Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File:                     vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier:          sJtP3oJtoOt2WdD678h8S6Zf9X91/c7Xy5KuD7V97nI=
Subject key identifier:   BB:35:3D:63:4B:45:F9:F7:B3:03:48:6D:46:17:BD:04:01:1D:06:DB
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer:       /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial:       01A08C437F93AFE4F02BD661DA55B9DC5826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number:          1A48
Signing time:             Thu 10 Sep 2026 17:00:28 +0000
Manifest this update:     Thu 10 Sep 2026 17:00:28 +0000
Manifest next update:     Fri 11 Sep 2026 17:00:28 +0000
Files and hashes:         1: UIEwD2VfFc8CUBWRPi8avZckaik.roa (hash: 8TxOkmSlxviUZm8/elB/UjCoqFq67VcYcIo+38oGuL4=)
                          2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: tEhk/o1/fcIsMDKylueX8fkNWEWR05jUyehxoJqbrkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:43:7f:93:af:e4:f0:2b:d6:61:da:55:b9:dc:58:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
        Validity
            Not Before: Sep 10 17:00:28 2026 GMT
            Not After : Sep 11 17:00:28 2026 GMT
        Subject: CN=bb353d634b45f9f7b303486d4617bd04011d06db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6a:06:bd:da:47:f3:ec:54:2a:60:d3:27:48:
                    e8:5f:d3:f3:ae:ae:26:86:93:0a:89:c2:08:d0:d7:
                    5c:36:27:87:2a:db:f7:7e:2a:81:43:60:cd:a3:d0:
                    21:5d:82:3e:c4:7a:a4:42:68:d2:88:29:b4:70:1b:
                    ba:d3:38:c0:8c:5f:97:d6:9e:92:5e:51:25:2d:78:
                    6d:1c:d4:58:e6:54:fb:11:79:4f:eb:34:1b:fb:f2:
                    88:d1:40:45:a3:3e:5a:2f:5c:43:a2:51:d8:df:0a:
                    f0:36:80:78:8b:33:e4:b4:76:2c:14:7f:37:44:77:
                    22:55:e0:22:b8:4d:d2:99:0d:f5:84:3d:3e:9d:ae:
                    7a:c5:a2:05:73:fc:41:de:f0:b0:69:33:a1:f4:2b:
                    05:c2:03:f1:df:ae:53:0d:29:80:57:28:4d:01:7e:
                    2b:92:9c:1f:c2:fd:81:25:66:cf:9e:c6:55:69:21:
                    5b:09:a6:dc:8f:88:a4:ca:a9:cd:9f:db:8a:7a:40:
                    4d:8d:03:b3:8d:ac:69:f5:56:a6:bf:0f:ac:ce:0e:
                    2c:12:dd:93:67:e5:d2:7a:8e:d7:ad:0d:7a:15:98:
                    1e:4d:9d:64:16:aa:3d:88:4b:c8:28:d3:54:39:fa:
                    0e:34:ae:47:72:5e:35:ca:1c:6a:c8:b3:f8:cf:14:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:35:3D:63:4B:45:F9:F7:B3:03:48:6D:46:17:BD:04:01:1D:06:DB
            X509v3 Authority Key Identifier:
                keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ad:98:6b:c4:67:b0:90:f8:67:5a:f7:bd:07:f0:de:4e:69:
         5e:cd:1e:39:d6:8e:ba:c1:7c:95:00:dd:0d:70:23:4e:c3:aa:
         35:3e:81:c9:5b:5e:6c:11:67:03:04:41:31:90:1e:81:9e:37:
         64:29:52:e3:83:00:71:4d:b5:65:7f:85:3c:b6:65:7b:d9:45:
         2a:2b:5d:91:0b:6b:98:b6:74:1e:9a:f3:6f:16:f2:f3:fe:5e:
         dd:b0:5d:20:b3:16:82:bf:9f:fb:d5:79:66:d8:68:a5:be:e6:
         e5:aa:10:6e:5e:0e:51:b2:f0:6a:4f:0d:3f:ea:1c:62:ca:c4:
         85:09:41:65:61:8b:0a:78:6d:4c:db:64:85:e0:d8:8a:34:06:
         76:2c:21:e1:a8:34:1c:a8:f0:3f:b5:be:3c:ba:cd:7f:b5:8f:
         50:a0:8a:c7:05:15:d2:6c:dc:fa:1e:22:ff:65:17:01:8a:60:
         91:61:6e:bd:06:8d:c2:b5:76:95:35:8b:fb:e7:bc:f8:69:04:
         7e:6f:7d:12:e6:a4:83:5e:c8:97:8e:d6:39:9c:bb:36:3b:36:
         79:f0:de:63:5b:98:06:a1:b7:6e:86:fd:9c:c4:52:20:65:da:
         d3:81:a8:25:7f:3a:f1:35:31:c9:b6:44:41:2c:51:dd:d7:41:
         a7:4c:31:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:49:47 2026 by rpki-client