Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File:                     bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier:          ovn6wK2Z0n9FgUUKM2ac2NjqFODjpp4QOFe7HI9gSig=
Subject key identifier:   5F:A5:A5:66:61:4D:64:C9:61:50:A9:0D:21:5D:FA:D5:BB:53:DB:79
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer:       /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial:       01A0D5022066C29FDBBCABEA09552CD5A68B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number:          06C9
Signing time:             Thu 24 Sep 2026 20:01:21 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:21 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:21 +0000
Files and hashes:         1: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: DhfWB2CRdvWq8NFkSlqcsU7c8wOSLXp/6rWywzD0tJw=)
                          2: zLQM5UGUZQZaDaXLLIq2Cs9lTG4.roa (hash: lEMGpphC2f316K3X8TeGMMDyruycSyCxjomy+Oc5l4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:20:66:c2:9f:db:bc:ab:ea:09:55:2c:d5:a6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
        Validity
            Not Before: Sep 24 20:01:21 2026 GMT
            Not After : Sep 25 20:01:21 2026 GMT
        Subject: CN=5fa5a566614d64c96150a90d215dfad5bb53db79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:eb:49:b7:49:a4:3a:df:6e:34:0c:df:22:
                    e3:9c:21:5f:eb:36:f7:df:3a:7d:ad:97:3d:22:00:
                    41:80:d7:84:5c:a2:f0:7a:bf:70:1d:4a:8c:84:d2:
                    90:10:fe:44:0f:69:62:88:ce:96:4b:68:31:ad:c0:
                    b1:94:47:2b:d3:d1:14:f8:e8:b7:9f:4d:07:ef:c9:
                    78:7e:3a:46:21:4f:6d:56:8b:9c:18:a9:c4:44:3a:
                    66:b6:3d:1c:b2:d6:d1:24:35:d0:8d:62:10:37:41:
                    30:15:60:b3:53:1e:38:32:34:76:35:8a:5d:4f:02:
                    ee:24:34:39:9e:f6:8f:4f:43:cc:1c:51:9e:36:d1:
                    f0:d4:02:fc:08:3d:18:8f:1c:da:fc:03:ae:a9:f1:
                    7a:52:a0:76:c5:a9:6e:c7:2a:77:31:ee:81:b8:11:
                    c6:cb:cc:7b:01:cc:15:f3:2d:fc:3e:c5:86:ad:4a:
                    39:16:a4:49:5b:ff:d4:67:57:6b:4c:e4:73:7e:4d:
                    0b:f1:9a:6b:df:e5:55:95:31:cb:fe:ec:5e:f0:a0:
                    e1:1b:6f:95:eb:64:49:42:65:c9:db:41:84:e2:ba:
                    ba:f4:99:80:c8:f0:3f:cb:27:49:ae:65:f2:d6:4c:
                    29:44:fa:06:75:81:b8:91:a4:58:c4:f8:17:43:18:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A5:A5:66:61:4D:64:C9:61:50:A9:0D:21:5D:FA:D5:BB:53:DB:79
            X509v3 Authority Key Identifier:
                keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8c:9e:46:41:72:0f:f6:5e:c3:e6:1e:51:07:aa:48:1f:74:
         7a:ca:4c:00:24:55:7c:c7:98:3a:0c:4d:31:d1:37:55:38:d6:
         7d:b1:16:74:c6:01:7d:26:ef:95:75:24:d3:06:00:e5:b9:9f:
         90:db:a6:c1:28:e3:29:75:31:c1:6e:5f:51:36:e3:8a:6e:e6:
         9f:87:c1:fc:06:d0:4d:13:58:75:dc:65:d3:91:20:de:04:ff:
         4e:e8:5f:47:b2:8b:37:33:66:42:bb:6e:23:d6:75:94:f2:01:
         51:98:59:4a:b0:27:6a:de:d3:22:3c:fa:ef:cd:b8:58:c8:1c:
         c9:0c:7c:91:47:b7:2f:fd:68:6c:21:26:57:4f:b0:cc:bd:af:
         37:85:4a:c1:c6:4c:5e:ea:2b:39:d0:70:cd:26:9a:cd:df:72:
         4c:cc:79:2b:29:6e:77:44:12:e7:fe:a9:86:8d:3c:58:cc:81:
         fd:2d:7c:3d:ae:80:1d:c2:f6:00:1e:1d:c6:dc:c9:9c:75:6e:
         e8:01:83:60:c2:d6:40:a3:9f:7c:ab:1c:58:bf:6a:2d:f2:05:
         d7:c5:5c:67:da:3f:55:03:b6:22:e3:ce:c7:ef:00:d7:ca:7d:
         fa:ed:7d:64:a5:b2:3a:1d:5b:84:77:c6:6f:ff:47:d1:51:b0:
         2a:53:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:05:02 2026 by rpki-client