Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
File:                     v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft (raw, json)
Hash identifier:          JymJepskyJv4jbyWGSrUHzuLNpp6QUhiDlrOYO4jcuw=
Subject key identifier:   6A:69:18:25:DF:B6:17:56:40:30:CB:46:85:AD:2F:07:45:87:BF:9D
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Certificate issuer:       /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial:       01A0D3833866ACC702453A2D8BF2DD4BAD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
Manifest number:          1A7A
Signing time:             Thu 24 Sep 2026 13:03:07 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:07 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:07 +0000
Files and hashes:         1: Flz_OFQsmX-w-Rd12UyQRHMKatw.roa (hash: JA3smf8ytCG+n6SIrvOZ9o06IVKgViJsuYy9wwAuvgw=)
                          2: Iso7UtudzqybI9P-u3N4xN3OFFA.roa (hash: 0IZeZas6NGaEqB4YndDnq080rW0AwifZGEDKnTQjRRg=)
                          3: R-fseu38BXZxWnP0LRUzT06RrV0.roa (hash: WBYn5t2LzQwRk5CEk7ZRIj5Al789B5wx6blN8odTtJA=)
                          4: Ul_Wf7zGibMnBoONOBmC-CbebuE.roa (hash: rHROysQB1FOGTFZPpOKof8CKn+9ezFraJbOm+zE4tGw=)
                          5: iEjKKLRDgJz2LhvN_sxHnJkxBc0.roa (hash: OfSTMvRyldawaL7wcMvycL+8+eQXeUtcB3572S96OXc=)
                          6: k1dO5v20V18ZdNp1zmkc6LIciGg.roa (hash: 438dqyns6emIjrk0QOOi1yUCaMjxkliDFNzKcc/PdRA=)
                          7: v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl (hash: K+26THvmuyLcLr4doMFlpw5TNViP6i93Al1UbCHIgXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:38:66:ac:c7:02:45:3a:2d:8b:f2:dd:4b:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
        Validity
            Not Before: Sep 24 13:03:07 2026 GMT
            Not After : Sep 25 13:03:07 2026 GMT
        Subject: CN=6a691825dfb617564030cb4685ad2f074587bf9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:f4:04:6a:44:c9:18:47:1f:98:9a:18:46:
                    ac:c3:e3:d5:22:33:a2:a0:28:81:47:54:f7:cc:73:
                    1d:f1:85:39:f0:4c:3f:51:c6:a6:03:2d:63:ee:1d:
                    c7:cf:28:03:ea:30:a0:bb:31:22:4a:8d:32:43:8d:
                    2d:bc:10:03:0f:ff:1d:20:db:e7:a6:0d:85:00:15:
                    06:8d:c7:9d:0c:51:aa:4c:8e:98:2b:46:1d:c4:f4:
                    db:ad:b4:49:8c:02:b5:22:6a:84:33:c2:39:6a:62:
                    90:99:0e:03:8f:73:c0:6e:05:a0:d9:77:fd:18:91:
                    b2:9d:db:31:2a:84:d0:46:0f:6a:69:f0:ae:d3:3b:
                    b5:f0:67:ca:c9:d8:33:6a:c3:ac:fe:a3:9a:13:20:
                    b1:c9:64:14:ea:56:e5:b1:ba:b3:4b:a3:7a:67:68:
                    31:88:15:e3:f6:84:ca:cd:a5:77:22:37:4e:8d:0f:
                    d8:62:65:ae:9d:42:55:70:ca:3f:57:54:43:a3:25:
                    54:83:6e:ad:2d:62:b0:08:6f:08:89:88:f7:7d:0a:
                    42:02:e8:c9:31:a9:6b:72:4c:a2:a8:77:e4:55:ac:
                    d3:f8:64:35:e2:a2:ba:eb:07:c9:ab:5b:0e:8d:fc:
                    a9:93:5b:d9:50:8c:c4:e8:70:bd:50:6e:ef:3d:ff:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:69:18:25:DF:B6:17:56:40:30:CB:46:85:AD:2F:07:45:87:BF:9D
            X509v3 Authority Key Identifier:
                keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b7:44:af:b0:b0:c4:cc:db:7d:c5:3f:ec:9a:78:49:29:11:
         f0:02:02:8c:5e:30:e5:d9:67:9a:ee:79:f7:4e:c8:fa:7f:35:
         31:52:90:33:e1:5c:ac:d5:04:21:bb:0c:a7:e2:d6:00:8b:12:
         88:e0:d9:2b:82:e3:5a:d8:7e:36:bd:ee:ee:df:79:f8:5b:f6:
         54:97:03:50:ef:ae:55:fc:8e:87:36:78:02:18:e8:e2:36:ed:
         66:76:f4:9d:94:3b:26:22:fe:96:4a:f5:d5:fe:b8:7c:55:40:
         d0:86:3f:e3:61:0b:a7:8e:74:4f:86:8b:60:81:83:63:9a:6f:
         56:cf:ff:ef:19:75:d3:33:c3:aa:06:c2:5d:d8:51:59:53:7d:
         60:1a:c9:9b:c9:7b:76:e1:18:d9:cc:53:b8:96:b6:f5:62:9a:
         d1:9c:29:68:89:a2:75:e3:59:c8:04:60:64:18:8d:2e:d1:ae:
         a3:06:97:1a:7f:6a:b0:9b:85:10:5f:5c:ee:67:e8:94:44:3b:
         d5:53:ef:b3:c4:d9:d7:30:d3:75:db:1c:7c:20:b3:06:b0:43:
         ef:ae:4a:16:c7:b8:ec:1e:c4:fe:2f:77:87:e1:43:1a:6c:da:
         78:ee:6d:8d:74:c7:a7:a0:9f:33:a8:c3:26:3b:26:b4:70:78:
         59:aa:84:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:54:06 2026 by rpki-client