Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File:                     u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier:          GrNDsVUIzxGil8vokuKx4YKgPJWbjJF6g2MA9q0D8cs=
Subject key identifier:   C0:AF:60:E8:5E:F4:2B:F9:33:3F:89:FC:E6:F8:2A:B4:A7:16:AB:8B
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer:       /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial:       019E25EEB4DF81867F5AAAAF30CCF6115672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number:          069E
Signing time:             Thu 14 May 2026 10:01:01 +0000
Manifest this update:     Thu 14 May 2026 10:01:01 +0000
Manifest next update:     Fri 15 May 2026 10:01:01 +0000
Files and hashes:         1: SeViM70Wqqd7UFcU2bBjE8RzwJU.roa (hash: 9MH1Qkdfg6lA/2wp9EQkv/Gv7ZDJcBAZDDp+sMunn5c=)
                          2: U749CR9_WlAi1xJYGuyn6GjT2NU.roa (hash: 6G+ZaRLJOfKdFp5MjptlVjWRCyME9VMpUPPRnUdd/ms=)
                          3: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: wgt/HUp0NNSMND2+HbU5FhDhH+ISmILtMVpM3xcF4/8=)
                          4: ye9CJv-gRnNlmaYw7SD_tgaq9eI.roa (hash: joTKLvlxOsVk56Ag3bqf527kK8bL1jJHNadx5Q0xskM=)
                          5: ymAj9efrc4iFY_0So-yc0MrAp7E.roa (hash: 0RVzMDPDhXTkKrBe4COdDJUwa/RLXdTmgG4ILjY2Rgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:25:ee:b4:df:81:86:7f:5a:aa:af:30:cc:f6:11:56:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Validity
            Not Before: May 14 10:01:01 2026 GMT
            Not After : May 15 10:01:01 2026 GMT
        Subject: CN=c0af60e85ef42bf9333f89fce6f82ab4a716ab8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:25:64:63:3a:c7:5b:4d:0a:f7:c0:e3:3d:
                    21:27:9e:3d:9d:41:48:bf:d2:12:d0:1b:ab:3e:d5:
                    0e:5c:78:e0:57:5d:39:99:a2:2b:4c:29:48:b1:e1:
                    b4:c4:98:00:bf:f9:bf:2f:3f:8c:db:50:f5:1e:26:
                    8f:68:99:25:19:0d:02:a3:87:3c:53:37:43:5a:d2:
                    e1:76:a0:b6:59:b9:b6:64:8a:1f:27:0b:4c:a2:b2:
                    94:c5:9b:cc:e2:ce:28:b3:ad:2e:bf:c8:f5:49:32:
                    27:54:25:1a:94:8e:a2:29:0d:1a:31:f3:ad:22:a6:
                    65:5c:09:7a:2b:f8:ca:11:af:56:c4:79:69:0f:4e:
                    a0:a9:4c:42:a8:c5:ee:bb:8e:d3:d9:71:19:ac:62:
                    e3:bd:45:6a:9e:29:61:54:10:f0:bd:63:74:b6:ad:
                    61:20:ae:de:d9:1a:56:a6:a0:fa:7e:ce:7e:0f:ea:
                    55:4f:83:8d:41:17:d5:4c:bb:39:f9:de:ff:e0:de:
                    6d:7b:93:59:60:ca:fb:52:d3:d2:87:d3:c1:54:fd:
                    63:cd:c7:14:af:23:e2:04:c8:14:21:5b:58:c6:bb:
                    bc:0f:53:9e:d4:10:fe:0b:52:e1:96:27:77:f9:9a:
                    14:33:a8:c1:38:7a:17:75:57:21:3d:fb:63:0d:dc:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AF:60:E8:5E:F4:2B:F9:33:3F:89:FC:E6:F8:2A:B4:A7:16:AB:8B
            X509v3 Authority Key Identifier:
                keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cb:21:3a:e5:1b:b6:fc:d2:c7:1a:ef:77:d0:28:14:f1:48:
         f7:18:6c:e5:24:23:7b:56:3a:1d:22:e7:ec:65:f1:be:b9:48:
         5d:33:d0:d4:cb:c9:cd:90:5e:10:51:5b:66:44:65:18:d5:6f:
         5c:cf:83:85:f2:9a:1a:1e:62:35:69:11:88:23:93:d4:a6:e3:
         57:08:d0:ab:26:82:4f:f5:0b:22:c1:40:24:02:11:88:1e:55:
         88:8a:a7:e3:ad:63:4a:34:25:93:10:ed:db:bb:67:fc:22:6b:
         56:c4:59:b9:76:a7:f7:78:34:05:20:33:16:35:59:5e:31:08:
         d2:9e:8b:93:00:8a:14:aa:a7:86:f0:98:6d:14:7c:49:23:98:
         5c:c6:87:ea:bf:17:3f:ef:8a:e2:c9:ea:a2:a2:ef:73:66:87:
         f0:d4:78:af:08:3f:34:62:a4:4c:4a:36:f1:c1:d3:77:9b:a2:
         79:8a:f2:9b:17:a2:ec:e0:15:3e:4c:ce:ba:5c:e8:1d:45:3c:
         78:6f:12:61:14:6a:e4:f3:08:01:a9:ab:02:93:80:9d:a2:1d:
         ac:1d:e9:f6:72:88:24:52:9c:8a:96:1a:78:6e:95:1c:e8:a4:
         06:97:58:db:d7:e9:c5:e0:da:96:f8:ac:a1:d7:3b:b9:53:4d:
         1e:d8:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 15:53:53 2026 by rpki-client