Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
File:                     BwSD09YvGcCDV0bctyHIgyw7eSY.mft (raw, json)
Hash identifier:          M1Hg5plZ+75lrB+NyX2tmx4NP4CUjMtm5+9uqNpulG4=
Subject key identifier:   B7:0C:5F:7F:5B:4D:34:05:FC:2B:DE:74:B1:41:DF:E8:B9:F3:AA:B3
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Certificate issuer:       /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial:       01A0D4949E902CC56EC185E8B0080C29CBAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
Manifest number:          1605
Signing time:             Thu 24 Sep 2026 18:01:44 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:44 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:44 +0000
Files and hashes:         1: 64ihED3jNS0XaSeuUSeyFg_2bZM.roa (hash: /BfCWPD85MIAwhiqpxCqxKLQ9kOdpzvT6SrltrLnWac=)
                          2: BwSD09YvGcCDV0bctyHIgyw7eSY.crl (hash: O2hjvZLDbd+XKrKYK/6uPvWz/+Q5XqH9y/NNu9XmDlY=)
                          3: U_IVMG7bQBnJVGDLyXYBpWOHB2A.roa (hash: q/ZezPb+HqhfJjhS/MThIaBJugpttbjehqzX0ZM2VRQ=)
                          4: Y28x5IzUI42VFOBvke09KYzr7_U.roa (hash: hhVaUfCtGXTnfymIDdR8UxHA+TnCtopLvOzuoWmW+28=)
                          5: bLR2p3__awZBusTPsasm4YiUzOA.roa (hash: kbNkczFSH4sSNGYoqWKL5gjy1l744pKUP8ECezyOvL0=)
                          6: rJY5TcCiuq04IdP2xEDQUAGD_Vc.roa (hash: Rb/TbhBXQKzjnpKo+twePuPCv4XuT1hR1nvFOWeVlNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:94:9e:90:2c:c5:6e:c1:85:e8:b0:08:0c:29:cb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
        Validity
            Not Before: Sep 24 18:01:44 2026 GMT
            Not After : Sep 25 18:01:44 2026 GMT
        Subject: CN=b70c5f7f5b4d3405fc2bde74b141dfe8b9f3aab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ee:8a:4f:16:f4:be:d9:6b:f4:f0:69:6f:e3:
                    51:15:a1:8f:d7:34:eb:e4:ee:4c:bf:67:9c:87:9d:
                    40:b8:84:75:6e:99:9c:ed:b7:98:a7:80:5c:62:18:
                    bd:fe:aa:8d:50:f2:56:ff:0f:01:e6:3d:69:21:bd:
                    bf:5a:19:96:b2:a3:20:9c:dd:06:37:20:5b:9f:a5:
                    f8:bf:0d:de:35:4a:eb:e2:c8:00:c3:8b:b1:b7:29:
                    f2:95:e4:d6:1d:bc:fc:a8:7a:67:17:e4:66:e8:1f:
                    69:63:d6:f0:e1:72:c3:73:78:9b:3a:51:00:ea:8e:
                    15:e6:be:1a:e1:f9:f9:81:fe:8f:a5:6d:cb:bf:36:
                    db:3f:e7:42:d5:bf:c7:4d:c8:52:df:8b:5a:df:2b:
                    ff:5f:4a:27:be:80:f4:22:ef:0a:d5:ff:49:41:a2:
                    f6:02:f2:62:5c:09:71:a0:58:7a:09:8e:07:d5:9e:
                    89:85:98:40:d0:54:de:66:45:12:4e:78:0f:b4:cb:
                    f4:f3:6b:a6:46:c4:48:61:39:52:8b:4e:67:4f:87:
                    b7:f3:1f:83:f5:40:d7:bc:f0:c6:69:0d:4c:96:4a:
                    1d:0c:33:46:02:01:46:25:6d:92:43:93:1a:a1:42:
                    b6:a1:21:18:8a:f6:b1:15:c2:24:c7:1c:29:b3:7d:
                    f0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0C:5F:7F:5B:4D:34:05:FC:2B:DE:74:B1:41:DF:E8:B9:F3:AA:B3
            X509v3 Authority Key Identifier:
                keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e2:fa:9e:04:a3:18:f3:f6:a6:a4:8f:92:95:01:07:4f:04:
         0b:2a:86:66:e1:71:74:81:76:72:b7:8c:c7:5c:a4:22:ae:4f:
         44:c1:f6:68:3c:6d:ab:cd:1d:d1:06:d3:c6:b8:f6:27:18:24:
         a5:62:78:bc:84:6c:87:99:2a:7e:bf:ca:8b:55:80:9a:52:5b:
         a6:05:25:c8:66:64:97:2e:ae:af:f9:4f:43:b5:56:a8:5b:00:
         31:07:bd:c5:56:e9:b6:26:04:f7:b7:92:ef:6e:af:b5:72:76:
         fb:ae:9b:cf:58:32:1e:58:19:5f:c3:a1:17:1d:21:b6:b5:d4:
         1b:f7:a4:69:36:b0:33:2c:39:b5:23:2d:bb:eb:48:f5:32:62:
         69:87:31:4d:58:5c:50:a9:f2:8b:72:80:d2:36:be:03:0e:d0:
         e9:81:52:ac:38:b2:52:5c:06:a9:26:ef:b0:80:74:ba:a9:53:
         ec:ae:25:34:9a:9b:9f:7a:e9:44:25:39:bc:53:20:44:d6:31:
         d3:5c:8c:29:82:a1:71:c1:da:84:ba:ce:78:d9:a5:f9:29:52:
         d8:1c:a5:e9:2b:40:ff:1e:06:a3:eb:bd:6a:9a:4d:be:d2:27:
         a8:b3:38:58:0b:fb:38:87:c0:bc:df:7d:19:c9:2d:6a:c4:eb:
         07:6e:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:19:39 2026 by rpki-client