Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft
File:                     b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft (raw, json)
Hash identifier:          Rk43Yg+foeGbGzbTvItYUb/ynfDTiVljnPBDLVF0MnE=
Subject key identifier:   D0:45:A3:03:06:7C:F8:79:7F:E6:D6:70:5E:B3:D7:76:4E:F8:F1:A4
Authority key identifier: 6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1
Certificate issuer:       /CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1
Certificate serial:       019D390A0ADC4BD60DA3EDC03477AF1A4C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft
Manifest number:          125E
Signing time:             Sun 29 Mar 2026 10:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:52 +0000
Files and hashes:         1: 1-wan3b-ajvxmgxKzG2_bCriESyE.roa (hash: OT/P/yJmBbJTLWUNPmI1kEQL5s4kHqN1N19Q4ZEyjuw=)
                          2: _x8j518GtOzZKIwSFjgw77WJ0cg.roa (hash: qLLB1jWYWXmu3/lWGQcppyz40ROIJakXXeLah7poVjw=)
                          3: b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl (hash: mPMFkO/1iWSlO422OogHhWl5g5/E8yp1TGbK1EIe24g=)
                          4: pzTDdoiRqJT_m82j1zVgjxb2XAc.roa (hash: m6adch5DIkkECliQTrAwnaj3Hlmzg1nCza1B5z8+Tj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:0a:dc:4b:d6:0d:a3:ed:c0:34:77:af:1a:4c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1
        Validity
            Not Before: Mar 29 10:00:52 2026 GMT
            Not After : Mar 30 10:00:52 2026 GMT
        Subject: CN=d045a303067cf8797fe6d6705eb3d7764ef8f1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:a0:46:e4:b9:b0:23:8f:a4:d9:51:e7:67:
                    95:ac:bf:56:01:ac:23:b3:5a:e2:55:45:cd:15:d2:
                    cd:0e:44:bb:92:6e:81:38:55:41:7a:36:7a:2b:e2:
                    47:c6:0a:86:32:c2:9a:78:8a:b5:06:5b:06:98:70:
                    f1:80:34:0f:56:af:46:01:99:54:e4:eb:31:b7:16:
                    74:9b:fb:db:60:56:ef:8d:3c:3a:02:27:78:a0:a7:
                    bb:d5:cc:26:e7:27:57:72:2a:c7:d2:76:6a:be:35:
                    7a:83:e9:f2:46:dc:cc:c6:51:54:6c:f3:1a:e0:29:
                    2a:2c:00:16:13:24:19:5f:16:39:29:b6:24:14:d7:
                    2b:b4:e7:9d:26:b7:61:a6:2e:cc:1d:b4:5d:2f:97:
                    ea:32:8f:a1:c8:aa:fc:5b:aa:2c:5b:d1:ee:42:87:
                    a2:f8:03:b0:77:1d:83:42:bd:84:4e:c3:a7:70:2f:
                    eb:8b:d7:d8:be:78:93:e6:b3:67:6f:97:55:7d:12:
                    fa:6a:2c:ce:6e:4f:f9:b9:1d:8a:2b:92:78:36:6a:
                    42:a8:76:74:34:14:53:59:3d:3a:7c:71:53:06:3c:
                    0c:32:9e:b6:da:71:39:01:10:1e:9b:27:96:07:2b:
                    45:fc:a9:c4:c1:9c:2e:7b:d5:66:bb:62:0e:7f:d0:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:45:A3:03:06:7C:F8:79:7F:E6:D6:70:5E:B3:D7:76:4E:F8:F1:A4
            X509v3 Authority Key Identifier:
                keyid:6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:52:18:b9:1f:de:2b:6c:10:27:3c:50:8d:8b:78:49:3f:ac:
         44:62:33:d5:4d:ad:d9:52:39:8c:a1:29:a2:07:86:ba:45:f2:
         7b:a3:59:6b:04:fe:01:b5:13:4c:c7:13:51:6f:b5:f9:71:eb:
         9f:8f:94:c9:a5:46:43:54:01:37:f8:de:84:d2:2c:97:43:1a:
         69:b6:e6:a0:4a:1a:86:36:92:1d:cf:c4:69:5b:b5:a7:8f:4e:
         1a:a9:a6:8c:37:8e:25:9a:2d:0d:b6:ef:52:b2:ce:58:23:f2:
         be:48:27:63:a6:d1:02:9a:42:d5:be:a7:6b:56:a0:e7:c4:8d:
         18:b9:34:8e:c9:27:0f:a1:dd:16:42:d1:70:1e:cb:d7:2e:c3:
         dc:07:e6:fe:28:b4:8b:d7:47:db:5c:3d:2e:9e:71:f4:a7:e2:
         cc:36:98:25:8a:d8:56:03:ee:54:3b:15:3d:d9:b0:83:f7:c8:
         a4:4d:c4:8c:75:1e:fe:bf:2a:2f:bb:c5:ba:e6:58:e1:42:e9:
         b5:c6:83:77:8a:ed:78:bf:cf:e9:e9:1d:15:06:75:05:0f:53:
         c5:dd:1a:5a:c3:50:6a:cc:f5:f9:5f:a6:61:95:04:1d:3e:c9:
         9c:4a:b0:08:5d:c8:80:71:be:24:f3:cb:42:83:a7:04:88:d7:
         b7:e9:c4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:35 2026 by rpki-client