Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File:                     bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier:          slLSNzNo5ah7fYtci/0sz00S44hLFwiVv4ZEgzddTPw=
Subject key identifier:   C8:82:EC:53:AE:20:85:23:D5:82:62:93:1A:F2:C5:39:9B:27:5F:70
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer:       /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial:       01A08CB21E1A0D68EE5EEAF1B455BDFEB77B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number:          1357
Signing time:             Thu 10 Sep 2026 19:01:18 +0000
Manifest this update:     Thu 10 Sep 2026 19:01:18 +0000
Manifest next update:     Fri 11 Sep 2026 19:01:18 +0000
Files and hashes:         1: YcaaAclAYCZA0bQEtArsD3C2cfU.roa (hash: 7YmlJQnQIkOS++HCP7NR3QXbRt39kMWOkSZeS0idrew=)
                          2: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: 99nrt1RHmcp4y3cO6tE9ZRx200Nowv5ibmkSwhkv4lI=)
                          3: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (hash: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:b2:1e:1a:0d:68:ee:5e:ea:f1:b4:55:bd:fe:b7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
        Validity
            Not Before: Sep 10 19:01:18 2026 GMT
            Not After : Sep 11 19:01:18 2026 GMT
        Subject: CN=c882ec53ae208523d58262931af2c5399b275f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:ee:dc:9f:a3:5f:e5:46:a3:40:c4:36:92:
                    d1:62:c7:01:dc:04:8d:87:c9:81:7a:a4:09:bc:49:
                    83:bf:54:d5:5e:a0:e3:cd:65:cf:d7:72:39:5d:be:
                    1e:35:27:b3:be:74:0c:e1:fb:99:f6:b7:32:94:f7:
                    49:de:ef:1a:e3:87:11:1c:59:4b:7b:0a:32:5a:fe:
                    d6:e1:85:2c:a3:29:b6:8a:26:8d:c8:fa:fe:92:4d:
                    22:fb:a5:5f:53:6e:22:18:38:5f:a9:c5:70:e5:e5:
                    e8:42:d3:1c:a1:b4:c8:c1:5f:6c:40:8e:c0:8b:27:
                    7f:28:50:94:ba:b6:f7:dc:55:f3:7e:97:99:c6:bf:
                    1e:d3:d4:80:73:64:d9:c7:b1:5e:db:8f:f3:9a:d4:
                    8d:f1:56:a8:98:cc:be:cf:4c:69:d8:7d:5f:32:70:
                    0e:1e:f1:bd:f3:42:28:29:b4:3e:aa:ec:7f:f8:ff:
                    66:c0:43:1a:e6:93:69:90:b0:08:4f:58:5a:69:5b:
                    2c:63:d1:57:8d:53:99:6e:03:a6:5b:0b:45:69:21:
                    53:f4:18:55:dc:d5:f7:b0:20:19:ed:3e:d5:f8:ce:
                    9c:26:6c:16:35:08:4a:15:cf:c0:43:6c:84:04:46:
                    1b:68:d0:84:ce:c7:83:51:16:3c:a3:02:b4:58:11:
                    03:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:82:EC:53:AE:20:85:23:D5:82:62:93:1A:F2:C5:39:9B:27:5F:70
            X509v3 Authority Key Identifier:
                keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:3b:fc:ca:1d:17:63:ed:3f:ac:79:96:e6:3d:61:a5:7c:
         ab:6f:68:d0:f5:d3:c6:ba:68:30:06:58:8e:15:ed:ad:ec:db:
         b2:69:d6:a1:42:75:71:21:84:1f:7c:e2:8d:02:2a:44:3f:25:
         b2:3d:bc:4d:02:92:ff:98:0e:67:08:24:be:64:71:e6:e1:54:
         61:d1:52:b8:be:5e:b6:e6:39:2a:64:87:84:3d:9a:9d:de:42:
         cc:4c:eb:09:60:0a:11:50:6a:b3:61:47:07:82:f0:d7:f6:d2:
         20:ac:f1:0a:c8:0d:c9:2b:b6:f0:5c:87:ac:03:d3:f7:4d:0d:
         ac:2b:2e:2c:f8:03:36:18:10:c0:e8:c8:d9:8d:be:30:c3:00:
         39:f4:6e:cc:3d:cb:75:65:4c:23:a8:07:85:4b:b5:59:07:9f:
         93:5a:db:39:4e:c7:ee:23:ec:83:e4:b7:80:40:db:8f:a7:ea:
         fa:0c:22:d3:39:b7:5b:3a:b4:40:7a:f1:63:96:56:40:a1:9f:
         05:c3:8e:a0:07:27:27:f8:ff:6a:2c:87:ab:09:56:07:21:a1:
         59:17:6a:9a:11:20:98:60:4e:21:31:24:7d:90:af:cd:d3:13:
         c1:a4:bb:d8:28:0c:5c:62:31:23:76:03:f2:03:70:a2:3d:66:
         61:03:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:14 2026 by rpki-client