Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File:                     u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier:          HDb1ci4Et6sGBoerSNtwaKB9/eNj/+q0+a6uUsG1raU=
Subject key identifier:   37:B6:25:6D:AF:D0:C4:29:33:6C:63:D4:9A:83:F2:03:19:9A:C0:AF
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer:       /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial:       019EC0360EE285D872686E7BBE96E50E9C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number:          057D
Signing time:             Sat 13 Jun 2026 09:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:28 +0000
Files and hashes:         1: SvNmMoOS2D7ABYeycDZExPxmaNI.roa (hash: hAPQtadJ57I6XgA+8LOiB1aW1n0vaUnx78Tugxa2seU=)
                          2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: /q2Co6b3Uz+rvSgoZbCHZxRzQJVvRtiAY2NtaH7d/cY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:0e:e2:85:d8:72:68:6e:7b:be:96:e5:0e:9c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
        Validity
            Not Before: Jun 13 09:00:28 2026 GMT
            Not After : Jun 14 09:00:28 2026 GMT
        Subject: CN=37b6256dafd0c429336c63d49a83f203199ac0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:1f:d3:0c:dd:10:d6:15:40:bb:a3:92:a5:
                    78:1e:bb:09:94:9e:f2:44:06:ba:92:c9:85:3c:3e:
                    c4:a4:dd:69:36:9a:56:af:5d:17:70:45:22:f9:14:
                    a7:a4:1b:d2:2b:28:4a:0f:4b:f1:61:fa:7a:34:1e:
                    85:50:f3:90:1c:06:d1:aa:3a:58:36:b4:78:6e:93:
                    0b:6a:d1:af:36:d9:b7:b1:b2:55:30:a2:f7:ff:5b:
                    93:15:fe:d8:d2:1d:46:15:6d:2d:e9:93:87:f5:83:
                    4b:50:dd:2c:0c:d4:d4:e6:95:3d:0f:d4:41:dd:db:
                    43:47:16:3f:0d:38:d4:00:c0:b6:6f:5e:41:fb:b2:
                    68:fc:09:c5:83:24:91:ce:6f:ec:c3:64:7b:af:13:
                    23:c5:03:29:74:80:18:9f:a3:97:ce:07:85:e4:05:
                    84:17:8b:8c:d4:a5:b0:fb:35:0d:3d:cb:8d:eb:7d:
                    c3:21:93:9a:a7:77:2b:4c:fa:07:19:6d:31:0b:ef:
                    84:21:d2:9a:5e:06:77:e3:4a:3f:78:c7:66:e0:0c:
                    c0:d7:9a:1a:02:b6:69:06:a3:b6:2a:05:90:63:28:
                    36:85:9c:6d:ad:7f:24:a6:17:12:0d:1b:bf:21:3e:
                    9d:08:b9:6f:fe:a3:7d:c9:73:b6:af:10:f4:f5:f7:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B6:25:6D:AF:D0:C4:29:33:6C:63:D4:9A:83:F2:03:19:9A:C0:AF
            X509v3 Authority Key Identifier:
                keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c9:b6:83:23:e1:30:ee:99:d4:57:12:6f:ef:33:9b:3e:5a:
         10:0c:d0:4b:83:45:6b:98:84:2d:c6:d4:f4:11:3c:20:c0:d0:
         6f:84:b8:7c:c1:34:2b:e4:53:d3:65:28:80:b9:ed:ba:a7:62:
         6c:25:83:31:69:40:cf:22:b9:d2:a5:98:68:eb:f2:50:3b:d1:
         57:98:dc:c0:ca:d0:e7:d3:b9:d7:f3:b6:3f:92:db:ec:98:0f:
         d5:2e:f4:34:7f:17:f7:7a:4c:77:04:ff:a5:bf:15:e5:06:f5:
         c6:d4:8b:65:69:38:fd:84:2a:8e:8d:7a:d3:8f:98:05:eb:49:
         c7:52:ac:15:1f:fd:32:35:14:7f:37:d5:ec:a5:50:d5:e6:a3:
         ad:0c:57:ce:56:18:e8:fa:08:92:86:dd:ac:51:6e:33:ac:07:
         11:29:49:71:7b:ca:7a:84:ec:dd:3f:bd:27:c9:dd:51:ff:4b:
         b3:25:17:bc:9a:de:f3:eb:7c:32:13:10:12:c5:ac:e4:c2:ff:
         8e:5d:1c:69:9b:7f:79:38:97:17:95:5e:aa:77:8c:2d:2f:3d:
         81:4e:f5:60:44:5a:53:fd:13:9b:5b:c7:63:6d:60:4a:4f:ab:
         56:5e:4d:2a:a5:3b:86:78:bd:8d:3a:61:65:d1:8c:95:c3:34:
         b8:ee:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:55 2026 by rpki-client