Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
File:                     u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json)
Hash identifier:          mEd/CPwYCmwdee2woJWQtDx5EcLIdIjU7NETcBzOXC8=
Subject key identifier:   6B:73:CE:0C:8F:D6:E7:3F:C4:7A:CA:42:C6:84:4E:F1:04:78:F6:32
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Certificate issuer:       /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial:       019D359B3697D1925465AC8C6C2A11EF23DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
Manifest number:          0263
Signing time:             Sat 28 Mar 2026 18:00:57 +0000
Manifest this update:     Sat 28 Mar 2026 18:00:57 +0000
Manifest next update:     Sun 29 Mar 2026 18:00:57 +0000
Files and hashes:         1: GRbOxMtystP_abdOU7IPfTRksLo.roa (hash: Qf9umPgPmRu2Fd9xEaKBzrLeI8Nv9dYFfVdW3Z8loMI=)
                          2: IF-dQIrNICfVhG9zO_nJPALR-dQ.roa (hash: 28voGBv/WZH5Cfsgew8XwJMKo8y9ShAkKaFAqMfu7Q4=)
                          3: V73bm1kSNmHg-C0_nIo7CkeSIXs.roa (hash: CVQL9co2yo6FCueWNiD8EvSqpDL8q8jnyz+ynK1Hx2E=)
                          4: _9OTnWhfptNmahMwIUd6M8KUigY.roa (hash: gOfBWU8NyLveB72fRV3TQVbWthwb/Lqj0yi3WTcOUM4=)
                          5: nue0zLCdoQpgxGStseN2fkjSnI4.roa (hash: VSsTvgcmCl/+CH4M98aAryux6Otm4nE6txZTSh2dlVw=)
                          6: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: faOaZoQrqKLL7B7UxErVtUPrW0rww0PywEKU1VcTPVQ=)
                          7: yp_V2SDm61CRWvjnGT6m5_yIOPI.roa (hash: bpOGJYyMnTqmj9p+ne0ebzB6DmKNjVReNZUhs0YS4n4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:35:9b:36:97:d1:92:54:65:ac:8c:6c:2a:11:ef:23:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
        Validity
            Not Before: Mar 28 18:00:57 2026 GMT
            Not After : Mar 29 18:00:57 2026 GMT
        Subject: CN=6b73ce0c8fd6e73fc47aca42c6844ef10478f632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:5f:bc:9f:93:c9:a0:e5:82:ec:23:68:1b:
                    b3:63:3b:1d:d9:2d:52:ff:d3:3d:49:b7:b5:9d:6d:
                    4e:82:b9:42:33:75:93:d7:94:76:a0:6b:0f:97:8d:
                    7e:49:e2:15:1a:aa:cc:3e:ea:07:7e:c9:c5:61:65:
                    7e:16:5a:76:11:d3:99:c6:65:dc:27:05:72:4b:92:
                    b9:c6:76:15:30:80:a9:b5:e0:dd:8f:0f:9b:d3:b1:
                    64:b7:07:37:df:12:7e:de:ab:fe:b2:8b:fa:07:47:
                    aa:f3:3c:1d:da:d3:cd:50:60:e4:46:36:a4:ee:03:
                    17:31:2b:36:18:78:2e:68:67:ea:5a:16:8c:74:0f:
                    52:dc:85:99:84:c3:88:70:96:0d:b2:c2:2c:11:eb:
                    e5:88:ba:69:e6:ae:d3:16:2e:13:2c:91:33:8a:c1:
                    94:07:e8:f6:d8:a1:a9:ce:ac:1f:5a:d3:41:49:e9:
                    ca:f9:25:c1:d6:05:56:8b:8d:f4:7e:51:67:22:11:
                    59:d0:20:1b:61:40:25:d2:6c:a7:03:e4:03:01:f0:
                    7a:87:55:94:5d:82:22:47:f5:8d:00:36:0e:89:7c:
                    d7:e5:05:16:6e:17:8c:28:4a:54:f6:cb:12:e5:d8:
                    88:f1:0a:51:7c:d2:b5:8b:cc:4c:ea:3c:d1:73:c8:
                    bc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:73:CE:0C:8F:D6:E7:3F:C4:7A:CA:42:C6:84:4E:F1:04:78:F6:32
            X509v3 Authority Key Identifier:
                keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0f:c5:c8:6b:b7:fe:f3:75:88:0b:61:64:16:a6:fa:02:e0:
         11:97:fa:00:fe:0a:a6:d5:74:c2:73:f9:1f:d6:8e:96:44:e4:
         f6:33:cc:c4:22:13:2f:38:7e:8e:38:31:5d:a7:b1:3c:33:b1:
         83:7e:fd:73:37:0e:a1:e2:e5:17:e9:0a:03:81:d0:35:be:b5:
         c0:d2:36:44:73:e4:b0:d8:e6:ea:3e:31:ec:40:00:e0:29:53:
         eb:32:58:40:6e:0a:06:4e:b6:f3:31:13:4b:9d:7c:99:91:1b:
         aa:36:fd:6b:76:b6:25:da:5c:ea:07:dc:07:48:5d:66:d9:d2:
         13:7f:10:73:81:c0:ad:10:3e:7f:f9:e3:39:8d:0c:07:29:6d:
         1c:ab:1f:13:72:46:94:47:71:82:65:21:4e:7b:df:23:7f:06:
         48:1e:4e:11:9e:a0:b4:34:3d:f8:7f:86:bc:71:eb:e1:8b:b0:
         22:23:c2:aa:a6:7d:af:2b:9c:5b:76:1f:d8:ea:1f:a5:99:22:
         dc:7f:94:b8:83:cf:02:fc:4e:3e:d5:8e:b5:db:99:11:57:92:
         42:6f:47:b1:0e:03:f6:2d:f0:f1:fe:b4:70:b5:b6:2f:29:c3:
         10:55:88:7e:0f:73:f0:a8:39:81:8b:fa:0c:a5:fb:d8:d6:82:
         74:5a:20:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 20:28:34 2026 by rpki-client