Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
File:                     v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft (raw, json)
Hash identifier:          6OYykjmPRtUGsYUU/RhWu/EznU+SFkcQh6T2aNyXNvI=
Subject key identifier:   26:B8:8A:6D:D1:21:D2:40:F2:81:5C:46:B9:D4:3B:E8:5A:FF:92:D5
Authority key identifier: BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
Certificate issuer:       /CN=bfac12dab75d9c09f3120179373e995ae3917911
Certificate serial:       019922FA5B1F08B6BA1C48A83C860E19D5E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
Manifest number:          0259
Signing time:             Sun 07 Sep 2025 07:00:56 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:56 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:56 +0000
Files and hashes:         1: jzM77P9xsYn5MAVakoO0HLR2EkI.roa (hash: h0SxsVCXMkdE1oBd8hWK7t+rP5KlnAbkMvVnkeRV7Cs=)
                          2: v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl (hash: kPOgw+XAriA575TeT6wKuT+obYtMlIGQbAwwwXZD5po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:5b:1f:08:b6:ba:1c:48:a8:3c:86:0e:19:d5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfac12dab75d9c09f3120179373e995ae3917911
        Validity
            Not Before: Sep  7 07:00:56 2025 GMT
            Not After : Sep  8 07:00:56 2025 GMT
        Subject: CN=26b88a6dd121d240f2815c46b9d43be85aff92d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:59:4f:fc:06:c9:cc:5b:81:4a:db:64:fe:
                    28:4e:19:f4:25:88:3c:da:65:f6:be:58:89:22:78:
                    18:5a:4e:5c:41:d6:96:52:11:c3:07:70:61:71:49:
                    98:fb:c2:04:71:d8:71:a4:43:9d:09:ec:98:ca:2c:
                    82:92:95:73:56:6e:13:37:c6:54:5b:1a:8c:da:24:
                    e2:06:24:b5:cf:a4:fe:ba:de:b5:3f:d3:0f:3e:2a:
                    90:8a:d6:eb:97:86:65:99:3a:ac:5f:78:4b:e2:fe:
                    ed:b3:5e:0b:38:b2:65:68:83:6d:68:05:f0:6d:73:
                    0e:ea:d2:ea:b8:cd:8f:a3:c9:b4:ab:03:ff:e4:96:
                    21:59:17:d4:e5:86:57:df:f8:20:51:64:21:df:fd:
                    d2:9b:b4:02:fd:f0:21:dc:56:7c:7d:35:5e:b3:1a:
                    ac:4e:05:86:ac:f1:15:a4:a8:61:b7:83:4d:62:b1:
                    09:a5:b0:f7:68:91:e0:18:4b:2c:a9:ae:09:72:59:
                    0c:76:c8:ac:ce:d1:6d:b1:aa:86:a7:cd:6e:07:ea:
                    d3:fb:14:3d:1f:66:0c:31:09:3f:8f:8b:4e:82:1d:
                    d7:85:37:97:2b:38:f8:48:ab:9c:ed:2d:20:1c:03:
                    29:e2:ef:e6:b2:2e:b5:1e:a8:13:48:0e:bc:3d:66:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B8:8A:6D:D1:21:D2:40:F2:81:5C:46:B9:D4:3B:E8:5A:FF:92:D5
            X509v3 Authority Key Identifier:
                keyid:BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:82:fa:70:1f:93:bc:f5:1e:83:9b:18:d9:47:b7:35:ae:45:
         b4:48:cf:11:d6:f1:94:70:d8:46:92:6a:6a:25:59:26:7a:16:
         15:9b:e0:6d:2b:6e:d4:5c:22:58:2f:d8:65:66:4c:bf:40:08:
         54:82:2c:ee:ee:5a:1f:07:49:f8:5e:4f:16:ea:e7:30:87:5d:
         b2:4f:9b:a2:58:1b:16:e4:25:3f:4e:99:73:56:dd:6d:aa:38:
         21:ce:23:d3:2c:4e:d0:2f:30:98:4c:17:96:48:e6:f0:d9:6b:
         e9:33:3f:fc:fa:b3:5a:ee:ba:9b:58:5c:a0:f2:8e:41:62:aa:
         c8:9d:a6:53:9b:e9:21:9d:4f:dd:47:eb:a6:78:f1:4b:a3:88:
         cc:2d:f6:89:d7:f7:32:6a:f2:8d:fe:2f:8e:f5:ba:7e:f5:00:
         d1:fd:8c:fb:fe:68:0c:6b:ca:99:a0:7a:c0:0f:bb:33:05:47:
         0f:39:e2:e6:10:51:34:d8:ff:b4:72:81:c5:b3:bf:b6:3b:59:
         c2:e4:cc:00:a4:6f:a3:f9:4e:b7:4b:d8:05:78:b7:27:5b:f6:
         47:e6:67:11:17:75:f3:dd:68:3b:0f:b5:22:5b:2d:24:0d:b7:
         ca:37:21:35:98:ad:ea:ba:ec:3b:38:20:b7:f4:57:3d:87:b9:
         ef:ac:d2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:13 2025 by rpki-client