Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File:                     bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier:          H2vIUpr2SQ2aSMXOyEzDfnHPPfhnqr3Q/7ch918L3T0=
Subject key identifier:   E5:02:27:A6:78:A6:81:7B:94:48:E4:57:8B:7F:D9:C4:0A:87:9C:F5
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer:       /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial:       01A1705CFD8A6CD726153D44FD9EBD849889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number:          0E42
Signing time:             Sun 25 Oct 2026 00:01:44 +0000
Manifest this update:     Sun 25 Oct 2026 00:01:44 +0000
Manifest next update:     Mon 26 Oct 2026 00:01:44 +0000
Files and hashes:         1: AjNaf0XOBf9riDrcOuPKw561NDY.roa (hash: 9pTroZDCDfvNGpo8ht2rx0lIgrrP6ysux19y/1KOqeE=)
                          2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: 8jA/cgSM7+KFS6dECu6p8UxzzbhrOHONvFEMavNHCkw=)
                          3: ozNQN_NZFecNhoYlp5UO91vuHOs.roa (hash: nM7bo7W7c3uRHayjYiquSs/XgOtGpwXa6S0K0J9q4Zw=)
                          4: yfDJRZg2skhYgI5YRIWudM4uRkA.roa (hash: kEPU+5FdgdE3UdwWy8pB51bGvVfcgF37Ajrzi1JqLzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:70:5c:fd:8a:6c:d7:26:15:3d:44:fd:9e:bd:84:98:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
        Validity
            Not Before: Oct 25 00:01:44 2026 GMT
            Not After : Oct 26 00:01:44 2026 GMT
        Subject: CN=e50227a678a6817b9448e4578b7fd9c40a879cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:a3:61:60:f5:b7:a5:2a:d7:d9:cd:c3:46:
                    14:18:8a:dc:b2:3e:69:32:a5:7a:04:0b:5a:e6:24:
                    15:50:e0:c8:ba:1e:54:d9:a9:0c:18:e5:e6:3c:04:
                    b0:42:44:c2:20:ed:b2:fe:0a:5e:51:57:50:c6:03:
                    1c:4d:7d:4a:fa:ee:3a:b3:25:53:f2:b6:dd:0d:95:
                    31:ab:c7:c3:9f:e9:59:11:55:37:b1:5e:3b:fb:df:
                    d2:db:95:ec:db:9a:e1:d8:e0:67:35:6a:f1:7c:95:
                    56:77:ec:2d:c6:7d:57:8c:45:3f:e5:a4:63:f5:a6:
                    d1:70:19:7e:f3:c6:4a:0f:13:20:9e:35:ae:4e:fa:
                    10:d5:1f:14:a9:a7:31:69:51:25:04:97:26:72:7a:
                    0b:87:6d:6b:f6:b6:32:60:64:ff:ad:de:3c:e0:24:
                    61:ed:a9:58:c5:75:14:36:17:94:05:3a:29:58:c4:
                    f7:b6:65:62:da:bf:fe:aa:9c:5a:10:c2:b7:57:99:
                    d2:68:fb:0d:8c:59:2c:23:c6:a8:11:18:38:b5:15:
                    4c:88:e2:ae:5d:57:c7:b0:27:d9:fc:ba:3e:dc:f5:
                    5d:b4:05:64:85:72:31:9a:a1:4c:2c:5e:e9:6f:bb:
                    1c:ea:0f:a6:ef:af:0c:9a:cf:c6:a3:97:20:6d:81:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:02:27:A6:78:A6:81:7B:94:48:E4:57:8B:7F:D9:C4:0A:87:9C:F5
            X509v3 Authority Key Identifier:
                keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:ed:1d:31:79:44:77:0f:27:d5:27:c0:ea:01:b8:00:a7:
         9a:e1:d8:97:55:d8:c8:66:92:35:82:49:a8:a6:ab:b5:f1:48:
         84:ba:f1:d0:b1:c6:70:9a:41:10:a5:a9:c4:97:31:c9:56:93:
         98:b1:b7:ab:79:0e:ff:58:d9:cd:e6:77:ca:44:33:b4:ae:e6:
         00:9b:6f:b4:e0:ec:8f:f3:6f:15:11:54:b4:ba:3a:25:d0:b5:
         b4:47:63:8b:8f:70:1a:70:c9:b1:3a:cd:6a:e0:c9:04:b7:3c:
         36:00:23:31:52:af:8a:62:f3:b6:99:b7:48:bf:fb:ea:77:28:
         55:2d:75:94:35:da:1e:65:59:45:45:0c:45:f9:48:10:58:3f:
         9d:e2:14:ea:88:7f:14:9e:c8:d4:67:e5:7d:02:3c:48:f9:32:
         5e:dd:63:b9:b6:2e:54:81:94:98:d4:26:59:9c:9a:b1:1a:0e:
         67:f3:43:de:11:bd:c6:17:2e:b3:e4:5d:98:34:b3:52:c8:96:
         de:c6:f7:e1:67:76:45:76:05:bd:01:78:30:86:41:70:d9:0e:
         c2:b6:63:48:af:c2:1a:0d:41:d6:90:ae:d7:6e:63:fa:bc:7b:
         44:4e:67:84:17:c7:df:25:e3:d7:3c:71:79:52:55:b2:93:6f:
         e2:92:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:07:28 2026 by rpki-client