Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
File:                     u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json)
Hash identifier:          kppBD1Qrkqcc+x3TK33z7Uc03XYDyYMAKq1pkbcSF9M=
Subject key identifier:   9F:B0:09:C2:4F:8F:9D:DB:E5:84:F7:7C:4F:D3:E3:3D:FD:C5:BB:D4
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Certificate issuer:       /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial:       01A0D2372EC697C67878017A4385EC1933B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
Manifest number:          040A
Signing time:             Thu 24 Sep 2026 07:00:26 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:26 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:26 +0000
Files and hashes:         1: I7p2CVdLUND1ZRszmGKzKIrLt74.roa (hash: jiBTRZ5olwGDj0RvfZj3FhxYBTormm6OVToMfN4KMps=)
                          2: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: QoGNrEKrVN64fdppedigWjCbiSyYhdKfUQ1+Ip7c4oQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:37:2e:c6:97:c6:78:78:01:7a:43:85:ec:19:33:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
        Validity
            Not Before: Sep 24 07:00:26 2026 GMT
            Not After : Sep 25 07:00:26 2026 GMT
        Subject: CN=9fb009c24f8f9ddbe584f77c4fd3e33dfdc5bbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:76:4e:f7:75:c2:88:3f:ae:69:21:8b:72:b7:
                    da:c4:57:50:ea:f2:9a:ee:07:63:05:83:1d:d4:d0:
                    9b:62:29:b3:ca:a0:ab:25:4a:ff:0e:f6:8b:ff:5f:
                    b4:a6:07:f8:1f:47:b7:3c:60:17:ee:c5:ed:d2:70:
                    47:61:bc:44:19:d5:ec:b2:4f:14:ce:40:ab:d9:d5:
                    7e:9d:9c:d2:86:19:7b:1c:97:8d:00:2f:2b:b2:e3:
                    e1:a2:7a:0f:fa:63:7b:ea:60:8c:46:02:63:e0:f9:
                    97:3c:cb:93:d8:15:7d:2c:28:28:f5:74:9c:de:70:
                    cb:02:d9:44:49:83:38:75:5a:e7:56:9e:b1:d2:24:
                    fc:85:27:8a:af:47:b8:bd:84:6f:12:ac:c4:26:ec:
                    87:55:b8:74:40:b5:44:8c:b3:98:c7:a8:4d:80:9c:
                    7a:0b:ab:7b:8d:70:59:8d:8d:77:65:3e:4b:3a:72:
                    41:ae:ff:29:4f:8d:34:33:41:11:20:e0:94:69:5e:
                    86:aa:fd:96:24:94:4c:e6:00:0f:e3:e3:49:dc:cc:
                    9d:dd:cf:87:e0:6e:d5:2a:f2:70:57:a7:c3:94:0c:
                    5c:6e:b1:f1:8d:81:4b:c0:55:f4:23:db:5e:ca:21:
                    17:cf:87:33:fd:38:55:b7:e4:86:e5:7f:d4:a1:45:
                    49:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B0:09:C2:4F:8F:9D:DB:E5:84:F7:7C:4F:D3:E3:3D:FD:C5:BB:D4
            X509v3 Authority Key Identifier:
                keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5a:9d:53:f8:2a:76:1c:83:a9:d6:09:fa:66:55:37:5e:a3:
         9a:dd:f4:81:2a:1e:d5:15:86:dd:40:43:49:43:d5:f5:7a:b9:
         60:12:ae:a6:46:ad:f3:4f:62:3d:01:a4:ef:50:56:c3:61:f2:
         c4:38:96:47:1d:76:19:84:4f:1a:8b:eb:d9:22:3c:ab:d7:92:
         ff:a9:5b:87:44:33:79:65:af:4f:4f:57:ed:2f:58:89:cd:06:
         58:f7:1e:50:b9:a7:d8:61:a7:02:18:de:35:ec:5b:6d:cd:32:
         26:34:db:7e:47:0d:63:f7:13:5f:71:40:e6:76:02:7b:55:b4:
         f6:99:06:56:09:c3:b3:3a:78:8e:80:c0:bd:16:7d:c0:3c:f4:
         35:f5:b3:0d:da:66:13:c9:d6:b6:92:8e:2e:0a:34:7f:dc:28:
         0e:52:83:d3:e1:cb:be:7d:9d:d4:99:17:b4:1b:d0:9e:43:d4:
         82:07:3d:79:d9:e9:d7:bb:82:cd:70:31:be:a3:3f:a8:8b:c9:
         7c:a5:0b:8f:b0:fb:3c:37:e6:af:d8:57:b8:d5:0f:71:0b:b9:
         b1:aa:15:3d:c1:4d:ae:c2:ff:b5:ae:4e:9b:b5:18:c8:8e:eb:
         8c:28:1e:dd:2c:51:23:b0:01:cd:04:d6:44:c7:a6:d6:51:df:
         31:bd:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:14:08 2026 by rpki-client