Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File:                     u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier:          r2KSW8g//LH+UTgbuud7r2q97e6uVfhXG2no+r3OWRs=
Subject key identifier:   09:BA:4A:E0:06:E6:3E:F2:04:F2:D8:75:09:D6:26:5A:87:C9:69:44
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer:       /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial:       019D2A04C5A2033292AD786B35838C666B14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number:          0618
Signing time:             Thu 26 Mar 2026 12:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:48 +0000
Files and hashes:         1: sMe3qyjPMBxmUx12Kr2L5x5j4x8.roa (hash: o3HT3SMzkdktxTo6fFe19id6QAtdeGMFjlINk/g4ScA=)
                          2: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: VkmG92HcMmBYt2Ad2qM5okciHZR8EsZLt92zJuk9xmg=)
                          3: ye9CJv-gRnNlmaYw7SD_tgaq9eI.roa (hash: joTKLvlxOsVk56Ag3bqf527kK8bL1jJHNadx5Q0xskM=)
                          4: ymAj9efrc4iFY_0So-yc0MrAp7E.roa (hash: 0RVzMDPDhXTkKrBe4COdDJUwa/RLXdTmgG4ILjY2Rgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:c5:a2:03:32:92:ad:78:6b:35:83:8c:66:6b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Validity
            Not Before: Mar 26 12:00:48 2026 GMT
            Not After : Mar 27 12:00:48 2026 GMT
        Subject: CN=09ba4ae006e63ef204f2d87509d6265a87c96944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:b8:54:b9:62:36:f5:4d:6f:8a:50:52:62:
                    a8:e1:28:d8:f7:61:9d:0c:54:0d:bb:cc:33:05:a8:
                    ef:36:57:24:c8:ed:ad:30:f4:e7:c5:87:f6:49:60:
                    d3:6d:4f:f1:08:0b:dc:15:10:92:54:24:37:45:6b:
                    20:ef:4f:d0:81:79:e3:43:db:e2:94:ab:c4:2e:5f:
                    f6:c9:8c:01:89:c7:bf:37:f5:ea:cd:67:45:28:a5:
                    9d:7b:cf:74:4a:de:6d:f7:64:4f:9e:fb:79:87:30:
                    bf:e9:9b:ab:9d:15:0a:6e:34:3d:f8:3a:45:5a:8c:
                    27:70:71:11:01:bd:7c:49:74:9e:aa:83:06:39:fa:
                    94:b4:30:53:b8:71:25:d9:08:0b:78:7c:b2:7a:27:
                    8d:83:e8:d9:1d:ba:5c:03:8f:54:f4:42:4a:2d:fc:
                    20:49:5a:18:da:da:6c:d2:1a:1b:13:27:38:c9:54:
                    3d:16:73:9f:67:b1:39:e5:66:01:8e:fc:20:36:7f:
                    cf:25:89:18:c0:42:c7:36:66:d9:31:43:3e:a7:84:
                    31:3b:5f:77:3c:11:ef:1c:8b:35:de:01:a0:b3:13:
                    a9:36:4a:86:85:2f:1b:64:15:d0:40:51:9a:61:f4:
                    3c:22:b1:fe:1f:ab:13:7f:d7:db:72:00:96:76:d2:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BA:4A:E0:06:E6:3E:F2:04:F2:D8:75:09:D6:26:5A:87:C9:69:44
            X509v3 Authority Key Identifier:
                keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7d:3b:8d:b6:37:80:a3:0a:24:fa:c5:3f:1b:d8:81:55:fa:
         2c:7f:ae:02:0a:06:7f:4a:e2:64:fe:b9:2f:34:a8:85:b0:62:
         3f:94:5b:55:39:9b:eb:3c:8e:c5:ac:37:49:1b:1a:7b:7e:05:
         14:4f:82:12:a6:d7:17:4f:1b:c0:c6:07:c5:b2:91:71:b7:c9:
         f0:3e:af:d4:32:87:46:f0:1c:1a:29:86:49:f4:e5:ec:06:aa:
         d5:70:c2:6a:48:8d:3c:3a:25:f8:1e:95:5d:e5:ba:34:68:4b:
         d2:78:2c:9e:ee:b9:9e:b3:09:44:92:29:9a:25:0d:ae:b0:4c:
         0d:d1:1b:35:0c:bb:71:a0:e9:2f:5b:d6:12:55:97:89:ae:21:
         ab:c8:92:57:ff:36:2c:18:40:99:18:3f:21:04:4e:09:88:0a:
         d1:52:b9:90:5a:39:e4:60:f4:05:70:77:fa:04:f3:aa:f4:2f:
         a8:1c:ec:7e:43:f4:6a:2a:e6:66:b1:ff:39:ee:de:9d:4b:d3:
         31:a9:73:d4:ec:9a:68:83:5c:b2:4f:c5:1a:8c:b1:f9:4c:64:
         f5:f8:8c:7b:ca:82:99:0b:6b:a9:a9:62:52:a1:25:06:49:42:
         1b:ef:9d:97:5c:a0:3c:b8:6f:be:c6:5a:07:95:70:8a:7f:60:
         e1:bc:c8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:24 2026 by rpki-client