Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
File:                     u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json)
Hash identifier:          osu41xtYOQpct8gUAOplJc58yEMeytFcPhY2kDh3shg=
Subject key identifier:   DD:51:45:84:2F:61:93:7A:FC:65:CF:1A:B5:A3:4E:6F:71:A3:32:2E
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Certificate issuer:       /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial:       019FACAD6821F61613A0D9F9F019AC04015B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
Manifest number:          0372
Signing time:             Wed 29 Jul 2026 07:01:13 +0000
Manifest this update:     Wed 29 Jul 2026 07:01:13 +0000
Manifest next update:     Thu 30 Jul 2026 07:01:13 +0000
Files and hashes:         1: I7p2CVdLUND1ZRszmGKzKIrLt74.roa (hash: jiBTRZ5olwGDj0RvfZj3FhxYBTormm6OVToMfN4KMps=)
                          2: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: NmSRmCN4MA3v3SFT9iDChbiUvs0QgVEj+t08jA4gKbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:68:21:f6:16:13:a0:d9:f9:f0:19:ac:04:01:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
        Validity
            Not Before: Jul 29 07:01:13 2026 GMT
            Not After : Jul 30 07:01:13 2026 GMT
        Subject: CN=dd5145842f61937afc65cf1ab5a34e6f71a3322e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:50:c0:73:b8:08:1f:12:54:0b:a3:06:4e:
                    f2:f6:80:d3:17:ae:09:08:1c:66:76:c2:2c:89:e1:
                    a0:f7:1c:40:fd:76:1e:42:3b:26:55:2e:f6:2b:59:
                    f4:9e:fe:9e:54:29:f8:81:0d:cc:a9:4e:aa:83:3e:
                    25:e4:02:9c:5a:1f:78:da:ee:ea:af:15:ad:5d:4b:
                    68:15:aa:99:cc:b2:f0:7e:48:6a:da:02:23:de:f7:
                    6f:02:0e:43:98:15:28:4d:63:cd:9a:b1:b7:64:05:
                    f0:67:00:4e:fd:5c:01:0e:9b:81:f5:e9:78:5d:9b:
                    d7:62:3d:38:8f:71:6b:c5:43:3a:6f:72:01:8c:0e:
                    15:95:62:75:79:b0:20:00:a9:23:85:91:f1:11:9a:
                    ed:bb:63:fc:e9:fd:72:57:41:39:32:12:1d:4c:23:
                    d5:d6:de:a5:34:7a:16:ed:d8:eb:52:db:64:7b:bd:
                    68:3f:dc:7f:89:6b:8a:6f:fd:8b:d8:dc:2f:95:4e:
                    78:ac:a8:eb:85:2a:d6:62:c7:82:6c:33:ed:74:aa:
                    5f:d1:93:2f:44:6a:24:94:6f:fe:89:ee:82:89:11:
                    af:90:40:9d:76:ef:81:66:45:98:1a:3d:92:cf:e4:
                    3f:09:6f:4d:d8:e4:b1:82:1f:fa:24:f5:e6:07:51:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:51:45:84:2F:61:93:7A:FC:65:CF:1A:B5:A3:4E:6F:71:A3:32:2E
            X509v3 Authority Key Identifier:
                keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:59:b4:0d:bb:19:fc:54:db:c3:6d:3e:d9:b0:16:d5:08:d7:
         bd:be:cd:d0:6d:b8:c6:76:8c:fe:f2:2e:15:38:ae:dc:61:72:
         bd:e7:b4:31:11:47:d1:e7:ff:4a:ad:9b:52:0c:17:dc:49:a0:
         06:16:4c:7e:2f:0a:5d:aa:8c:76:85:80:2e:39:a3:1d:4c:14:
         7e:db:9e:84:a7:f1:de:ce:17:f0:d1:a1:72:39:d3:69:60:88:
         18:ce:61:5d:e5:76:f2:ba:eb:94:6c:e7:36:c7:84:fd:08:de:
         d1:80:17:ea:f3:85:f2:01:53:45:9d:68:d4:5a:af:79:9c:df:
         3e:85:89:64:28:5c:d2:ef:fe:06:9b:6d:71:64:b1:8c:c5:a6:
         5d:d1:be:88:ef:75:9c:78:ab:ba:7b:76:8f:dc:ef:a6:73:dd:
         fc:fc:76:9a:3e:3f:ef:da:d2:89:49:dc:d8:a4:4b:f9:2f:de:
         79:18:80:01:46:07:e6:6f:cc:d3:40:7c:c7:a9:31:6d:59:59:
         57:bc:ab:7d:db:dc:6b:f2:97:94:e5:63:ad:bc:5f:d1:92:e1:
         92:8c:39:ff:5a:3c:0d:6a:05:49:92:c6:b7:3a:76:4b:7a:54:
         31:53:36:23:57:ad:dd:11:32:dc:56:68:c7:b4:92:46:b4:2a:
         81:bf:ad:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:03 2026 by rpki-client