Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
File:                     u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json)
Hash identifier:          X5i1GzA5yyOYGJCCf2VC3fngJm8lkb6mjT/dVNuEMTE=
Subject key identifier:   4C:17:7D:EE:2A:A4:CD:14:92:23:93:97:04:4C:69:04:6D:0F:D8:E3
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Certificate issuer:       /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial:       019EC1B75FA3C7B17660D3625A17240A2C37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
Manifest number:          0333
Signing time:             Sat 13 Jun 2026 16:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:20 +0000
Files and hashes:         1: 1-jZ-qYLqAhIwiPph5e3gFUMb5nQ.roa (hash: GrViIOEvWT4Zxt5MGwjrExDSBv8BFYP8ZQ7BXiEbrRA=)
                          2: IF-dQIrNICfVhG9zO_nJPALR-dQ.roa (hash: 28voGBv/WZH5Cfsgew8XwJMKo8y9ShAkKaFAqMfu7Q4=)
                          3: V73bm1kSNmHg-C0_nIo7CkeSIXs.roa (hash: CVQL9co2yo6FCueWNiD8EvSqpDL8q8jnyz+ynK1Hx2E=)
                          4: _9OTnWhfptNmahMwIUd6M8KUigY.roa (hash: gOfBWU8NyLveB72fRV3TQVbWthwb/Lqj0yi3WTcOUM4=)
                          5: nVbWh0pJuYoykDM3Ufm0vUQu0IE.roa (hash: 7Orgw/1y3WPm4Dfr6xr3DA5k5wi24zwItPWXDbeu7SU=)
                          6: nue0zLCdoQpgxGStseN2fkjSnI4.roa (hash: VSsTvgcmCl/+CH4M98aAryux6Otm4nE6txZTSh2dlVw=)
                          7: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: J3zU1BKcuPLpXIy7nLwYhHjiJJKnnDkZ9a2Zok9RF3E=)
                          8: yp_V2SDm61CRWvjnGT6m5_yIOPI.roa (hash: bpOGJYyMnTqmj9p+ne0ebzB6DmKNjVReNZUhs0YS4n4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:5f:a3:c7:b1:76:60:d3:62:5a:17:24:0a:2c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
        Validity
            Not Before: Jun 13 16:01:20 2026 GMT
            Not After : Jun 14 16:01:20 2026 GMT
        Subject: CN=4c177dee2aa4cd1492239397044c69046d0fd8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:5e:d3:2e:d7:31:83:9a:2f:b5:1d:a8:1a:
                    9d:2b:30:f8:bf:a6:27:ba:85:1c:8f:ca:e8:02:ed:
                    d7:95:62:ab:a0:89:b9:c5:1b:8b:9a:c1:31:84:ee:
                    60:82:99:d4:00:b7:75:54:d0:53:f6:ee:d5:8b:9c:
                    9a:1b:97:ef:7e:54:d6:ed:ec:7e:e7:14:c4:a4:fb:
                    7a:2a:f6:6d:1a:d8:af:47:17:de:52:3d:41:e9:e8:
                    46:73:d4:4c:35:36:68:fe:bc:c3:b7:35:b9:d8:56:
                    65:de:1b:8b:b2:15:4f:1d:85:9e:d4:d4:e3:d7:62:
                    0a:e7:cb:56:fb:e5:5e:fc:d8:b2:5d:53:5d:77:58:
                    5d:7a:39:78:6e:68:36:4a:ee:73:b9:b5:39:69:51:
                    6b:d6:af:54:2b:2b:03:73:5c:5c:69:c8:66:d6:50:
                    d9:ab:92:9c:71:a9:2b:4e:ce:2f:65:a5:ff:69:5e:
                    86:7f:7e:eb:fa:44:83:45:7b:f0:5d:6d:13:e6:67:
