4:bc:ba:af:d1:fa:34:b1:cd:38:f1:e2:8d:a1:12:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:8B:1B:B8:D1:02:B3:EE:8C:E9:62:2F:DE:47:AE:73:D9:76:4B
            X509v3 Authority Key Identifier:
                keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d2:4a:d6:d8:6c:05:44:c1:2b:5e:ae:c5:88:b5:01:cb:2e:
         2e:7a:5c:a0:c9:58:2f:82:cc:d9:5b:b8:81:18:06:4b:a0:b9:
         b3:2a:16:48:4d:7b:a1:05:9a:bc:b1:a9:aa:9b:9b:af:c7:1a:
         cb:a2:72:d2:19:b9:05:27:1b:1b:f5:71:bf:23:18:e1:8c:04:
         67:d2:d5:01:4f:15:4f:3b:6c:b2:34:b2:e9:0e:5d:d8:99:87:
         af:25:4b:e8:2d:79:6e:55:90:ce:4d:f2:d1:80:0d:a1:7c:f2:
         75:b1:a2:55:80:02:8e:de:4c:74:44:17:6a:57:a4:a4:db:0e:
         63:50:42:d8:fc:e5:54:49:e6:5e:7d:60:ce:9e:09:38:9c:6d:
         da:4e:d8:ee:53:5a:46:82:30:f7:52:d9:fc:ca:f6:79:2c:e0:
         db:74:1a:02:3e:88:6a:3e:ea:ec:99:64:72:51:1b:91:dd:77:
         a2:a6:73:4c:bd:0a:72:15:15:30:f8:94:d3:f2:80:2b:25:03:
         13:a1:1c:a1:dd:af:ac:e9:3c:01:db:29:23:aa:a3:63:fc:a6:
         e1:12:0e:57:ab:80:70:c5:60:a8:a7:99:52:00:5c:7a:e2:d9:
         ae:c7:23:17:43:9e:8f:cf:80:7f:f6:7c:03:82:23:b9:ed:e5:
         16:69:0a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 16:20:39 2026 by rpki-client