Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
File:                     u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft (raw, json)
Hash identifier:          vCjXWDvLI05xTvyBvn67kI8c4QWxr1Rc2Rc7G5xG1Bw=
Subject key identifier:   91:9A:7D:A7:66:09:9A:68:68:37:FF:D6:A9:83:65:D8:2A:CD:DE:FF
Authority key identifier: BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20
Certificate issuer:       /CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820
Certificate serial:       019D9AE331C09508390A7FD61925969BB8C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
Manifest number:          02B3
Signing time:             Fri 17 Apr 2026 10:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:13 +0000
Files and hashes:         1: SGCJMFXuQqkQ66hRX-BwbZShDeQ.roa (hash: fC7zF6FRItdVCOIIyCz7wcwPMyIF6QXNLXbJU6mx+1Q=)
                          2: u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl (hash: eQdlQ3dpah32xwy+JO1AfGTI0n4JaN4Yre7z052lOk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:31:c0:95:08:39:0a:7f:d6:19:25:96:9b:b8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820
        Validity
            Not Before: Apr 17 10:01:13 2026 GMT
            Not After : Apr 18 10:01:13 2026 GMT
        Subject: CN=919a7da766099a686837ffd6a98365d82acddeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:e1:08:b5:06:73:85:c9:1e:ed:28:a7:5e:
                    38:5c:17:0e:79:02:32:78:da:42:34:ff:ee:37:81:
                    97:90:c7:31:04:39:92:2b:50:cc:49:1e:4b:63:e8:
                    c3:1a:b7:ea:8d:bd:79:84:55:d7:4a:86:77:be:c3:
                    04:0e:ca:79:2e:04:2e:57:fa:3f:03:94:28:f5:77:
                    00:f5:e3:81:7e:99:06:c4:96:71:c5:9a:5b:00:55:
                    d4:f0:61:23:2a:15:d2:35:38:d3:80:4c:2d:06:b4:
                    9f:59:e7:98:73:7e:76:a5:c1:a1:f8:fd:5d:15:8d:
                    e4:53:39:61:16:5d:0a:28:d6:ec:cb:01:26:24:68:
                    56:07:9d:37:b8:23:e8:84:bb:44:68:6d:df:db:59:
                    ab:54:48:39:ae:0c:e5:28:60:2e:ca:6c:9c:eb:cd:
                    de:85:f3:a4:f9:7c:7e:6e:3c:04:dc:23:5e:84:de:
                    89:fb:65:2e:c0:ea:32:db:69:3e:4a:90:79:7f:58:
                    f1:2b:8c:2a:9f:3a:95:a8:ba:f3:c4:d4:d7:09:52:
                    0d:66:ee:f7:a6:86:9b:c3:1b:82:5e:ce:c6:09:08:
                    fe:86:f7:5e:9f:3b:fe:e5:5c:2c:fb:af:7e:c7:d3:
                    ab:79:c6:c0:bd:fb:c2:6f:9b:33:8b:5c:40:02:a9:
                    28:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9A:7D:A7:66:09:9A:68:68:37:FF:D6:A9:83:65:D8:2A:CD:DE:FF
            X509v3 Authority Key Identifier:
                keyid:BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c8:29:a7:a0:6a:d4:79:60:b1:ed:35:4b:ee:c9:83:1a:bb:
         93:40:0f:89:71:d5:d3:b7:18:7e:39:f3:58:e7:40:7c:04:bd:
         1a:56:1a:06:7b:b1:ec:5c:45:6a:82:1e:a7:de:ca:c8:52:6c:
         ec:86:88:aa:84:f5:95:79:4d:c2:03:81:c8:46:8d:aa:b0:1a:
         c3:0b:7f:a4:17:8c:08:13:62:16:5f:3c:f8:38:17:7c:e8:f5:
         28:66:3c:24:4c:d9:ba:1b:e4:79:34:f9:3c:02:17:35:f0:1d:
         d2:c8:47:b3:02:87:98:16:80:79:d5:a0:e0:10:fa:e3:37:29:
         fa:9f:60:d4:4e:ef:12:c3:f3:50:f4:91:c2:14:88:50:8e:e2:
         8b:06:60:dd:76:98:c1:98:a2:f8:f9:a8:60:61:7a:a4:89:75:
         a4:c7:b2:e9:27:f1:be:67:ae:85:b9:df:ad:ce:e4:2a:8a:e1:
         9e:33:cf:1e:96:ab:9f:e6:bc:3f:f9:f0:08:a6:b3:3a:a4:d0:
         2c:62:ca:a7:e7:4e:d8:a9:f6:6f:7e:04:e1:99:06:e2:a2:f4:
         1c:3f:7e:2d:49:11:96:12:6d:18:f8:53:8c:f0:b0:2d:11:17:
         ad:21:64:81:8a:ea:a5:f3:dd:19:0d:55:cd:e0:f9:b7:74:41:
         8e:49:71:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4zHAlQg5Cn/WGSWWm7jIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjdmM2JmYjRlZDUzZTU5Y2VmOGM0NTg0YjYyNzQ3MGI2
MGE4MjAwHhcNMjYwNDE3MTAwMTEzWhcNMjYwNDE4MTAwMTEzWjAzMTEwLwYDVQQD
Eyg5MTlhN2RhNzY2MDk5YTY4NjgzN2ZmZDZhOTgzNjVkODJhY2RkZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/nhCLUGc4XJHu0op144XBcOeQIy
eNpCNP/uN4GXkMcxBDmSK1DMSR5LY+jDGrfqjb15hFXXSoZ3vsMEDsp5LgQuV/o/
A5Qo9XcA9eOBfpkGxJZxxZpbAFXU8GEjKhXSNTjTgEwtBrSfWeeYc352pcGh+P1d
FY3kUzlhFl0KKNbsywEmJGhWB503uCPohLtEaG3f21mrVEg5rgzlKGAuymyc683e
hfOk+Xx+bjwE3CNehN6J+2UuwOoy22k+SpB5f1jxK4wqnzqVqLrzxNTXCVINZu73
poabwxuCXs7GCQj+hvdenzv+5Vws+69+x9OrecbAvfvCb5szi1xAAqkoMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGafadmCZpoaDf/1qmDZdgqzd7/MB8GA1UdIwQY
MBaAFLv387+07VPlnO+MRYS2J0cLYKggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgt
M2Q0ODViN2NkZjVjLzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgtM2Q0ODViN2NkZjVj
LzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcgpp6Bq
1Hlgse01S+7Jgxq7k0APiXHV07cYfjnzWOdAfAS9GlYaBnux7FxFaoIep97KyFJs
7IaIqoT1lXlNwgOByEaNqrAawwt/pBeMCBNiFl88+DgXfOj1KGY8JEzZuhvkeTT5
PAIXNfAd0shHswKHmBaAedWg4BD64zcp+p9g1E7vEsPzUPSRwhSIUI7iiwZg3XaY
wZii+PmoYGF6pIl1pMey6Sfxvmeuhbnfrc7kKorhnjPPHparn+a8P/nwCKazOqTQ
LGLKp+dO2Kn2b34E4ZkG4qL0HD9+LUkRlhJtGPhTjPCwLREXrSFkgYrqpfPdGQ1V
zeD5t3RBjklxVA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:57 2026 by rpki-client