Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File:                     ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier:          qQEXmxRHYbyhcm1sk1z534kqgvoHDOFM7RsfuV4R+2Q=
Subject key identifier:   61:C4:CF:0D:C9:CA:45:C9:F1:8F:B9:27:50:67:14:51:A1:6D:DF:76
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer:       /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial:       01A06E3975E28162CE5236DAA0944F3A69CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number:          11F2
Signing time:             Fri 04 Sep 2026 21:00:54 +0000
Manifest this update:     Fri 04 Sep 2026 21:00:54 +0000
Manifest next update:     Sat 05 Sep 2026 21:00:54 +0000
Files and hashes:         1: C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa (hash: 4EBK9TE3DKNE91PsZ8jPUioXBBKUno4c9ILnL/KNCRs=)
                          2: m0XHnqLimHCaVdrwyhH4qvYB5k4.roa (hash: AyXTFUEVIX6Aa2cN5D+zF56YX+NxzZvMWIw5F0uYaGI=)
                          3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: 2yvw5AhxmRKu4umEb3Jy9VTEPqE+voCaIXPDdaKjh74=)
                          4: uFaZ7j6WOK_rFoGA3dV4DOr3Azw.roa (hash: 7Q1qXKsYai/yvbGaDBAb/Nup5NNAKS6f69A2HPPsnRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:75:e2:81:62:ce:52:36:da:a0:94:4f:3a:69:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
        Validity
            Not Before: Sep  4 21:00:54 2026 GMT
            Not After : Sep  5 21:00:54 2026 GMT
        Subject: CN=61c4cf0dc9ca45c9f18fb92750671451a16ddf76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2d:30:55:c2:6f:6c:cf:30:ec:32:76:6d:f1:
                    8a:18:f3:d5:db:cf:68:cc:20:00:8c:41:44:b0:8f:
                    86:ca:59:79:8d:7b:76:8b:01:5c:ea:20:a3:d5:5a:
                    cb:5b:85:19:31:ea:60:0f:03:86:51:83:00:51:09:
                    bd:24:4e:fe:a4:24:c5:ff:07:3a:a9:d3:a8:c4:d2:
                    93:de:85:de:82:90:d8:56:c6:52:93:b2:67:80:10:
                    5f:e8:76:94:26:44:6b:85:9d:06:ee:34:68:ef:8a:
                    e6:75:27:48:1b:93:b1:f2:95:8d:04:fe:4f:f3:2c:
                    bc:bf:99:d6:03:6b:5f:2b:73:df:8b:43:d6:2e:23:
                    8d:96:7c:e5:73:a2:d3:eb:64:fe:ea:67:d5:b1:5d:
                    24:37:9d:fa:a7:7d:ec:99:69:08:a8:ce:0f:77:10:
                    ae:6e:8a:f6:23:a2:5a:7c:7b:a7:0a:cc:c7:6b:1f:
                    70:35:fa:87:3a:c3:4d:ae:74:94:f5:4a:cf:d0:7d:
                    0d:93:31:06:4a:de:81:06:22:36:05:d3:c3:55:c3:
                    d6:da:8d:e8:b6:23:95:e0:ef:f2:39:86:bf:2e:eb:
                    7f:00:de:68:4b:24:fc:3b:bf:2e:b7:69:ec:23:eb:
                    2c:1d:d1:54:9f:91:25:3e:6c:4f:65:ae:d8:4a:ff:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C4:CF:0D:C9:CA:45:C9:F1:8F:B9:27:50:67:14:51:A1:6D:DF:76
            X509v3 Authority Key Identifier:
                keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:28:8b:ec:14:3c:48:2a:07:34:a2:5b:80:8e:b1:b0:0e:30:
         ab:a5:61:a4:1a:ad:16:45:1e:f6:bd:1b:a7:55:fd:fb:36:77:
         55:5c:bd:e4:4e:d8:d7:25:a4:bb:c1:2b:1e:04:79:9d:44:24:
         93:1a:01:a5:d1:35:ba:48:fc:62:3a:36:e0:a1:4d:44:ff:4e:
         d4:4a:5c:91:ba:fe:ce:ae:b2:e7:90:1f:52:16:60:2a:4c:33:
         03:10:af:ef:72:14:9b:2d:da:ac:62:55:c1:ef:1d:af:c7:c4:
         61:07:09:33:0f:89:b7:57:e6:9f:e0:f2:f6:5c:df:60:ce:78:
         58:0c:57:14:39:1f:17:be:1a:13:b7:46:4d:0c:53:c4:30:59:
         b0:9c:4d:c4:80:f0:ff:43:90:43:39:b9:81:f3:52:e2:c5:88:
         0d:d3:cb:41:64:44:33:8a:33:1d:13:f0:58:64:77:77:36:92:
         5f:f3:9b:46:f9:b2:3f:7f:ce:cc:bd:00:0b:2f:5d:92:73:6f:
         fb:24:6f:78:14:58:61:7c:8e:78:47:7f:e7:3c:61:86:9b:0c:
         9d:7e:90:b1:2e:ea:0c:1f:ae:a2:79:66:b2:0e:15:44:2a:89:
         c9:04:9e:a6:25:fb:94:fe:17:17:ec:2b:db:18:ac:52:f5:2a:
         79:ad:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:46:36 2026 by rpki-client