Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File:                     vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier:          8Pz5vy/9kXJT/+KOyxirHe/9yNF1Vrp/YSVLiX0Mt9o=
Subject key identifier:   1E:9E:C9:1F:43:C7:F3:C8:10:FA:73:F8:76:93:8E:6E:65:D2:9E:8D
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer:       /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial:       01A06E035D27AB5ABF47E5172E7F964933B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number:          04CF
Signing time:             Fri 04 Sep 2026 20:01:49 +0000
Manifest this update:     Fri 04 Sep 2026 20:01:49 +0000
Manifest next update:     Sat 05 Sep 2026 20:01:49 +0000
Files and hashes:         1: FKbR9jGxYRX9V8_8o4DRVVGFjPU.roa (hash: Og48h/OvPKZ/MgS2Z6y01qdzTx8n+7C8XDKbughbbnk=)
                          2: OlHHMfPygKkyr7HTvCn4K8p01_U.roa (hash: N9V2kxguErly1WsufOsx/epgV4HMlIpbzSH7yTgCKok=)
                          3: XsF3kqYrpgaSa5NalYy0M03i-cY.roa (hash: kTWWKS//k4z/sGjJu+0LeZP0dfIbCea1JbNwryY8JAo=)
                          4: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: fNhyo5FZYidYwhYMGjifZQgK/7k1wbsD43SNyCEFKX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:03:5d:27:ab:5a:bf:47:e5:17:2e:7f:96:49:33:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
        Validity
            Not Before: Sep  4 20:01:49 2026 GMT
            Not After : Sep  5 20:01:49 2026 GMT
        Subject: CN=1e9ec91f43c7f3c810fa73f876938e6e65d29e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:c7:d0:21:61:83:81:ba:81:4e:0d:fc:48:
                    b5:21:dd:58:c4:36:34:99:a1:83:30:8c:b5:06:b0:
                    8c:c7:63:28:a2:6a:70:39:cf:4a:88:39:40:19:b9:
                    a8:67:3f:ce:d3:2f:11:e3:52:09:16:80:fc:ed:f2:
                    42:03:2c:bf:31:72:9c:a9:09:fb:d9:aa:bc:77:15:
                    0d:60:80:67:01:93:11:b4:d8:ef:08:a3:6c:01:21:
                    ec:53:d2:41:88:2d:f3:55:d2:70:34:80:cd:6d:72:
                    d8:d2:2e:e5:bd:35:17:b9:af:83:41:a8:e2:88:12:
                    27:f4:e2:c6:44:43:78:60:97:21:75:eb:81:dc:bd:
                    52:d0:ac:c9:31:14:87:bd:8d:7e:24:cc:92:34:7a:
                    b9:2b:1c:e7:00:80:28:b3:c0:ea:ff:5c:33:50:47:
                    09:11:0f:d1:9b:ce:24:a0:b4:23:5a:7b:ed:b3:f4:
                    ac:1d:bc:1c:69:2b:3f:65:36:be:7b:00:30:37:b6:
                    1f:f0:1f:8a:57:97:1f:f4:c3:5b:b9:88:d6:02:ba:
                    2f:ad:7e:21:01:07:73:22:15:aa:69:66:21:d9:0f:
                    1f:9c:f4:9b:26:6d:1d:46:a1:e2:35:91:c7:ff:14:
                    6d:7b:e8:25:a5:40:fd:78:58:04:9c:90:fe:52:66:
