Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
File:                     bbMKQaam8hqbLdflhWog1bXv_hw.mft (raw, json)
Hash identifier:          /h9FUlcserO+a3MqbjhcG42K45xC4iciz5QxOx7cdrk=
Subject key identifier:   54:7C:5B:20:89:D0:39:F8:2F:E6:DA:8E:73:DA:CA:F6:7F:74:DF:CC
Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C
Certificate issuer:       /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c
Certificate serial:       01A0DA9651BD381251B0A170469F71E62548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
Manifest number:          02E2
Signing time:             Fri 25 Sep 2026 22:01:19 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:19 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:19 +0000
Files and hashes:         1: HxyJ0VIuo-5QCdby3h9utQPfqr0.roa (hash: y5QqmXh4WKxc3YfWMLRJZuc5ufgudUqOp7HmDc/F9MU=)
                          2: KmzjptRoJ7fRzVMuAbPyGaNlK4U.roa (hash: HTQ4SqU1gbnyzbZ9VFLXWOk6V34twlkajlodOkPujZU=)
                          3: bbMKQaam8hqbLdflhWog1bXv_hw.crl (hash: 49qNqTlVa+vg+YvmH2cRaKxvromuKwP+Q8qxCR2PCN8=)
                          4: dFsfHDXFAVvIPBP5nRJqNmbKuXM.roa (hash: YiThV6hGoAFFghLAZu6/Suaci71yHsUeFK7P3D3y8FQ=)
                          5: gSng8bmqZiw6jb1bs3NjfDpX7wM.roa (hash: rLCdrSPUSpTEnkTQiU5fDOLCEMchnh4Nxl216udf2yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:51:bd:38:12:51:b0:a1:70:46:9f:71:e6:25:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c
        Validity
            Not Before: Sep 25 22:01:19 2026 GMT
            Not After : Sep 26 22:01:19 2026 GMT
        Subject: CN=547c5b2089d039f82fe6da8e73dacaf67f74dfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:27:9d:23:e6:15:01:2d:42:a9:05:8f:45:80:
                    cf:61:d9:67:71:00:bf:db:f2:b0:8b:b1:c5:66:00:
                    cd:27:11:79:32:97:cf:9f:2e:66:fb:4d:51:bf:06:
                    db:f5:b6:57:9d:5f:32:2c:6e:4a:5e:bd:08:47:6a:
                    9d:9e:f5:04:3e:ef:4e:a7:02:93:32:dc:3e:37:5d:
                    d3:d7:5d:06:37:69:61:38:ec:52:15:8f:48:81:99:
                    0e:81:e4:aa:ea:30:91:2f:5f:d9:15:bc:cb:f5:e3:
                    c9:bf:f6:6b:20:9e:a9:7e:9c:9c:43:74:06:3f:cb:
                    19:a8:f1:f1:c9:7c:10:75:cb:8f:e8:00:b2:42:0a:
                    9b:57:3f:92:22:82:54:6b:e0:77:9a:7e:59:cc:d1:
                    66:19:4b:a2:e3:95:be:76:46:4f:0f:a3:26:68:12:
                    7f:4d:22:27:6b:3a:b0:24:f6:b4:12:32:61:f7:a8:
                    cc:18:25:1b:01:50:9d:28:f4:5b:2b:5e:90:50:ec:
                    09:ab:19:80:8d:4f:38:80:fe:8c:5e:5d:87:e4:85:
                    5d:c5:b0:0c:77:9e:67:18:cc:19:28:21:cc:65:1d:
                    2a:42:9b:63:fb:4b:6f:10:7e:74:05:69:fd:34:e6:
                    fe:84:d1:68:d1:57:4e:60:cd:82:8b:d1:f9:aa:02:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7C:5B:20:89:D0:39:F8:2F:E6:DA:8E:73:DA:CA:F6:7F:74:DF:CC
            X509v3 Authority Key Identifier:
                keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:09:97:5f:39:11:27:df:2d:82:cc:d8:c5:66:e2:c8:a9:4b:
         4b:36:64:37:05:a1:54:96:5e:a4:5b:b0:8b:7b:c3:49:40:fc:
         e8:47:e1:2d:3c:3e:e8:23:d1:d2:4b:9c:7e:b2:57:59:10:c6:
         69:80:70:e3:b5:f7:73:54:59:7b:6a:bd:f6:07:06:a5:64:be:
         df:48:b3:31:f3:0b:da:7f:61:12:1c:83:ba:e3:5a:20:d9:94:
         43:42:61:55:dd:f1:86:db:b2:58:1b:dd:a3:ba:a2:e6:56:a0:
         74:56:3a:14:c6:3e:35:11:94:ba:6c:05:60:5e:13:9f:aa:20:
         b3:91:07:84:a2:39:7f:8b:73:15:d2:46:de:21:62:1e:60:ef:
         41:2f:ad:cf:98:0d:89:1b:01:84:78:f8:42:e6:a3:2a:8e:ce:
         46:d7:bb:a7:cc:fd:46:46:b8:65:00:b6:6f:ab:c8:c6:ee:92:
         e7:5b:26:10:0a:ac:3e:1c:4f:48:5f:6d:c9:17:84:cc:af:6a:
         c2:88:02:2f:41:51:70:11:23:75:66:f7:6e:80:01:1e:fd:f9:
         2d:f9:e2:37:17:24:63:d1:5e:58:39:0f:c1:68:e0:47:14:c8:
         eb:f3:9a:45:70:e5:d9:cf:9f:95:c4:03:6d:76:aa:95:b6:7d:
         69:10:d3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:49:26 2026 by rpki-client