Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File:                     v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier:          rAvgGEQ0FeZMooOGoL6pRyLnqq+an6Qth7ubGrfYoPg=
Subject key identifier:   94:96:91:0A:CC:CE:70:01:CF:21:A1:AB:3C:93:C2:B7:1B:87:A9:44
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer:       /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial:       01A08A1EEA66CAAEB746A151D6B497936613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number:          1222
Signing time:             Thu 10 Sep 2026 07:01:16 +0000
Manifest this update:     Thu 10 Sep 2026 07:01:16 +0000
Manifest next update:     Fri 11 Sep 2026 07:01:16 +0000
Files and hashes:         1: hRhNZPtmJg0KwdjuoZkk93sBP2c.roa (hash: Iux9M/ga92AaPnB9SKUAzQYgctGbOPAarQ3+UfPCjro=)
                          2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: de17UFuuV3areagEFqRF6TKlqqvxT7UrE9Gxqk77LZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1e:ea:66:ca:ae:b7:46:a1:51:d6:b4:97:93:66:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
        Validity
            Not Before: Sep 10 07:01:16 2026 GMT
            Not After : Sep 11 07:01:16 2026 GMT
        Subject: CN=9496910accce7001cf21a1ab3c93c2b71b87a944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:6c:eb:9d:a1:ee:37:ef:0e:65:b1:b1:26:
                    f3:e8:a3:b8:53:da:92:e6:06:48:c8:1f:f3:ef:67:
                    e7:50:69:0b:f1:a4:d9:ee:66:04:06:55:14:14:4d:
                    eb:46:42:07:05:4a:f6:c1:4a:45:a5:06:08:fb:7b:
                    fd:c8:e7:3d:c5:7f:cf:b1:37:24:b3:e1:e4:67:20:
                    1c:2f:13:b9:fe:07:f2:a4:41:14:25:30:f8:21:51:
                    c7:66:ec:94:2d:53:9f:80:ee:bc:73:ac:b6:1d:45:
                    e3:fe:a1:b1:04:4b:fe:24:c7:4d:f1:d3:cf:19:45:
                    b3:f9:da:a2:b9:c3:d2:80:17:32:ec:d3:a5:42:92:
                    f9:fd:4e:20:ce:2b:29:13:b2:cf:e1:f2:f9:22:81:
                    0e:d8:b6:0f:3a:ea:3e:7c:2e:90:be:41:aa:60:52:
                    cb:09:64:4b:85:e2:b1:25:b2:15:74:5f:e9:04:f7:
                    c6:17:f2:8d:7d:bb:56:9a:6a:c5:d9:ae:64:29:bb:
                    e6:e7:d5:b4:cc:88:9a:45:02:69:7a:89:fc:e6:32:
                    5e:ed:65:93:f7:86:d3:a3:49:af:17:4d:c9:ae:60:
                    3e:23:22:a3:6c:39:5c:13:9b:0c:ab:61:26:47:5d:
                    28:e7:fc:4f:27:4b:a5:d1:c7:8d:e3:6f:94:79:f3:
                    ed:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:96:91:0A:CC:CE:70:01:CF:21:A1:AB:3C:93:C2:B7:1B:87:A9:44
            X509v3 Authority Key Identifier:
                keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:62:92:20:de:d9:77:4a:28:8d:29:fb:8c:ea:15:7d:48:44:
         90:6e:eb:ad:90:d9:22:b9:f3:ef:44:fc:dc:e8:1e:21:3e:76:
         92:e9:32:a7:c8:46:1a:a0:92:dd:4e:9b:85:da:dc:b4:2b:78:
         2a:08:14:73:91:3c:78:a3:44:de:36:ad:b5:3e:62:9c:0d:9a:
         ab:fb:18:97:dd:15:5a:ec:4b:0b:b4:0c:5f:50:fb:df:7f:0f:
         06:26:2b:db:a2:80:ec:1b:19:04:51:cf:06:e1:5f:f7:0e:a0:
         14:8f:97:25:e9:6a:61:12:69:ee:4f:59:ac:4f:10:02:3d:b6:
         2e:58:9f:c1:d5:3a:da:ab:ed:a3:e0:52:d4:c2:87:99:73:1c:
         cf:20:72:f0:f4:9e:48:b4:b0:27:85:6e:41:76:90:67:0e:67:
         37:0f:cc:dc:43:90:72:ef:d7:49:9c:18:90:ca:1f:86:3b:b8:
         de:b9:53:6f:91:f5:ad:a9:5f:dd:95:d2:e7:a0:92:ba:58:b2:
         07:52:71:b5:09:0d:12:04:a5:cd:77:22:ef:1d:4c:5d:a4:4b:
         45:53:53:2b:07:6d:2d:10:ff:ab:70:4d:91:fc:f7:7a:87:de:
         ac:14:ea:3e:cb:d5:3e:3d:6d:53:0a:2a:3d:d0:0d:bd:e6:b4:
         6d:30:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:26:25 2026 by rpki-client