Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
File:                     u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json)
Hash identifier:          58FXD/At/GzD94hiDCm8SiT2E2+eCNXQyJXuJKPewfc=
Subject key identifier:   A6:78:F3:35:9F:81:03:0A:1A:68:D5:F3:7D:81:ED:37:71:88:CD:5F
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Certificate issuer:       /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial:       019EC1121A37ECEFE26E05F73F186B2530A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
Manifest number:          02F8
Signing time:             Sat 13 Jun 2026 13:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:49 +0000
Files and hashes:         1: I7p2CVdLUND1ZRszmGKzKIrLt74.roa (hash: jiBTRZ5olwGDj0RvfZj3FhxYBTormm6OVToMfN4KMps=)
                          2: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: y0vLSic7bQA8XH52euPosi0/tW7DBEbaV3X1oRdRjt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:1a:37:ec:ef:e2:6e:05:f7:3f:18:6b:25:30:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
        Validity
            Not Before: Jun 13 13:00:49 2026 GMT
            Not After : Jun 14 13:00:49 2026 GMT
        Subject: CN=a678f3359f81030a1a68d5f37d81ed377188cd5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:c3:2b:b1:d5:58:3f:03:cf:52:5d:3f:fe:
                    93:66:86:ff:12:ee:dc:b6:50:4b:9f:b7:9b:da:a3:
                    5b:be:86:62:a9:39:c9:88:26:ea:3a:d2:e3:b3:1e:
                    c7:ab:1e:b0:dd:e0:34:ec:1b:82:50:d5:55:a2:be:
                    e0:a8:b0:3c:37:8f:13:f9:c1:d5:1a:1f:94:d2:c0:
                    5d:cd:e5:38:6a:dd:f4:74:01:60:86:43:87:fd:5a:
                    85:86:9b:7e:68:d5:76:21:d2:91:21:c3:a0:98:b1:
                    01:ee:cc:46:6c:bb:fb:41:9e:81:4b:34:93:52:aa:
                    56:a0:f5:04:47:9c:c3:08:99:8f:05:cb:da:e9:ca:
                    0a:ca:98:a8:e1:73:6d:6e:08:cb:28:9f:46:b2:f3:
                    06:0b:6a:21:0f:b2:76:94:28:71:96:bb:6e:fa:12:
                    29:cc:6f:6c:ae:45:2c:dd:3c:35:8a:a9:de:70:4f:
                    75:d0:da:73:d3:43:ef:0a:14:82:46:1a:11:05:d4:
                    e5:96:6f:9f:f7:32:e2:ef:f1:1f:5d:76:75:cd:c9:
                    c4:42:6a:f3:85:6d:2d:fa:03:0b:d4:e3:2e:40:df:
                    b6:28:56:aa:da:db:e5:8b:30:a0:ca:91:6e:58:1e:
                    45:ee:5a:b4:4c:52:3b:71:d8:9a:72:fb:e5:a4:bd:
                    11:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:78:F3:35:9F:81:03:0A:1A:68:D5:F3:7D:81:ED:37:71:88:CD:5F
            X509v3 Authority Key Identifier:
                keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:98:20:68:f0:32:61:67:74:d1:c1:07:98:2c:25:2b:a1:db:
         58:b1:3f:71:d3:1a:af:ea:ed:b2:f8:3b:f1:a4:1c:e3:6a:a4:
         8f:07:d8:56:8a:c9:d0:8f:c2:93:b8:18:aa:99:69:1d:af:81:
         cc:81:9f:4e:69:dd:83:42:09:89:73:3b:bd:24:8d:c6:75:40:
         37:60:97:9d:2f:c6:41:67:ca:34:19:e0:77:fb:e2:6a:b3:92:
         33:41:fc:1f:19:66:08:42:5e:4a:f4:2e:e4:9c:4d:f9:1c:29:
         e6:28:24:3d:a6:e1:66:8b:7e:d2:bf:57:f3:e0:85:d8:c4:a8:
         75:ae:7c:e0:99:ec:3f:96:6a:2d:49:55:e2:9b:20:3b:d5:8b:
         11:b7:d0:c1:84:69:0d:b1:69:23:13:e4:ac:11:f1:77:3d:46:
         e5:13:ec:b5:f7:e3:62:ab:79:08:7a:91:47:d7:73:57:a4:c9:
         b6:6f:8c:f3:bc:af:89:3e:7a:5f:dd:77:db:38:29:e5:5b:a9:
         52:11:d7:32:d0:25:bd:fe:0e:c9:a9:6b:c5:aa:fd:97:47:c7:
         d6:db:a5:a5:b0:d4:d0:25:bb:77:80:0d:0b:33:fb:ab:7d:79:
         11:25:2c:36:32:63:31:52:8d:ee:c0:8c:47:82:87:7d:03:93:
         1e:82:da:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:13 2026 by rpki-client