Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File:                     B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier:          Up3e6pB/dVRGqQNrSMLSiw2JlW1h2+e2rXHSw8ajM78=
Subject key identifier:   69:FC:79:74:9A:A5:DE:21:4E:33:44:F5:74:7D:1D:CC:53:42:6D:AA
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer:       /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial:       01A0CC35241506F86791C81C4D9322AEEE95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number:          1328
Signing time:             Wed 23 Sep 2026 03:00:29 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:29 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:29 +0000
Files and hashes:         1: 7ctM-nfqVD_f5N8yCIgCf9_quM4.roa (hash: wja6n3HaPhEfG0qesMSoRitaVxtS1y7cOYduGiD52SU=)
                          2: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: d3VoWyQzvxWYs4JP3bnL5K69G5b1qEuLEju0u0jp+Ds=)
                          3: CdGW6i18Yr035U0dUT-j8WcoJNo.roa (hash: Rxp+OcdpmAsKNqBYYDsjZgGcVdgHuz2oel8FBpzkdoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:24:15:06:f8:67:91:c8:1c:4d:93:22:ae:ee:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
        Validity
            Not Before: Sep 23 03:00:29 2026 GMT
            Not After : Sep 24 03:00:29 2026 GMT
        Subject: CN=69fc79749aa5de214e3344f5747d1dcc53426daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:86:2c:1c:a7:a0:c1:89:03:13:ad:4b:ba:da:
                    cf:30:ea:89:b8:68:c3:7c:b5:92:3c:bd:3b:d8:f2:
                    23:02:6b:31:6b:12:e6:7a:91:0f:ca:e5:64:32:7d:
                    2e:80:98:2b:42:30:92:0e:a4:3e:61:6a:fd:94:dc:
                    33:60:cb:94:c8:69:bd:7f:ff:21:5d:ec:41:71:ab:
                    d9:c5:1f:47:be:1e:c3:49:42:cd:77:47:f8:dd:79:
                    04:85:25:de:fa:93:da:3b:38:b1:2d:14:88:fa:7e:
                    4b:ea:1e:ad:db:41:11:ad:04:c1:7e:a1:bd:32:59:
                    87:e3:dc:25:12:42:eb:90:ad:5a:27:be:00:15:f5:
                    1e:4b:d5:94:c2:73:96:4e:43:eb:87:30:39:91:8c:
                    93:35:d5:34:25:33:ab:05:3d:f6:e5:b6:e0:8f:91:
                    62:f7:5c:b2:6b:7f:7c:87:42:60:82:8a:0c:ac:7f:
                    42:c8:a6:d9:97:a9:2a:f7:01:07:76:65:11:e2:91:
                    cb:a2:5e:98:07:45:16:13:0c:c8:6c:05:72:5e:05:
                    a7:7c:71:c8:97:a5:67:9c:6d:1f:76:0e:48:59:22:
                    31:cc:b8:11:f1:f0:f9:db:d6:8d:de:cc:61:68:71:
                    37:bc:19:a9:28:7e:d4:4e:44:ba:3c:83:b3:40:80:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FC:79:74:9A:A5:DE:21:4E:33:44:F5:74:7D:1D:CC:53:42:6D:AA
            X509v3 Authority Key Identifier:
                keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:bd:78:8f:61:c6:39:45:c2:98:0b:bf:10:50:09:d9:de:d1:
         62:26:91:08:69:1a:b7:0e:01:fe:e7:03:99:b4:c0:46:a0:74:
         80:09:e1:d7:9a:f5:07:f4:a3:a5:e7:3b:78:49:6a:4d:2d:65:
         86:98:a4:c8:a5:b1:f5:9d:d5:ca:a0:11:33:7d:13:5a:09:1e:
         7b:f9:72:ca:35:be:a8:d5:9a:76:f7:c6:c9:47:d2:ad:4c:19:
         5a:f8:0c:22:22:29:5a:9c:e4:b1:03:2f:0d:5b:ae:0a:71:e5:
         d4:34:6f:be:7d:85:64:c0:12:76:db:3d:f7:7f:1b:8f:37:af:
         e7:8f:e2:01:1f:1c:22:4e:14:82:e7:d8:33:5b:ca:bd:80:c3:
         20:bd:55:66:69:46:6e:80:8b:77:45:8f:9f:76:34:c0:aa:c4:
         af:24:b2:9b:81:fe:3c:1d:2c:1f:ac:de:75:6f:43:94:74:c7:
         6e:87:25:8b:07:ef:9d:48:e0:49:28:2a:ee:ee:a0:d9:b1:31:
         29:30:95:fb:f6:1c:3f:3b:83:51:42:16:bb:86:24:bd:0a:8f:
         8e:ca:d8:40:4f:e5:88:14:dc:71:b0:04:47:2c:90:67:ed:14:
         1f:60:74:61:26:63:46:1b:d3:b8:d7:65:1e:da:52:7a:83:aa:
         6e:c2:78:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNSQVBvhnkcgcTZMiru6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzQwZDcwMTYwZjMwODY0MjEyOWExYjcyYWU1YWU1MmRi
ODgzYzQwHhcNMjYwOTIzMDMwMDI5WhcNMjYwOTI0MDMwMDI5WjAzMTEwLwYDVQQD
Eyg2OWZjNzk3NDlhYTVkZTIxNGUzMzQ0ZjU3NDdkMWRjYzUzNDI2ZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIYsHKegwYkDE61LutrPMOqJuGjD
fLWSPL072PIjAmsxaxLmepEPyuVkMn0ugJgrQjCSDqQ+YWr9lNwzYMuUyGm9f/8h
XexBcavZxR9Hvh7DSULNd0f43XkEhSXe+pPaOzixLRSI+n5L6h6t20ERrQTBfqG9
MlmH49wlEkLrkK1aJ74AFfUeS9WUwnOWTkPrhzA5kYyTNdU0JTOrBT325bbgj5Fi
91yya398h0JggooMrH9CyKbZl6kq9wEHdmUR4pHLol6YB0UWEwzIbAVyXgWnfHHI
l6VnnG0fdg5IWSIxzLgR8fD529aN3sxhaHE3vBmpKH7UTkS6PIOzQIAgWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn8eXSapd4hTjNE9XR9HcxTQm2qMB8GA1UdIwQY
MBaAFAfEDXAWDzCGQhKaG3KuWuUtuIPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUt
OTdkY2JiMDA4NmUzLzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUtOTdkY2JiMDA4NmUz
LzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWb14j2HG
OUXCmAu/EFAJ2d7RYiaRCGkatw4B/ucDmbTARqB0gAnh15r1B/Sjpec7eElqTS1l
hpikyKWx9Z3VyqARM30TWgkee/lyyjW+qNWadvfGyUfSrUwZWvgMIiIpWpzksQMv
DVuuCnHl1DRvvn2FZMASdts9938bjzev54/iAR8cIk4UgufYM1vKvYDDIL1VZmlG
boCLd0WPn3Y0wKrErySym4H+PB0sH6zedW9DlHTHbocliwfvnUjgSSgq7u6g2bEx
KTCV+/YcPzuDUUIWu4YkvQqPjsrYQE/liBTccbAERyyQZ+0UH2B0YSZjRhvTuNdl
HtpSeoOqbsJ4Vw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:01:46 2026 by rpki-client