Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
File:                     RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json)
Hash identifier:          idYsOxekqz/cD8cksr2Ynv3/yUbrlcbcp9DgxCGBmT4=
Subject key identifier:   CD:40:DC:66:9F:02:F7:CD:6A:DB:4E:15:15:6A:F7:F6:3F:17:68:76
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Certificate issuer:       /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial:       019FAC08ED064B04896A52D9136EBA5DDDBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
Manifest number:          0408
Signing time:             Wed 29 Jul 2026 04:01:33 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:33 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:33 +0000
Files and hashes:         1: 9W2T6F7tOO8ptjkQDnIa84dNgjk.roa (hash: 7Q6b4TDkOCH4vZLEsdxeW12wMepLCVRM3purDPVlkFo=)
                          2: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: YrbbkVyKe33MArokjbIp155nyV2aoa2xvUOw3qvLzBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:ed:06:4b:04:89:6a:52:d9:13:6e:ba:5d:dd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
        Validity
            Not Before: Jul 29 04:01:33 2026 GMT
            Not After : Jul 30 04:01:33 2026 GMT
        Subject: CN=cd40dc669f02f7cd6adb4e15156af7f63f176876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:df:1a:c7:bd:c1:f0:11:5c:c0:08:5f:77:
                    db:36:85:e3:e1:ef:45:32:1a:b0:fa:fb:b1:40:3f:
                    f4:26:d4:fa:bb:d2:69:be:e3:58:1d:4f:2d:62:f4:
                    89:c2:2a:90:63:20:3e:20:d8:09:89:07:74:aa:6e:
                    82:f5:1c:ee:90:42:a2:3c:35:b5:e5:25:6e:0a:6c:
                    75:c2:3b:32:da:a5:24:0e:a0:9d:5c:ae:59:a7:85:
                    34:cc:ce:27:e2:b5:47:e8:42:e5:76:d8:97:63:e2:
                    ba:08:84:22:fa:90:50:18:de:ed:7e:2e:16:bf:f4:
                    da:9d:92:91:e1:9d:2d:27:54:07:c7:4e:00:5a:a4:
                    48:ed:48:84:75:e1:a6:e3:42:49:48:24:d9:f5:44:
                    ff:e6:61:79:25:20:54:2f:2d:d8:fa:1c:74:05:f8:
                    df:d9:b7:95:bb:58:29:ba:0d:c9:8d:0d:04:8f:c3:
                    d4:51:09:96:35:33:84:3b:0e:3d:95:df:71:40:dc:
                    1f:ab:4d:c8:f8:a1:21:33:aa:34:c8:e1:88:70:41:
                    d2:51:99:6c:38:35:7f:d6:89:de:36:2e:ba:bb:ac:
                    42:76:b4:d7:a5:5c:43:91:e2:c2:c9:b3:39:bd:c0:
                    ff:2f:8d:d1:45:db:51:39:c7:ef:f5:48:0c:1e:41:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:40:DC:66:9F:02:F7:CD:6A:DB:4E:15:15:6A:F7:F6:3F:17:68:76
            X509v3 Authority Key Identifier:
                keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f6:b3:03:e3:8d:68:58:41:92:6b:d5:65:04:b7:51:7d:25:
         c2:a0:eb:e8:f6:4a:fa:d9:5d:cc:d1:c7:bf:12:46:76:fa:62:
         6a:5c:e3:c7:b6:29:44:cf:40:6b:51:60:23:cc:b9:df:4f:ff:
         7d:8c:3a:5b:8c:e9:40:9c:82:8a:c6:2e:ca:65:68:11:6a:61:
         8d:7b:94:7f:0e:47:bc:15:ca:04:ac:d9:cf:9e:de:aa:79:4d:
         6a:09:a2:4b:f7:fc:18:53:37:4b:22:d7:ea:2e:a0:cc:7e:fe:
         ba:32:b7:ec:39:e7:b4:76:23:07:17:ee:97:ab:c0:9e:16:74:
         b0:d8:7d:99:43:30:43:35:18:df:1c:b3:3c:24:8f:49:b7:aa:
         ff:82:ff:60:cf:79:1b:90:3c:03:84:a1:95:f7:59:89:1f:c6:
         a7:bc:aa:59:0e:67:d2:3b:00:17:78:f5:d4:23:9f:02:2e:3d:
         23:c1:10:9e:9b:13:04:99:8c:01:3c:54:5d:07:80:52:57:a1:
         9c:fe:fa:2a:5a:0f:e1:f3:01:62:e4:3a:c6:83:a0:9f:4d:d9:
         6f:87:2c:1a:b2:7b:d7:eb:6d:ad:be:e7:7d:2d:6d:3f:4d:15:
         93:ae:bc:14:b4:c2:d4:3f:33:43:35:e5:7e:3b:d3:63:f9:f5:
         20:d6:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:10:54 2026 by rpki-client