Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File:                     u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier:          X6EgJKnpCGcDGfOiNh4SwXn/sNZACAEJtJUSljVd4bI=
Subject key identifier:   F3:E0:02:70:4B:4A:5E:E7:AE:73:32:6C:5C:9A:F9:84:B3:0B:49:14
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer:       /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial:       01A17B4DB7EE1250C4FC0D055904EADC15FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number:          06E7
Signing time:             Tue 27 Oct 2026 03:00:53 +0000
Manifest this update:     Tue 27 Oct 2026 03:00:53 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:53 +0000
Files and hashes:         1: SvNmMoOS2D7ABYeycDZExPxmaNI.roa (hash: hAPQtadJ57I6XgA+8LOiB1aW1n0vaUnx78Tugxa2seU=)
                          2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: mJFUlfOGI8KwTjsSPo6mo3bh1OJYIeK5Lt+ESy2hBCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:4d:b7:ee:12:50:c4:fc:0d:05:59:04:ea:dc:15:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
        Validity
            Not Before: Oct 27 03:00:53 2026 GMT
            Not After : Oct 28 03:00:53 2026 GMT
        Subject: CN=f3e002704b4a5ee7ae73326c5c9af984b30b4914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a6:c0:6b:8a:f6:31:74:c4:ce:13:0a:3e:e4:
                    8e:36:38:68:6c:00:6a:15:e0:a1:52:06:93:6c:ae:
                    2f:ae:e1:1e:d2:1f:e6:8d:15:ed:12:36:85:12:80:
                    63:39:bb:72:54:6d:61:ce:58:68:bd:61:2f:07:a0:
                    03:87:72:b1:92:2a:c8:23:c8:17:47:79:1d:cb:5d:
                    49:e1:da:8c:b4:1b:cf:4a:e3:b7:08:8c:9c:9e:70:
                    a9:87:66:a5:24:b2:b9:15:9a:79:20:fa:ab:6f:3d:
                    e1:c2:22:3c:54:bb:87:2a:fe:ce:36:bf:5b:95:32:
                    dd:9a:7b:43:c7:e7:86:a3:1f:49:8b:73:f8:fb:90:
                    b7:7c:50:ed:31:fd:50:09:3a:63:07:14:48:23:3c:
                    f7:ca:20:e6:be:0b:66:c8:62:22:d9:10:b7:ad:4f:
                    ce:d1:1b:6b:18:89:03:d6:45:90:8a:76:3d:7d:4d:
                    f7:a8:86:f2:f2:94:e9:89:c1:a1:1b:cd:c3:43:d5:
                    d8:c2:fc:fb:bb:1b:40:c3:19:b8:75:d6:cc:52:19:
                    15:bc:77:33:05:6e:0f:d8:ab:d7:6c:2d:d3:06:6d:
                    dd:e4:0d:d9:63:86:58:56:0c:03:40:83:e8:b6:3b:
                    ee:dd:0d:40:b2:f1:a5:90:de:75:dc:16:70:a3:d4:
                    6f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E0:02:70:4B:4A:5E:E7:AE:73:32:6C:5C:9A:F9:84:B3:0B:49:14
            X509v3 Authority Key Identifier:
                keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:58:77:d3:25:8d:87:73:66:7d:3f:b1:86:63:af:a7:da:5e:
         9a:dd:b9:5f:de:a5:1c:08:a3:b1:ff:c2:ad:e6:d0:f0:c6:da:
         6d:fb:3a:4b:b8:fd:1d:1e:6b:33:7b:18:31:5e:44:76:1e:99:
         95:24:13:58:ca:0c:3a:a6:46:54:bc:3b:d5:a7:fc:d3:3d:cf:
         1f:cd:7c:23:e9:55:a9:68:1c:31:f1:45:b2:51:b7:63:45:27:
         fc:5d:20:4c:4f:cd:86:58:30:10:3d:42:94:f9:74:ec:54:09:
         9d:0e:ae:55:74:ce:2a:ab:a5:ee:5d:77:79:c4:60:b7:39:9d:
         e7:0b:ec:98:7b:d2:6e:a5:8a:85:ab:21:5b:0c:d2:ce:51:cb:
         4b:1e:c9:4e:cb:41:fb:ed:4c:b2:80:c8:6e:cc:60:b0:1e:ed:
         ad:3d:81:e3:c9:18:7e:9c:58:32:7e:ec:46:4e:4c:aa:03:7b:
         a0:59:16:cf:fa:ee:bb:33:a4:27:59:46:51:4f:5f:c4:33:6e:
         ac:fd:dc:e6:2b:f0:92:d1:3e:05:0c:83:94:8a:a9:73:c4:42:
         a2:c9:0e:0a:3c:f2:c1:7e:51:11:5f:84:15:0c:f8:4c:1b:59:
         fe:b5:96:e9:88:6d:a8:a1:13:fe:32:41:35:d7:eb:51:e1:38:
         94:ff:b7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:18:32 2026 by rpki-client