Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
File:                     u03_X665REU6fISwl-V8ccBPEfw.mft (raw, json)
Hash identifier:          Mc3aoin9mqGAn1EaLLTIZ2HaCUd7/Y+D5aG9jAdY+94=
Subject key identifier:   99:62:15:5E:DB:9C:2E:49:BA:50:87:8A:37:1B:0D:91:67:69:A3:70
Authority key identifier: BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
Certificate issuer:       /CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
Certificate serial:       019EB7D82C6CBAA3FA3EA1432741571C4942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
Manifest number:          0C95
Signing time:             Thu 11 Jun 2026 18:00:58 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:58 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:58 +0000
Files and hashes:         1: OA-_Q29g0KuA0aONpveSxXZxFSk.roa (hash: tbSm3k3UWVaAwspyDOSHzLXBvf5BTv6nxCBnDZfco98=)
                          2: u03_X665REU6fISwl-V8ccBPEfw.crl (hash: 4R5JF9m4/6iwOzbOAHdIu+sq97r1B7Y1TawPkq3YHKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d8:2c:6c:ba:a3:fa:3e:a1:43:27:41:57:1c:49:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
        Validity
            Not Before: Jun 11 18:00:58 2026 GMT
            Not After : Jun 12 18:00:58 2026 GMT
        Subject: CN=9962155edb9c2e49ba50878a371b0d916769a370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:98:14:5d:8e:0e:de:4a:cb:7b:48:e2:cc:
                    9b:5f:ad:60:62:16:2f:11:d1:6c:b2:42:d6:fb:1b:
                    36:f9:06:66:29:9a:b9:5e:84:2a:7a:c1:72:17:79:
                    55:cc:38:74:bd:f3:e6:0c:4e:7d:a4:1c:a7:e0:e3:
                    90:58:be:f4:9d:d7:c7:b5:1e:1e:d1:b2:b8:9e:e3:
                    ab:cc:8d:70:14:d0:69:f9:8f:55:9e:0b:b3:84:0a:
                    b2:1e:25:47:94:48:14:62:b7:9f:32:99:90:00:2e:
                    05:b3:52:79:4c:75:a2:09:df:84:56:b1:a2:89:0b:
                    9a:1e:86:f6:9a:30:63:95:3c:fe:4b:90:8b:34:99:
                    d5:e6:2d:8b:cd:9c:3b:50:d9:32:6d:7e:40:c7:05:
                    ee:dc:47:0a:03:66:ac:29:59:5d:2b:c2:12:f8:76:
                    28:9d:03:d1:dd:65:73:a9:1e:5d:07:52:0c:79:9c:
                    24:03:a2:8c:e5:be:5a:ad:30:ed:f3:96:3c:50:ab:
                    e8:b8:f7:9d:37:81:f0:f3:b3:dc:e8:d7:43:c4:05:
                    83:60:be:35:73:7b:9e:0f:bc:bb:57:87:30:70:fb:
                    c5:c1:68:d4:d3:32:b1:72:12:82:87:11:77:65:55:
                    d1:b3:09:10:70:9b:f7:6a:ac:8c:4f:e0:4f:d7:22:
                    63:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:62:15:5E:DB:9C:2E:49:BA:50:87:8A:37:1B:0D:91:67:69:A3:70
            X509v3 Authority Key Identifier:
                keyid:BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cc:ca:43:67:63:27:69:da:bc:da:2d:02:f8:85:fa:69:3d:
         e0:4c:fe:49:5f:7d:46:5e:b5:fc:b5:cd:85:41:7a:c5:ff:3a:
         aa:6f:4e:aa:f0:46:36:94:66:dc:8f:94:8e:fa:e5:a1:a5:aa:
         49:26:a6:31:1f:81:04:bb:dd:3d:36:ad:c2:15:b0:21:de:dd:
         d2:57:37:0e:fb:b3:1a:4f:bc:79:dc:bc:fc:77:3b:3d:9c:ff:
         42:9a:47:f4:00:22:4f:e0:3d:7d:05:ce:e2:85:77:00:4d:7b:
         69:9f:0a:ba:38:44:89:54:85:bc:b0:9d:cf:60:92:74:35:85:
         b2:0d:c5:89:46:63:2a:d8:af:2e:dd:32:59:5c:53:88:de:06:
         11:5b:89:b1:6a:2f:08:86:0d:7d:f7:23:bc:4e:6a:10:71:9a:
         4d:91:58:a5:bf:9c:27:86:da:1e:f1:81:73:9f:2d:77:b8:b9:
         6f:5d:63:fa:59:f8:87:a8:fd:d3:c7:2f:73:a5:2e:89:b4:cc:
         0b:7a:bc:e7:a0:32:04:d4:f9:aa:92:d7:78:34:2c:3e:36:08:
         1a:6e:78:d4:c7:aa:b8:ec:92:b7:60:2b:37:19:c7:d0:02:1c:
         ac:b2:50:7e:50:85:7a:45:44:6b:e6:33:28:37:e9:c4:4c:14:
         49:4c:30:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:13:05 2026 by rpki-client