Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File:                     bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier:          fB61LfdgmBdaoAPzJL0pmcsvynvxxxsbIZ3BLca8HUM=
Subject key identifier:   13:69:97:D0:DE:2D:B4:C1:EA:6C:33:D4:D7:DE:32:30:0C:BA:1B:9B
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer:       /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial:       01A06D94EC1EA1ED51CA9849103F59FD79EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number:          0DBC
Signing time:             Fri 04 Sep 2026 18:01:11 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:11 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:11 +0000
Files and hashes:         1: AjNaf0XOBf9riDrcOuPKw561NDY.roa (hash: 9pTroZDCDfvNGpo8ht2rx0lIgrrP6ysux19y/1KOqeE=)
                          2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: fRrey0MbXPHj5e/PK3XSjLKOgK2BcA8hQBRSFBBUo1A=)
                          3: ozNQN_NZFecNhoYlp5UO91vuHOs.roa (hash: nM7bo7W7c3uRHayjYiquSs/XgOtGpwXa6S0K0J9q4Zw=)
                          4: yfDJRZg2skhYgI5YRIWudM4uRkA.roa (hash: kEPU+5FdgdE3UdwWy8pB51bGvVfcgF37Ajrzi1JqLzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:94:ec:1e:a1:ed:51:ca:98:49:10:3f:59:fd:79:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
        Validity
            Not Before: Sep  4 18:01:11 2026 GMT
            Not After : Sep  5 18:01:11 2026 GMT
        Subject: CN=136997d0de2db4c1ea6c33d4d7de32300cba1b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:4f:d1:e9:1b:ee:ff:a6:0b:04:d0:d5:28:
                    bb:02:95:20:e9:5f:fa:4e:4e:da:b8:7f:8e:b9:59:
                    1c:9b:38:98:bc:1e:bc:a0:b4:e3:f3:0f:87:00:e6:
                    02:ec:27:15:fc:a6:bc:42:a4:f4:1c:22:60:04:ed:
                    51:b3:27:59:e3:b3:f3:d9:1b:28:b2:98:de:0a:7c:
                    6a:0b:fb:3e:c9:e5:fb:c5:ce:f6:2f:dd:b7:b7:d0:
                    64:87:a5:f5:ab:7b:02:c7:20:9f:51:82:2d:5d:86:
                    01:c8:b4:1f:ae:9c:26:a4:8a:46:36:4d:60:e3:e7:
                    9d:06:4f:74:24:f7:a2:fa:7d:63:09:c1:6a:b3:c8:
                    42:b5:f1:5e:e1:a8:37:e6:69:b4:34:4e:a8:7f:f9:
                    b8:35:c9:1c:f4:30:c5:55:f9:42:83:e1:1f:22:8f:
                    49:a2:f5:cd:72:f1:c9:be:f4:39:d3:f0:51:e6:08:
                    fd:ff:70:6c:e0:79:17:ce:bb:fe:55:44:04:4d:1c:
                    25:8c:4c:5e:31:6d:33:32:cd:cf:39:d0:3b:ff:d7:
                    4c:ea:18:e0:06:af:e0:9b:f1:32:b2:33:58:9e:46:
                    32:19:28:49:ff:43:6e:86:29:dc:ee:54:8f:87:9e:
                    10:67:9b:9f:28:34:51:9a:a1:d1:4e:53:e7:24:74:
                    1c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:69:97:D0:DE:2D:B4:C1:EA:6C:33:D4:D7:DE:32:30:0C:BA:1B:9B
            X509v3 Authority Key Identifier:
                keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:46:b9:74:b9:1d:c2:2d:d2:23:bf:6c:f9:37:1a:fd:55:73:
         9f:c4:fb:aa:40:bc:3c:6f:44:3b:40:8a:72:d1:5a:a0:fe:c6:
         b2:24:08:24:a0:f7:2b:fb:d6:2c:71:1d:7d:ee:01:de:a0:d8:
         ed:27:db:b4:64:25:4c:6e:70:3b:57:30:7c:aa:60:80:b9:c1:
         d6:ed:16:1b:ea:cf:bc:6a:fd:69:d0:d0:44:e8:70:cb:ad:d2:
         20:8d:07:26:c3:1d:ba:f2:e7:b2:c1:80:d6:cc:3f:19:72:9b:
         f5:07:bb:f1:af:37:c3:ed:d5:18:01:97:20:87:15:a2:ef:4b:
         ae:6d:5c:fe:bf:79:1b:df:7f:b5:04:ff:fa:be:d7:a5:c4:ca:
         9d:63:6a:c4:3a:e0:86:46:7c:b9:bc:33:d8:09:7a:e6:f9:68:
         d2:5f:c3:ef:d3:33:fd:0c:2c:81:80:b1:59:85:3f:bd:cd:5f:
         00:d7:77:b0:b4:2d:b0:67:b9:99:59:64:32:79:b4:12:7d:fb:
         91:96:ba:4a:1b:61:92:ac:71:a1:17:ca:c1:10:39:fc:38:82:
         84:c3:00:6e:26:f1:10:ac:67:3c:76:f0:0c:45:73:50:5a:b0:
         c1:fc:25:67:d7:a1:63:f2:f2:5b:e7:d2:28:c8:26:a8:c2:fb:
         52:12:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:51:18 2026 by rpki-client