Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
File:                     bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json)
Hash identifier:          VsWbRKo4Q8MyVUQByDNZsb/eaoQNfmJB8KTj2qzv2Eo=
Subject key identifier:   FA:72:0E:31:5C:49:8C:DA:17:39:57:95:53:B8:BA:BD:32:B5:2F:9D
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Certificate issuer:       /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial:       01A06E02C61228101BCED344A58261848BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
Manifest number:          1956
Signing time:             Fri 04 Sep 2026 20:01:10 +0000
Manifest this update:     Fri 04 Sep 2026 20:01:10 +0000
Manifest next update:     Sat 05 Sep 2026 20:01:10 +0000
Files and hashes:         1: 55lTuhAI20BHIf-zeSdkeAFaMAg.roa (hash: 6WOjfM5Zbb9/cs9Lu29lst5KqtNeJQ6bLtoEOKJiPTQ=)
                          2: 7NA2LegCljPM-6ilz2F5cnaoBJw.roa (hash: qjOTsmyHG6MOUTIadkX/zmkZDlAkqPzHJKetzF1R3ds=)
                          3: 8YVIY35M5TllhpAug2pC2B2QefM.roa (hash: Oi/klxRNbQSKJj6ZbEuZr26/qsJyDBLFwokzwASVaaE=)
                          4: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=)
                          5: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=)
                          6: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=)
                          7: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=)
                          8: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=)
                          9: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=)
                          10: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=)
                          11: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=)
                          12: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=)
                          13: X3TOXxPWXzlBaEZ6x5xVJV0GN2g.roa (hash: lAKtM50aILYHfyj/dnL/G2PsJlkpfMmR8vppwS3z8KU=)
                          14: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=)
                          15: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: xNNvLAUsdm1yyziEA/BrCofR7YlP9d00YwfJTcRy3VU=)
                          16: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=)
                          17: e9owlvY-NY5qGBDhXZ7WFxeggIc.roa (hash: QGa2zFUrPTeR+OERG79pTeFCAO6qtUgwUx98rjXhrvE=)
                          18: jVvCjidFfK-8IL92OyEeuSlStW0.roa (hash: 95JD6YEa33c2IW5jEGSMsvaX4Vq46tjO1+Oed4maTyw=)
                          19: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=)
                          20: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=)
                          21: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=)
                          22: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:02:c6:12:28:10:1b:ce:d3:44:a5:82:61:84:8b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
        Validity
            Not Before: Sep  4 20:01:10 2026 GMT
            Not After : Sep  5 20:01:10 2026 GMT
        Subject: CN=fa720e315c498cda1739579553b8babd32b52f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c8:d3:ef:d2:b3:82:f9:a9:05:e5:68:a0:99:
                    b0:d3:3b:10:df:91:6b:d6:0a:0e:14:11:a1:8b:ad:
                    2b:db:cd:e3:c0:98:40:fc:3b:1c:5d:74:47:f9:bb:
