Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
File:                     u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft (raw, json)
Hash identifier:          5Q2vgtecu6tgUzsaznpxSJtn+rckrM9sRVr2jgxMTis=
Subject key identifier:   4F:04:9B:0A:99:C5:B1:13:82:8B:FF:89:A6:B1:67:5E:9F:93:10:47
Authority key identifier: BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20
Certificate issuer:       /CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820
Certificate serial:       019EB8B423B17A8D2C2A2787ACB7459C12BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
Manifest number:          0347
Signing time:             Thu 11 Jun 2026 22:01:13 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:13 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:13 +0000
Files and hashes:         1: SGCJMFXuQqkQ66hRX-BwbZShDeQ.roa (hash: fC7zF6FRItdVCOIIyCz7wcwPMyIF6QXNLXbJU6mx+1Q=)
                          2: u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl (hash: Ua/MYUq4OCc9/gu8u0IGjCAqAmSzW38XEf09POMVH+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:23:b1:7a:8d:2c:2a:27:87:ac:b7:45:9c:12:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820
        Validity
            Not Before: Jun 11 22:01:13 2026 GMT
            Not After : Jun 12 22:01:13 2026 GMT
        Subject: CN=4f049b0a99c5b113828bff89a6b1675e9f931047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:0b:07:68:6b:6f:a3:6c:61:0a:9a:90:e9:
                    c9:e6:cd:96:73:8c:52:c4:17:b7:9d:73:63:51:99:
                    d1:56:c9:19:b4:d6:b3:48:2b:4c:a9:33:42:7d:2f:
                    7c:9e:a0:36:8f:86:90:d4:78:d2:1a:e2:08:d3:8b:
                    73:62:72:69:f7:5d:b6:79:c1:49:ea:25:81:4e:92:
                    56:3d:49:66:ad:91:6e:34:d9:d9:a7:7b:b9:32:f2:
                    05:2b:f5:23:61:04:de:8b:17:0c:67:36:e8:df:ac:
                    c7:42:b5:12:c3:43:f5:c0:1d:3c:bd:fc:9c:f6:74:
                    26:8e:79:7e:47:da:ba:5b:35:49:fd:53:33:fa:75:
                    55:57:3d:73:00:f0:2a:eb:f8:36:f8:fd:2d:3c:70:
                    55:a6:a3:9a:35:b6:d0:1f:4c:4d:60:9d:58:aa:f5:
                    45:95:5a:24:8e:4e:56:40:fb:1d:ce:55:31:49:68:
                    c0:af:b2:59:b4:2d:98:f7:02:9c:0d:fc:13:eb:ae:
                    00:1d:11:40:2b:26:fa:d7:d4:a6:f3:68:eb:08:9e:
                    b4:11:75:84:7a:10:c4:4d:ed:50:df:04:f6:7c:d4:
                    6b:7e:7a:41:77:d1:80:4a:5a:95:27:56:86:b8:10:
                    70:e0:f8:20:0f:9b:7b:76:83:10:f8:29:ec:49:3c:
                    a2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:9B:0A:99:C5:B1:13:82:8B:FF:89:A6:B1:67:5E:9F:93:10:47
            X509v3 Authority Key Identifier:
                keyid:BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f2:eb:2d:2e:44:c3:e6:b2:b3:d4:6e:e3:e8:5b:46:cf:ac:
         c7:68:e9:e1:28:27:71:9b:3a:04:1d:32:cf:ca:e1:0b:fb:c3:
         bc:b6:f6:4c:55:0b:9f:fe:52:0c:17:7f:b4:c5:35:34:3d:5d:
         9c:b8:64:47:4a:ee:33:62:f3:93:39:f6:3c:46:d4:85:00:95:
         8c:8b:91:a5:df:73:db:d0:56:eb:2b:43:b4:69:fe:14:28:54:
         0a:17:86:f8:96:af:8e:ba:e4:b3:6d:fc:05:17:44:3d:e2:41:
         b9:b0:bd:23:d4:f6:54:e3:98:47:e4:3a:14:d2:7f:82:b8:15:
         13:26:91:a1:6a:de:e7:7c:d9:90:08:36:16:b8:f3:c5:ad:ef:
         73:a2:03:4f:fe:fd:dd:97:94:9f:1c:af:49:04:a8:e8:6e:6f:
         11:c2:50:e6:fa:11:6b:4f:6c:97:15:fc:e8:e3:b7:6d:06:89:
         85:1e:ef:52:41:cc:cd:31:44:d3:ce:66:21:b6:57:58:32:81:
         28:10:49:70:bd:70:bd:53:c1:db:33:dc:46:88:a3:7b:af:b5:
         8f:34:4e:c9:72:33:c0:4a:cf:2e:e4:19:3b:5a:2b:44:95:5c:
         1e:2d:30:9d:d3:20:bc:cf:e0:ef:ad:92:40:8b:58:b9:6a:22:
         f9:5d:90:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64tCOxeo0sKieHrLdFnBK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjdmM2JmYjRlZDUzZTU5Y2VmOGM0NTg0YjYyNzQ3MGI2
MGE4MjAwHhcNMjYwNjExMjIwMTEzWhcNMjYwNjEyMjIwMTEzWjAzMTEwLwYDVQQD
Eyg0ZjA0OWIwYTk5YzViMTEzODI4YmZmODlhNmIxNjc1ZTlmOTMxMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvogLB2hrb6NsYQqakOnJ5s2Wc4xS
xBe3nXNjUZnRVskZtNazSCtMqTNCfS98nqA2j4aQ1HjSGuII04tzYnJp9122ecFJ
6iWBTpJWPUlmrZFuNNnZp3u5MvIFK/UjYQTeixcMZzbo36zHQrUSw0P1wB08vfyc
9nQmjnl+R9q6WzVJ/VMz+nVVVz1zAPAq6/g2+P0tPHBVpqOaNbbQH0xNYJ1YqvVF
lVokjk5WQPsdzlUxSWjAr7JZtC2Y9wKcDfwT664AHRFAKyb619Sm82jrCJ60EXWE
ehDETe1Q3wT2fNRrfnpBd9GASlqVJ1aGuBBw4PggD5t7doMQ+CnsSTyiUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8EmwqZxbETgov/iaaxZ16fkxBHMB8GA1UdIwQY
MBaAFLv387+07VPlnO+MRYS2J0cLYKggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgt
M2Q0ODViN2NkZjVjLzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgtM2Q0ODViN2NkZjVj
LzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvLrLS5E
w+ays9Ru4+hbRs+sx2jp4SgncZs6BB0yz8rhC/vDvLb2TFULn/5SDBd/tMU1ND1d
nLhkR0ruM2Lzkzn2PEbUhQCVjIuRpd9z29BW6ytDtGn+FChUCheG+Javjrrks238
BRdEPeJBubC9I9T2VOOYR+Q6FNJ/grgVEyaRoWre53zZkAg2Frjzxa3vc6IDT/79
3ZeUnxyvSQSo6G5vEcJQ5voRa09slxX86OO3bQaJhR7vUkHMzTFE085mIbZXWDKB
KBBJcL1wvVPB2zPcRoije6+1jzROyXIzwErPLuQZO1orRJVcHi0wndMgvM/g762S
QItYuWoi+V2Q6A==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:46:49 2026 by rpki-client