Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
File:                     u0bPvakj-gZmDXLLwPIyBdweG5M.mft (raw, json)
Hash identifier:          DwMEp/T1t/zpVYclBMpL6fZNpx1tWJqBF0juAiD7L/A=
Subject key identifier:   02:0C:5B:2E:27:0B:8B:C3:80:D0:2C:7D:04:57:46:D9:18:2F:B8:26
Authority key identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
Certificate issuer:       /CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Certificate serial:       019FA786F57CAD440AB05C170B2A5F5E9EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
Manifest number:          0209
Signing time:             Tue 28 Jul 2026 07:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 07:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 07:01:07 +0000
Files and hashes:         1: Hr8okjlDTXsaje7Sx72N3GRcbxM.asa (hash: 1WlYfyugkGAuTp87DQNXe7Jdk25v+OmNqOxOuJn5VHg=)
                          2: u0bPvakj-gZmDXLLwPIyBdweG5M.crl (hash: DozfVUPagpKzmbl7/OkCf6hneB3IffoKO6+HqCFdqbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:86:f5:7c:ad:44:0a:b0:5c:17:0b:2a:5f:5e:9e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
        Validity
            Not Before: Jul 28 07:01:07 2026 GMT
            Not After : Jul 29 07:01:07 2026 GMT
        Subject: CN=020c5b2e270b8bc380d02c7d045746d9182fb826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:04:58:90:4b:c9:f6:9f:3c:bd:0d:c9:eb:
                    5a:c8:7a:c2:f4:b6:91:21:0b:a3:5f:a1:42:74:4b:
                    34:91:73:13:f0:77:83:f8:5d:d3:ea:5b:20:7d:8b:
                    9c:14:f8:5e:90:40:1f:87:23:8d:54:43:32:6e:54:
                    36:a1:ce:08:0a:e8:aa:31:c5:0a:1e:e0:6c:8a:0a:
                    74:9a:cb:8b:06:b5:54:34:02:a7:ca:1c:fd:d9:49:
                    60:5f:ed:ad:f6:67:46:fb:ce:3c:45:30:90:aa:ee:
                    16:62:ba:83:d4:6b:9e:d7:d3:e2:63:db:22:40:ea:
                    59:d7:04:cb:4e:ca:7d:3b:9c:1e:db:a2:33:85:fe:
                    f4:11:c2:8e:20:2e:cb:75:5e:ad:40:7e:49:cd:8b:
                    f0:08:bf:92:f5:af:6d:48:e0:03:49:79:22:aa:7c:
                    ce:db:31:6e:fd:11:72:8b:a1:88:bc:4e:c1:b9:1c:
                    6a:74:63:2e:61:05:6d:a1:7d:b3:f4:fc:16:92:06:
                    c8:82:13:17:0d:39:cc:a0:7d:f8:78:77:e7:1b:ba:
                    68:57:47:c6:e7:2e:36:1e:a7:8d:27:fd:00:86:2e:
                    d7:cd:6a:b4:22:57:81:82:ef:66:ed:19:45:4b:8c:
                    b0:d8:5a:36:6f:07:35:48:97:64:d2:ae:8a:a9:cb:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0C:5B:2E:27:0B:8B:C3:80:D0:2C:7D:04:57:46:D9:18:2F:B8:26
            X509v3 Authority Key Identifier:
                keyid:BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:17:28:3e:4d:60:12:8c:d6:67:5e:62:1c:5e:9f:24:3f:
         2c:d1:8f:e4:df:23:15:24:76:61:67:30:e6:8b:85:c1:81:1d:
         4a:5a:fe:b0:50:9f:cb:80:5b:93:54:9d:d2:fa:c0:2d:19:98:
         bc:6a:44:4a:e9:cf:d4:57:6d:2a:1c:9b:70:74:67:f0:7f:61:
         8c:f6:80:87:89:f6:ac:b8:ca:ab:91:ab:08:8a:c1:eb:c2:ec:
         b2:6a:2e:73:79:2c:97:ba:50:7e:49:36:64:c4:87:b9:fe:3f:
         08:a1:0c:27:6b:ef:14:d8:1f:17:94:cf:e2:aa:e1:8e:44:28:
         87:fd:bd:0f:d1:7d:0a:00:68:e6:36:31:f8:4e:b9:e4:8c:79:
         15:39:65:09:ed:9c:9b:83:bc:30:b4:c0:d7:78:41:03:70:d7:
         71:6a:35:a3:b9:df:8e:62:be:69:62:09:51:da:0c:af:f3:48:
         e0:b0:d3:7b:df:68:71:55:17:49:70:74:ce:80:9b:b6:e9:57:
         32:79:f6:98:03:61:86:ef:ee:48:79:64:5a:93:aa:e5:5e:b5:
         bf:7b:cf:40:6d:e2:8b:66:b3:80:06:80:4c:7c:a1:d9:82:0e:
         42:ff:f3:46:8c:19:3a:eb:d9:7d:78:17:36:50:91:aa:bc:34:
         1d:ca:63:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:06:32 2026 by rpki-client