                    ac:94:f1:1e:c0:f9:ff:08:43:b0:07:39:00:d4:35:
                    c0:d5:4e:c8:12:64:49:33:31:97:68:f4:ca:c9:03:
                    94:9d:38:ae:16:67:d5:a6:d4:17:a2:94:47:b6:6a:
                    c9:20:27:3b:a2:15:bc:1f:21:11:b4:ab:c5:b9:2e:
                    51:a4:d8:58:b3:a7:26:85:c9:1f:d5:d5:b8:43:e8:
                    98:4b:7b:6e:91:70:5d:9c:4a:18:0f:0e:78:03:0a:
                    85:c5:08:e6:23:62:6e:2b:3d:b4:7d:9d:77:9b:23:
                    d3:21:38:2d:25:c5:06:13:7a:cc:f0:3d:99:82:73:
                    af:22:9c:86:72:8f:53:e7:a8:a4:50:76:a5:58:58:
                    de:81:fd:14:96:ea:32:70:83:98:c2:2f:94:b4:af:
                    00:91:90:7a:76:73:db:1b:7b:25:fb:c7:39:a2:6c:
                    82:56:d8:f5:e6:da:06:14:8f:5a:35:50:ae:12:86:
                    65:e5:ca:a9:b8:9e:41:3b:49:ac:73:86:1e:c1:94:
                    d0:0d:e9:25:29:27:97:e0:b6:9e:8e:18:b4:04:b2:
                    05:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:72:0E:31:5C:49:8C:DA:17:39:57:95:53:B8:BA:BD:32:B5:2F:9D
            X509v3 Authority Key Identifier:
                keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:69:45:b6:50:75:34:12:b4:cc:8e:72:70:a4:26:4b:69:4b:
         b3:dd:0c:2f:36:dc:6d:1c:91:c6:3c:79:89:cb:a2:3a:d8:3f:
         b6:94:aa:f6:d5:a7:e9:9f:5a:99:9d:d5:71:13:d5:41:b0:18:
         01:d5:b2:c4:7d:e3:33:1c:b2:61:af:5f:9a:88:d5:13:a0:37:
         b8:38:10:7f:43:5c:9c:bb:ba:cd:36:79:0a:6d:9c:49:a2:a6:
         d6:be:9d:2d:d2:23:43:3f:a0:0f:09:02:3a:cb:d5:f6:f6:dd:
         1f:1a:1b:12:be:f2:8d:93:de:aa:f2:25:d9:df:4d:b0:02:94:
         e4:4a:75:82:b0:9e:27:24:76:41:1e:93:21:f6:b6:8d:fe:6e:
         74:b5:cc:d4:b3:26:64:8b:06:fd:04:48:db:c1:db:a9:92:4a:
         2a:13:a9:03:29:1a:78:2c:9e:a7:a4:0e:4b:bd:74:a3:79:1b:
         e0:5d:7a:e5:17:05:30:d3:5e:34:97:4f:0f:6c:d0:ae:2b:0c:
         8b:79:0a:26:53:46:a0:11:77:52:0c:77:ec:0c:bb:9f:69:df:
         11:f4:3d:a9:36:3f:d2:eb:3d:8e:e0:58:40:79:51:e7:03:42:
         b7:b6:4d:69:d2:00:4a:74:6e:2e:fb:e4:3a:e8:e8:4c:41:90:
         db:b1:77:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuAsYSKBAbztNEpYJhhIvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjYwOTA0MjAwMTEwWhcNMjYwOTA1MjAwMTEwWjAzMTEwLwYDVQQD
EyhmYTcyMGUzMTVjNDk4Y2RhMTczOTU3OTU1M2I4YmFiZDMyYjUyZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MjT79KzgvmpBeVooJmw0zsQ35Fr
1goOFBGhi60r283jwJhA/DscXXRH+buslPEewPn/CEOwBzkA1DXA1U7IEmRJMzGX
aPTKyQOUnTiuFmfVptQXopRHtmrJICc7ohW8HyERtKvFuS5RpNhYs6cmhckf1dW4
Q+iYS3tukXBdnEoYDw54AwqFxQjmI2JuKz20fZ13myPTITgtJcUGE3rM8D2ZgnOv
IpyGco9T56ikUHalWFjegf0UluoycIOYwi+UtK8AkZB6dnPbG3sl+8c5omyCVtj1
5toGFI9aNVCuEoZl5cqpuJ5BO0msc4YewZTQDeklKSeX4Laejhi0BLIFCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpyDjFcSYzaFzlXlVO4ur0ytS+dMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2lFtlB1
NBK0zI5ycKQmS2lLs90MLzbcbRyRxjx5icuiOtg/tpSq9tWn6Z9amZ3VcRPVQbAY
AdWyxH3jMxyyYa9fmojVE6A3uDgQf0NcnLu6zTZ5Cm2cSaKm1r6dLdIjQz+gDwkC
OsvV9vbdHxobEr7yjZPeqvIl2d9NsAKU5Ep1grCeJyR2QR6TIfa2jf5udLXM1LMm
ZIsG/QRI28HbqZJKKhOpAykaeCyep6QOS710o3kb4F165RcFMNNeNJdPD2zQrisM
i3kKJlNGoBF3Ugx37Ay7n2nfEfQ9qTY/0us9juBYQHlR5wNCt7ZNadIASnRuLvvk
OujoTEGQ27F3IQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:27:27 2026 by rpki-client