Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File:                     bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier:          +GayivB9B4bknX73SPae+ZqtdwefF8VdUHs+/PHwGGU=
Subject key identifier:   F4:27:A0:90:05:F7:60:CA:38:8D:60:C0:27:83:2F:CE:D3:0A:50:B7
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer:       /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial:       01A0F0E749AB2EF44D0015B13354AD6FB7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number:          0E89
Signing time:             Wed 30 Sep 2026 06:01:24 +0000
Manifest this update:     Wed 30 Sep 2026 06:01:24 +0000
Manifest next update:     Thu 01 Oct 2026 06:01:24 +0000
Files and hashes:         1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: LkOJqWuYQwjP+9O9HGuc8Mx0ZnoOGqOasMMMVMyeCEY=)
                          2: xedQc8k1ZNFjpdsXA6TYOm-QwAo.roa (hash: 4/kRGVQh8aCzWxXk3+Kdjd95nYFMZaC5eRjEmyP9N4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:e7:49:ab:2e:f4:4d:00:15:b1:33:54:ad:6f:b7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
        Validity
            Not Before: Sep 30 06:01:24 2026 GMT
            Not After : Oct  1 06:01:24 2026 GMT
        Subject: CN=f427a09005f760ca388d60c027832fced30a50b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:41:17:c9:85:d2:12:01:45:c4:a0:34:4d:
                    1d:11:7d:67:7e:f3:dc:29:dd:cb:4d:79:0e:4a:b0:
                    9f:60:c5:73:d9:93:13:bc:a5:04:17:ff:1c:b2:eb:
                    f1:a5:ba:a4:85:92:50:7d:19:27:da:4e:86:30:4e:
                    04:07:fa:cb:d4:b8:93:a5:48:b4:46:b5:f6:22:a6:
                    7b:db:09:81:39:5e:39:88:69:3a:62:5a:fa:64:f0:
                    d1:d9:a6:2f:9b:97:8a:d4:b8:41:93:ec:db:a6:84:
                    19:27:3d:e1:c4:19:7c:68:1f:74:cb:1b:fb:b7:e6:
                    4d:6e:63:1e:27:cf:24:23:64:3b:53:3e:50:49:83:
                    b8:11:9e:80:0f:13:22:8f:59:80:c7:73:25:bd:85:
                    58:ad:03:cc:d2:a6:6f:5d:94:50:f5:1b:e4:c1:cc:
                    fb:c3:9e:61:c9:96:20:bb:df:21:60:03:c9:1f:55:
                    32:82:f3:f6:01:c0:af:11:f6:9f:73:36:46:d7:37:
                    b2:71:fd:e1:a4:87:11:5d:13:18:c2:73:05:40:c1:
                    4e:c8:84:56:bd:10:a6:a1:e2:50:0e:56:b0:25:9b:
                    67:0b:a0:c6:58:cd:44:58:b9:f4:5c:01:44:ae:77:
                    45:2b:6b:f3:c6:f2:d3:93:34:2a:95:1a:60:90:a1:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:A0:90:05:F7:60:CA:38:8D:60:C0:27:83:2F:CE:D3:0A:50:B7
            X509v3 Authority Key Identifier:
                keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f5:0d:35:6b:83:36:43:6f:19:ea:94:8c:54:3e:ba:23:a1:
         ec:36:c2:53:fb:a6:72:a0:d8:e0:cf:fd:4c:46:6e:f3:51:16:
         e6:c4:35:45:df:07:0b:8e:70:de:28:9a:a5:1a:5a:3e:4b:c0:
         e5:86:e2:b8:23:e5:29:6a:bf:75:b8:80:da:f1:d2:14:6d:10:
         33:bd:bc:40:81:99:8e:cc:fe:0a:9d:0f:02:8e:fa:80:51:5c:
         89:55:80:07:25:bf:36:b6:06:6b:e6:f3:3e:1c:01:ba:27:1d:
         f0:da:04:57:f5:02:75:6a:d6:a1:d1:ec:a3:93:53:99:7a:9a:
         70:1b:93:16:44:2f:b5:ef:8d:4b:68:6f:83:c8:f9:a1:08:dc:
         b4:ea:a9:24:6a:68:a1:72:21:a2:8f:1a:9c:a5:a0:21:b1:b4:
         62:39:c3:fc:09:80:5d:72:1e:3c:2c:cf:cd:d6:c5:e2:81:81:
         3c:2d:e3:81:64:aa:8e:ee:9e:5c:2e:15:1d:dd:66:2e:06:5d:
         de:9e:d4:2c:fe:38:9b:67:21:aa:ed:4a:b2:a3:66:a5:5c:d0:
         ed:ee:a8:53:40:7b:a3:c3:dc:f9:67:4a:1a:50:ea:85:20:ad:
         eb:40:a0:44:84:c3:03:be:d1:b5:7d:1d:c3:db:c6:da:53:a5:
         38:ea:71:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:06:35 2026 by rpki-client