Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft
File:                     u72o46G37fejOqiqTb0qhU7_gYE.mft (raw, json)
Hash identifier:          oNQ3uae0chdCjwPpZJOf3I2AWGcIDcsydM7erxXTEXY=
Subject key identifier:   47:CE:55:31:DC:F7:E4:C8:38:1F:BD:F7:8A:F5:BC:D2:C3:B2:BB:DC
Authority key identifier: BB:BD:A8:E3:A1:B7:ED:F7:A3:3A:A8:AA:4D:BD:2A:85:4E:FF:81:81
Certificate issuer:       /CN=bbbda8e3a1b7edf7a33aa8aa4dbd2a854eff8181
Certificate serial:       019FA0E077F3D9B758F5FB6D32BA6518E853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:01:33 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:33 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:33 +0000
Files and hashes:         1: l7dx2V1VmJ0uATI8KzKriPzRcdg.roa (hash: aTsuNNXpYU+m17MRzPIbWQRZSdkXhSUcloTziC0YZCA=)
                          2: u72o46G37fejOqiqTb0qhU7_gYE.crl (hash: 1ieBa5I9uFR2PgKVrKiRG2Miy79HyOmND+iTQVlj2cQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:77:f3:d9:b7:58:f5:fb:6d:32:ba:65:18:e8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbda8e3a1b7edf7a33aa8aa4dbd2a854eff8181
        Validity
            Not Before: Jul 27 00:01:33 2026 GMT
            Not After : Jul 28 00:01:33 2026 GMT
        Subject: CN=47ce5531dcf7e4c8381fbdf78af5bcd2c3b2bbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:3b:2a:0b:98:20:b2:14:17:de:9c:ba:cf:
                    77:c9:d7:bc:c3:d8:b3:49:72:cb:cc:dc:07:de:bb:
                    e6:f4:e0:26:a7:e6:58:cd:ba:85:1b:ad:e9:0d:9e:
                    5b:a9:45:09:ea:c7:ab:1d:ea:76:73:96:37:6b:88:
                    7c:46:a4:46:0c:84:9c:a7:59:76:e4:47:24:42:92:
                    22:34:78:42:0e:42:6e:3e:7e:4a:02:0e:e5:fc:d4:
                    5f:2a:6c:d6:d5:51:05:7e:61:ed:69:ae:a6:ff:a3:
                    33:92:76:58:46:6d:52:68:24:95:f3:44:fc:5a:13:
                    56:7c:1f:e2:58:a9:6a:57:3d:58:76:8e:7a:a4:af:
                    76:da:b8:be:de:e2:86:5a:60:1f:7d:5b:84:3f:5f:
                    25:cc:59:df:99:04:db:8f:20:91:8a:6e:6c:77:8e:
                    59:2e:7d:28:46:99:90:1b:16:1b:3b:e3:f9:5c:4b:
                    67:3f:d9:72:2c:66:40:af:5b:27:74:81:af:6e:c7:
                    e9:c9:e4:c8:75:bc:4a:cf:e8:91:81:fd:08:d1:c7:
                    d8:6a:fa:99:93:28:56:66:87:6b:27:ed:0c:cf:6b:
                    8a:6d:99:95:6c:c5:c6:d9:70:cb:3f:9e:a0:eb:8a:
                    09:35:4b:f6:69:1e:73:56:1c:01:f9:78:27:25:c7:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CE:55:31:DC:F7:E4:C8:38:1F:BD:F7:8A:F5:BC:D2:C3:B2:BB:DC
            X509v3 Authority Key Identifier:
                keyid:BB:BD:A8:E3:A1:B7:ED:F7:A3:3A:A8:AA:4D:BD:2A:85:4E:FF:81:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a6:14:77:be:c6:10:d7:ab:50:89:db:40:97:5e:37:90:5e:
         f6:25:cc:72:72:e3:6e:37:e4:30:cd:e2:e9:67:27:ba:54:45:
         19:57:c1:e8:9a:f2:46:d1:6c:18:5b:db:0a:6a:7e:18:e2:f4:
         c1:46:38:17:cd:f4:b8:f6:9b:d7:06:11:ca:39:27:a3:09:57:
         f7:a3:9a:b7:3b:52:d2:97:62:19:85:41:c8:b1:3d:2e:de:0c:
         96:e5:e2:86:4a:1b:06:dc:67:db:0d:b5:b9:33:e7:26:b1:a1:
         ea:fe:2c:62:92:67:48:d8:2f:23:bc:b4:3c:6b:27:be:41:56:
         df:65:30:ff:fd:db:4b:21:37:da:fa:13:5e:bb:3f:e5:50:39:
         e1:1f:31:16:1a:8a:58:9e:8b:af:1c:24:01:05:3e:c4:47:8e:
         f6:27:a9:64:ad:4a:49:bd:71:9e:91:0c:dc:51:24:ee:6a:4b:
         21:4b:c7:e9:ac:d8:82:26:e5:89:5c:35:b5:0c:ca:7d:62:57:
         38:ff:38:04:fc:0b:ad:96:a6:0c:bf:a9:d9:ee:25:04:89:d6:
         ba:79:dc:9f:b2:6d:e2:ba:30:61:03:0e:dc:d6:bc:64:b1:a2:
         b2:dc:73:1f:b1:8e:bd:4c:b8:e0:dc:4e:b9:dd:c2:4e:95:57:
         24:33:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:11:37 2026 by rpki-client