Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File:                     v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier:          xTfEodQB6LS8SjpvXA/4co7cfIeOX/3fvGEeyCc3/tU=
Subject key identifier:   13:84:50:A4:4E:8D:A4:1B:C6:6A:3D:65:04:0B:A9:24:03:84:8A:40
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer:       /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial:       01A08B319525DB53BCF503EC745A49632E2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number:          1A49
Signing time:             Thu 10 Sep 2026 12:01:17 +0000
Manifest this update:     Thu 10 Sep 2026 12:01:17 +0000
Manifest next update:     Fri 11 Sep 2026 12:01:17 +0000
Files and hashes:         1: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (hash: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI=)
                          2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: P4k1RoZRcNXLanrMwd8Rsos5YnirDbc7vT/qS0lSiHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:31:95:25:db:53:bc:f5:03:ec:74:5a:49:63:2e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
        Validity
            Not Before: Sep 10 12:01:17 2026 GMT
            Not After : Sep 11 12:01:17 2026 GMT
        Subject: CN=138450a44e8da41bc66a3d65040ba92403848a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ac:cd:2f:63:3d:bb:01:73:85:24:69:26:1a:
                    23:d1:0d:5a:9e:62:58:c8:3c:fd:90:7e:05:22:cc:
                    0b:fb:d0:e6:bc:28:60:9b:fc:87:5d:02:82:ac:51:
                    28:b3:66:03:fb:c4:35:f3:f8:6d:b8:5b:af:dc:f1:
                    57:c3:21:c5:f9:00:cb:47:67:56:b4:10:c0:b7:37:
                    39:94:1f:e1:a5:4e:31:8b:ba:8e:50:31:d2:a5:e6:
                    48:a9:b5:f8:7f:03:3f:23:9c:2a:c5:3a:6b:4b:75:
                    44:15:4f:d5:2f:61:aa:66:45:88:75:8c:a8:98:28:
                    22:19:9d:60:e6:d0:ab:d9:c9:7e:25:c4:a4:70:18:
                    b8:00:83:52:63:43:bf:12:1a:3d:09:93:84:0a:a8:
                    76:c3:d2:98:89:29:f7:3e:ac:f0:61:7e:0f:b1:f9:
                    1c:2f:56:21:70:78:65:d4:26:28:5a:a3:ee:95:90:
                    2e:5c:70:e1:20:56:0e:88:96:ad:50:92:31:0a:1a:
                    53:50:f3:88:b3:2f:df:5b:e5:20:b5:87:a8:83:c5:
                    e7:77:e9:7d:cd:73:de:94:75:d7:6f:0f:cd:00:41:
                    3c:cb:10:b5:50:55:21:d0:9e:bf:b5:1b:6a:af:0d:
                    1d:b0:03:d8:ed:5a:9e:c2:3c:03:98:4c:16:53:b4:
                    af:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:84:50:A4:4E:8D:A4:1B:C6:6A:3D:65:04:0B:A9:24:03:84:8A:40
            X509v3 Authority Key Identifier:
                keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0c:d3:f4:97:5b:b9:19:cf:f7:74:11:d4:69:7b:86:28:8a:
         d0:16:b0:a3:27:07:d9:0f:01:72:29:56:d7:51:69:cf:a0:67:
         c9:db:b1:81:2c:69:9c:40:9a:bc:22:bd:ce:a0:c1:c1:4f:01:
         7e:f8:29:4e:6c:5c:a9:78:7e:6a:e7:37:cf:f0:52:61:fb:3b:
         f6:8a:22:ba:8f:56:69:f5:f0:b0:8f:82:00:03:74:f6:18:aa:
         13:06:fe:c8:ac:4e:dd:27:a9:26:6a:1e:b4:38:b8:99:96:bd:
         bd:c9:e2:da:5b:b9:1b:9b:db:15:bd:38:94:8a:20:64:91:f7:
         88:57:57:a6:20:fe:05:1a:3d:56:d2:fa:c9:d2:6c:fd:2d:7e:
         7e:9a:a6:40:10:50:a3:e3:0f:57:75:ca:1a:ee:76:9b:83:6e:
         5c:a2:d5:f0:bf:8a:25:0a:7d:92:2a:14:a4:83:2e:55:8a:e8:
         db:40:55:ae:40:f8:7e:1c:9c:53:09:c5:68:f1:6d:19:b5:81:
         d7:91:4b:6e:53:f1:c3:1d:34:f0:93:b1:60:e1:7f:6e:14:48:
         2a:31:81:6d:b4:87:51:a7:46:73:0c:a6:fe:b7:1b:ba:29:6b:
         c5:9a:42:a3:7e:98:1b:84:c9:41:46:f4:2e:71:4d:70:1b:63:
         c6:fa:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:58 2026 by rpki-client