Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File:                     v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier:          X3GmkkvehTvtYagUPbLhm9gWFqziKrxfbR2evsJr6ZM=
Subject key identifier:   00:BB:93:1B:11:63:B8:47:BB:06:F9:46:3B:5F:DE:9B:67:73:E0:EF
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer:       /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial:       01A06E39ADA03A817EAB28390FA919EEC0CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number:          16CC
Signing time:             Fri 04 Sep 2026 21:01:08 +0000
Manifest this update:     Fri 04 Sep 2026 21:01:08 +0000
Manifest next update:     Sat 05 Sep 2026 21:01:08 +0000
Files and hashes:         1: VynjIVEwblB9H_BmRl1ljWkeWpM.roa (hash: gHCjOMq63YurjqMkoulfc5r5daPJGcP7T3NAkcF7UQo=)
                          2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: xdU3gjLmHgZG+nfA1HjbGNBNDqn0wB60pbnfKLr1HTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:ad:a0:3a:81:7e:ab:28:39:0f:a9:19:ee:c0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
        Validity
            Not Before: Sep  4 21:01:08 2026 GMT
            Not After : Sep  5 21:01:08 2026 GMT
        Subject: CN=00bb931b1163b847bb06f9463b5fde9b6773e0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0a:cf:1f:28:ed:b1:11:40:78:a8:05:01:66:
                    bf:ee:2c:fc:3d:30:cc:ef:7d:8c:af:5c:e0:0d:41:
                    57:ec:5c:8d:3a:4a:a5:16:65:d6:b0:7e:fd:98:98:
                    41:43:44:bb:05:59:2c:98:70:b5:71:48:68:9c:8c:
                    35:e4:ae:95:7b:57:04:19:56:8e:69:56:2d:fe:86:
                    07:b5:1a:f5:9c:52:23:f0:8d:8f:5f:49:78:fc:11:
                    c8:77:0f:1e:13:a9:22:25:fd:40:4c:83:4c:64:a5:
                    de:46:36:ed:62:c5:70:e4:ab:78:22:cf:18:cb:b2:
                    34:a9:cb:e6:ed:c0:7e:92:6b:9e:ed:ad:f0:a3:60:
                    f6:2c:2b:6b:da:25:e8:49:00:83:ff:48:ab:47:16:
                    ab:8c:67:5c:c9:f3:91:dc:76:1d:4e:6d:c9:7a:fb:
                    44:67:03:f0:16:45:ba:2d:8d:c2:29:43:4a:64:d5:
                    ce:3c:f9:90:c1:25:98:91:4b:99:c2:f2:a3:45:26:
                    55:17:de:05:bf:42:a2:da:d7:18:96:89:5d:d2:64:
                    f3:9f:d1:1f:64:8f:b9:f0:bb:71:b6:98:98:97:eb:
                    ef:83:dc:ae:7f:d5:6e:ad:54:8e:32:a4:d7:03:7a:
                    f6:71:22:8b:12:e3:93:7c:94:6e:26:32:bf:12:db:
                    69:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BB:93:1B:11:63:B8:47:BB:06:F9:46:3B:5F:DE:9B:67:73:E0:EF
            X509v3 Authority Key Identifier:
                keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:38:6f:75:6f:0a:7b:9d:fe:f6:a9:6a:96:40:6a:61:85:69:
         d4:b6:54:fa:59:ca:e5:6b:4f:66:78:6a:34:59:1e:44:6a:57:
         19:c3:e1:21:3e:26:34:b2:4b:bc:a0:f3:5a:de:f8:96:5f:31:
         5f:0b:63:23:7e:d4:b8:33:0e:2e:7b:df:26:fd:86:4f:d6:26:
         fa:04:89:fb:3b:44:a0:80:89:ab:0d:54:7d:eb:8d:bc:fd:91:
         0d:ea:cd:08:25:e0:9d:92:a5:97:8e:8b:2a:5b:ef:d0:86:4d:
         a1:53:80:7d:14:94:3e:35:7d:74:42:d9:f7:b3:7d:35:65:a5:
         3a:3e:43:4b:31:f2:68:43:ef:7e:da:3e:ff:0c:88:ef:66:44:
         c7:9a:97:3a:0a:4a:73:47:7d:ed:ad:5f:a8:c5:d1:ad:a4:4a:
         ce:7d:71:f5:1e:73:54:3b:f7:54:1f:15:dd:2f:c3:ea:da:06:
         f9:dc:b1:a1:54:91:74:35:2b:4f:0a:59:4d:aa:10:06:49:57:
         1a:d9:8f:fa:62:96:e4:54:76:5c:da:7e:d5:85:90:21:6b:ad:
         0c:4b:36:ea:49:b1:78:6a:90:6f:d6:b8:e5:e5:0d:db:a0:f0:
         49:0c:b7:5e:5d:b0:05:d0:e5:78:15:f4:a1:90:7c:6b:95:67:
         2e:52:18:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:11:54 2026 by rpki-client