                    e7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9E:C9:1F:43:C7:F3:C8:10:FA:73:F8:76:93:8E:6E:65:D2:9E:8D
            X509v3 Authority Key Identifier:
                keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:57:0b:80:41:7c:6a:6d:85:ea:92:97:b5:d3:8d:8a:9d:00:
         d9:7c:ec:09:67:59:c7:11:89:df:0b:02:7d:fd:67:fd:ed:92:
         f3:b6:15:fd:06:fa:03:e4:70:c5:54:92:6d:fc:6c:80:3b:5c:
         d6:b8:b1:c8:94:e6:65:72:af:b0:16:e5:5e:7d:4b:a5:74:e2:
         c6:ea:59:d1:34:0f:e4:70:02:6d:55:6f:5a:e9:50:46:74:6d:
         b6:2b:e7:78:00:55:44:fa:e7:ba:6c:a2:47:2c:f6:74:8e:3d:
         83:fb:c1:e5:92:c8:46:44:8d:d6:f9:4d:18:e0:ad:1d:3d:6d:
         27:1d:e9:4f:a2:4a:87:cf:46:d9:43:ac:f3:c2:03:59:fb:95:
         11:26:11:f1:90:5a:ae:d4:7a:2d:44:2e:e3:20:75:ef:cc:8b:
         1e:f6:70:a0:84:59:49:8d:aa:e3:e1:f0:5b:e2:c2:bf:aa:30:
         07:31:c9:4b:7b:a3:d0:c2:d3:f7:34:3d:ab:77:52:4f:e9:6d:
         dc:f9:ee:22:e5:94:8f:57:5a:eb:30:45:15:ca:1f:eb:62:ad:
         45:cf:da:e4:4c:cb:3e:c6:05:09:eb:e3:ac:50:a6:1f:b5:f1:
         7b:e8:d9:0e:ac:68:4b:18:52:5b:43:37:a8:f9:59:3f:c3:1d:
         76:d5:fa:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuA10nq1q/R+UXLn+WSTO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzM3NDdmNzhiZDMyOGQwYWUxYzg5MTcxYjM4MWFhMTkw
MTFhY2UwHhcNMjYwOTA0MjAwMTQ5WhcNMjYwOTA1MjAwMTQ5WjAzMTEwLwYDVQQD
EygxZTllYzkxZjQzYzdmM2M4MTBmYTczZjg3NjkzOGU2ZTY1ZDI5ZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbzH0CFhg4G6gU4N/Ei1Id1YxDY0
maGDMIy1BrCMx2MoompwOc9KiDlAGbmoZz/O0y8R41IJFoD87fJCAyy/MXKcqQn7
2aq8dxUNYIBnAZMRtNjvCKNsASHsU9JBiC3zVdJwNIDNbXLY0i7lvTUXua+DQaji
iBIn9OLGREN4YJchdeuB3L1S0KzJMRSHvY1+JMySNHq5KxznAIAos8Dq/1wzUEcJ
EQ/Rm84koLQjWnvts/SsHbwcaSs/ZTa+ewAwN7Yf8B+KV5cf9MNbuYjWArovrX4h
AQdzIhWqaWYh2Q8fnPSbJm0dRqHiNZHH/xRte+glpUD9eFgEnJD+Umbn0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6eyR9Dx/PIEPpz+HaTjm5l0p6NMB8GA1UdIwQY
MBaAFL1zdH94vTKNCuHIkXGzgaoZARrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hNTU1NTMtMjk3NS00MjQ0LWIyNjAt
NWJkYmY2Zjg0N2Y5LzEvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hNTU1NTMtMjk3NS00MjQ0LWIyNjAtNWJkYmY2Zjg0N2Y5
LzEvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvlcLgEF8
am2F6pKXtdONip0A2XzsCWdZxxGJ3wsCff1n/e2S87YV/Qb6A+RwxVSSbfxsgDtc
1rixyJTmZXKvsBblXn1LpXTixupZ0TQP5HACbVVvWulQRnRttivneABVRPrnumyi
Ryz2dI49g/vB5ZLIRkSN1vlNGOCtHT1tJx3pT6JKh89G2UOs88IDWfuVESYR8ZBa
rtR6LUQu4yB178yLHvZwoIRZSY2q4+HwW+LCv6owBzHJS3uj0MLT9zQ9q3dST+lt
3PnuIuWUj1da6zBFFcof62KtRc/a5EzLPsYFCevjrFCmH7Xxe+jZDqxoSxhSW0M3
qPlZP8MddtX6og==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:01:42 2026 by rpki-client