                    9f:bd:32:ee:f5:a1:b7:e6:b9:cc:38:8b:6d:79:02:
                    6b:d0:9d:c7:39:e9:fa:7b:8d:43:7f:2d:f6:b7:3f:
                    43:8c:92:5d:ed:85:f7:64:0a:7b:d7:8a:31:96:f3:
                    ee:18:b7:70:02:1c:72:45:88:7b:77:6a:fa:90:4d:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:17:7D:EE:2A:A4:CD:14:92:23:93:97:04:4C:69:04:6D:0F:D8:E3
            X509v3 Authority Key Identifier:
                keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9c:16:eb:b1:0f:8f:07:dd:dc:7a:be:fa:e9:3e:c5:df:ce:
         9b:a3:58:5c:56:18:6c:73:fa:e3:6b:2f:c4:98:4b:e1:d2:ec:
         55:34:74:83:0a:4f:0c:9c:5b:ad:ff:fc:91:86:fa:c8:cd:21:
         96:d9:f2:42:7c:bf:fe:92:72:d1:00:e2:16:92:b1:b4:5a:d9:
         b6:42:6f:e2:f2:5e:86:26:0c:0e:b2:17:7b:bf:49:64:38:6d:
         d5:1d:fb:d1:06:d6:e9:e4:95:6a:9a:13:79:aa:fb:35:6f:a1:
         53:59:ae:7b:c5:a2:4c:b2:39:24:07:ed:51:3f:2a:25:24:e6:
         28:2a:dc:7d:d5:7e:e1:42:e8:05:f3:42:a9:14:8e:d1:94:b5:
         ba:85:81:30:ee:a6:3f:cc:84:44:15:7d:2f:e8:6c:f3:52:a2:
         25:d6:91:8f:dc:76:72:c8:a6:8a:2d:d1:70:81:e3:41:b0:99:
         65:37:b3:a9:bb:59:56:e0:2a:01:f2:10:7c:aa:41:14:77:f0:
         2e:33:b4:99:44:39:14:3f:bd:c0:f5:28:7e:73:19:ae:60:32:
         f5:5c:39:35:74:25:52:79:e5:05:1b:15:62:40:47:18:84:78:
         29:a1:62:a8:b6:6b:6f:3a:eb:4f:f2:05:60:b0:6a:7b:22:f8:
         83:ae:e0:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bt1+jx7F2YNNiWhckCiw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDg0YmM0NGRiZGE1YmFiZmM0OTQwYmNjYzE2MzVlMTUz
YjI0YjYwHhcNMjYwNjEzMTYwMTIwWhcNMjYwNjE0MTYwMTIwWjAzMTEwLwYDVQQD
Eyg0YzE3N2RlZTJhYTRjZDE0OTIyMzkzOTcwNDRjNjkwNDZkMGZkOGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoRe0y7XMYOaL7UdqBqdKzD4v6Yn
uoUcj8roAu3XlWKroIm5xRuLmsExhO5ggpnUALd1VNBT9u7Vi5yaG5fvflTW7ex+
5xTEpPt6KvZtGtivRxfeUj1B6ehGc9RMNTZo/rzDtzW52FZl3huLshVPHYWe1NTj
12IK58tW++Ve/NiyXVNdd1hdejl4bmg2Su5zubU5aVFr1q9UKysDc1xcachm1lDZ
q5KccakrTs4vZaX/aV6Gf37r+kSDRXvwXW0T5mefvTLu9aG35rnMOItteQJr0J3H
Oen6e41Dfy32tz9DjJJd7YX3ZAp714oxlvPuGLdwAhxyRYh7d2r6kE3o6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwXfe4qpM0UkiOTlwRMaQRtD9jjMB8GA1UdIwQY
MBaAFLvYS8RNvaW6v8SUC8zBY14VOyS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYt
ZGZkZGIxMzY0MzYzLzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYtZGZkZGIxMzY0MzYz
LzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJwW67EP
jwfd3Hq++uk+xd/Om6NYXFYYbHP642svxJhL4dLsVTR0gwpPDJxbrf/8kYb6yM0h
ltnyQny//pJy0QDiFpKxtFrZtkJv4vJehiYMDrIXe79JZDht1R370QbW6eSVapoT
ear7NW+hU1mue8WiTLI5JAftUT8qJSTmKCrcfdV+4ULoBfNCqRSO0ZS1uoWBMO6m
P8yERBV9L+hs81KiJdaRj9x2csimii3RcIHjQbCZZTezqbtZVuAqAfIQfKpBFHfw
LjO0mUQ5FD+9wPUofnMZrmAy9Vw5NXQlUnnlBRsVYkBHGIR4KaFiqLZrbzrrT/IF
YLBqeyL4g67grA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:47:21 2026 by rpki-client