Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
File:                     u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft (raw, json)
Hash identifier:          ZqOZJO9BX7LY+S2eKyKZKapNB/9fJUgMA46KArq2LCo=
Subject key identifier:   81:7A:70:24:0D:D8:F3:6E:AD:DF:7B:E1:B1:49:89:48:1F:D9:82:08
Authority key identifier: BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20
Certificate issuer:       /CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820
Certificate serial:       019FAA19FA2A6BFAA924B8668918094F54C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
Manifest number:          03C4
Signing time:             Tue 28 Jul 2026 19:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:56 +0000
Files and hashes:         1: SGCJMFXuQqkQ66hRX-BwbZShDeQ.roa (hash: fC7zF6FRItdVCOIIyCz7wcwPMyIF6QXNLXbJU6mx+1Q=)
                          2: u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl (hash: um0kATpD5ak3Y0D2Jo1PvI+AWRMGW8nX77sCfhhnmYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:fa:2a:6b:fa:a9:24:b8:66:89:18:09:4f:54:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820
        Validity
            Not Before: Jul 28 19:00:56 2026 GMT
            Not After : Jul 29 19:00:56 2026 GMT
        Subject: CN=817a70240dd8f36eaddf7be1b14989481fd98208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:b6:40:1c:cd:87:e7:9a:4c:38:d1:e9:71:
                    cc:bf:3a:48:0c:a6:88:26:9b:2f:ce:79:9a:c1:e6:
                    ba:b9:a4:8d:a8:3c:65:3e:1b:d1:e2:f0:9a:11:3b:
                    3d:f8:27:cc:64:9f:e0:bd:96:0c:2d:4a:4c:28:4f:
                    4a:a0:dd:59:b8:a5:9a:79:e1:9b:de:d3:ed:e4:ff:
                    71:f1:94:56:2b:76:6e:e0:89:78:af:92:8f:5d:30:
                    43:ad:00:f0:75:02:7a:ed:12:de:07:59:eb:7b:c2:
                    f0:da:f1:ac:b0:09:6d:c3:0e:f0:80:a5:47:dc:3c:
                    42:e0:7d:5c:f7:50:2a:84:21:67:b3:4e:1d:e1:e5:
                    78:63:eb:5a:af:eb:cb:71:e5:1a:04:ef:63:0f:c7:
                    ef:ff:3a:24:6b:fb:c8:ae:10:a3:b7:59:bc:10:ce:
                    d9:91:9d:ab:af:dc:58:2d:47:75:68:bf:dd:44:7e:
                    ba:bd:97:4b:6f:c9:3d:02:1f:72:18:4b:4d:51:b3:
                    66:38:74:d2:76:db:74:d2:0e:08:5a:8c:62:22:05:
                    f9:bc:60:2f:47:e4:69:ae:4d:a9:8e:d7:d5:26:bc:
                    db:a5:18:50:24:60:cc:a5:e0:33:4b:73:cb:34:cc:
                    52:93:7f:f2:e6:f0:48:39:93:07:4a:fa:5d:77:6f:
                    d8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7A:70:24:0D:D8:F3:6E:AD:DF:7B:E1:B1:49:89:48:1F:D9:82:08
            X509v3 Authority Key Identifier:
                keyid:BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1a:42:d2:38:8e:02:ff:f4:6d:e8:f3:18:54:00:9f:7b:9d:
         49:17:03:3b:9f:ad:e4:2c:65:4e:1d:17:d2:ba:b2:87:0f:ba:
         7a:f7:4a:d1:a8:af:15:4e:0a:10:c5:e6:f0:6e:45:64:39:3d:
         03:48:a0:50:ce:98:82:30:4d:13:f6:f3:7e:45:88:9a:a7:2d:
         cc:e1:39:79:25:fb:e4:1d:74:0b:5d:95:96:1f:63:0a:3e:0d:
         e2:b5:f3:c7:f1:4b:36:d5:c7:5c:42:77:ca:ea:25:6d:e0:cb:
         cc:17:78:96:e4:91:38:50:c5:04:66:b7:ed:c5:a6:23:d6:9a:
         8c:e3:8d:37:68:d3:3b:be:9e:c6:50:03:9b:d0:ab:30:af:6e:
         6b:63:fc:f2:7a:09:b0:2d:43:57:77:36:20:80:2e:80:a9:c4:
         c1:1a:ff:53:83:2d:e0:b7:96:5d:a1:0f:69:99:97:20:2b:78:
         9d:60:38:f8:06:76:f1:9f:1c:8c:0a:2a:eb:91:f0:bc:bd:9a:
         89:2e:e4:32:5d:2d:ef:6b:43:53:95:6f:b9:84:91:96:36:c4:
         bd:e3:8f:8d:da:2b:0d:df:a6:58:52:e4:6c:e2:81:a7:35:c1:
         33:a9:46:74:d1:87:6c:95:3f:cd:4f:18:ef:75:18:20:0b:72:
         3a:ff:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:17:03 2026 by rpki-client