Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File:                     u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier:          V3nhUiv7HVE0KK4U5Nzl/LmiqHISJjRPvSPoO0EMfcw=
Subject key identifier:   5A:A7:96:A3:F2:A1:EE:E8:76:DF:32:E4:DF:A6:24:53:B3:7D:B5:96
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer:       /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial:       019CF64E8D658EA099CDD5E5C27B6AF251E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number:          186F
Signing time:             Mon 16 Mar 2026 11:01:08 +0000
Manifest this update:     Mon 16 Mar 2026 11:01:08 +0000
Manifest next update:     Tue 17 Mar 2026 11:01:08 +0000
Files and hashes:         1: Sz0NLTrsK1zvfocWZIMOcuuroT4.roa (hash: MpuB2aIbgKIxgNnY5nxxHbqI1kRjgw1UedzDmdWgU1o=)
                          2: oNKjJGIAPXT8dZall2O4S4AYq6M.roa (hash: 56SmuGoIwTXV/CRw0vPr6Byhn2+aY12OfodEclBMp80=)
                          3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: /6+jT5JLmzDMZy9Ajg2q36GunImEaXozDaRRGwlqrhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f6:4e:8d:65:8e:a0:99:cd:d5:e5:c2:7b:6a:f2:51:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
        Validity
            Not Before: Mar 16 11:01:08 2026 GMT
            Not After : Mar 17 11:01:08 2026 GMT
        Subject: CN=5aa796a3f2a1eee876df32e4dfa62453b37db596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:94:e9:9c:5d:35:08:ac:a0:6c:a6:6b:b3:
                    1d:9c:3d:59:5a:80:47:39:23:62:5b:89:71:b1:bb:
                    9d:6b:3c:01:82:10:3a:f3:68:72:c0:71:02:70:da:
                    4e:38:ef:20:b9:86:92:b7:b1:d9:46:76:07:d2:55:
                    5a:c7:0d:dc:a4:6d:43:2a:25:42:e7:9f:a0:3a:de:
                    3d:e0:97:dc:b1:41:fd:4f:01:49:37:15:9a:64:84:
                    69:5e:db:b8:b4:e9:ef:5d:31:aa:a0:0c:d1:9e:85:
                    a5:93:3e:9f:a4:81:3a:d7:9e:ee:51:0d:30:ff:1c:
                    bf:2e:98:a5:dd:67:87:dd:49:85:2b:79:2b:9a:4e:
                    90:97:af:80:68:bb:5c:a3:e1:13:bd:c4:ce:af:54:
                    d2:73:1a:ca:00:2c:e2:28:99:3d:c4:d5:75:51:c8:
                    82:d6:0f:af:95:7a:cb:33:bf:6e:2f:12:06:58:b0:
                    1d:90:42:2f:0d:45:7f:ac:07:93:58:bc:9b:20:41:
                    60:fb:78:18:3a:14:a3:64:32:b7:e9:5c:ce:cd:6b:
                    c8:5d:c6:ab:3b:c6:3a:f8:c5:d1:87:36:0b:76:cc:
                    af:bb:e0:4e:3c:1e:c2:3d:1f:ff:bf:f9:41:a2:92:
                    5e:10:60:fd:38:6e:f0:fd:e9:f4:43:72:fb:11:ce:
                    4f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A7:96:A3:F2:A1:EE:E8:76:DF:32:E4:DF:A6:24:53:B3:7D:B5:96
            X509v3 Authority Key Identifier:
                keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:30:65:aa:66:8c:53:4e:f3:a1:26:5f:11:82:a4:c0:d9:fb:
         38:b0:aa:57:3f:04:85:91:a9:04:d8:e6:53:8b:2b:78:ee:d7:
         16:a3:6f:eb:e7:61:d1:a3:d1:69:29:36:b1:cc:a2:8f:c1:bf:
         bc:e9:4d:74:94:cc:e3:70:a8:b8:96:3d:34:4c:9e:5a:10:6a:
         4c:39:f4:76:e0:3a:92:a8:1b:ca:48:ab:99:66:0a:0a:c1:f6:
         2d:dc:df:99:ae:a4:a6:8c:ec:7d:90:27:1e:9d:66:a8:3a:cc:
         be:c8:9f:71:db:5f:31:d8:14:4b:26:2f:b9:11:6a:c6:29:79:
         cc:a0:c0:86:0a:44:05:b8:d2:18:c0:61:34:85:0d:42:22:fd:
         ff:a5:6a:62:69:cc:5f:5a:f8:92:07:c6:d1:96:fb:23:ad:57:
         6b:f0:de:9a:b3:56:30:74:b9:00:94:39:4f:41:58:06:c6:33:
         07:cf:cf:cd:77:37:71:c7:67:16:d6:a1:85:e2:2f:22:d2:a5:
         7c:68:96:f9:34:ff:6c:9a:3a:f1:7a:a8:ee:41:de:1b:b7:53:
         d2:62:76:41:c5:aa:c2:06:64:5e:b5:16:83:26:10:d4:9f:8b:
         06:12:56:d6:8f:24:83:7f:bb:b4:b2:a8:30:2a:73:f8:fe:23:
         fb:bd:2a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 15:52:16 2026 by rpki-client