Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File:                     BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier:          OCuH5o/9HYvVAd5KwgRUMSD/GFnf9jtOv9wIH5Fni10=
Subject key identifier:   D5:CE:43:2C:08:25:65:55:72:07:7B:4E:72:A0:06:EE:07:BD:B5:4C
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer:       /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial:       01A0D8042D3FC9FF714A074890DB13700C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number:          0EE2
Signing time:             Fri 25 Sep 2026 10:02:27 +0000
Manifest this update:     Fri 25 Sep 2026 10:02:27 +0000
Manifest next update:     Sat 26 Sep 2026 10:02:27 +0000
Files and hashes:         1: 45t3yBh1QkkCQ3U2Lwzzt7BRayM.roa (hash: d6WwjZBpQCRxWZzokGkzuderHNJolsyulL/wicrO6Tw=)
                          2: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: dUxXK+C43FH1SVo9N1aJqBS2PxBLzDqlt/4bhn3D+qE=)
                          3: LdnRVTGcUO5Stvhmskc32iutcnE.roa (hash: EPUZRPaZar98ym68mGtV4ZY5AaOVjRoRsebXdabpj34=)
                          4: XlCgZEQtVF7G71WdIl4EzNS7Lzo.roa (hash: Q89IbDaHkgVrzxhEWpL8DLyPx2riYy2sMNY2wQh+q2g=)
                          5: nq2vgJvSem4PKMISVU4vmEDIdaQ.roa (hash: uDPumA2EL1edDP2t0HOnV6D5xvkTbT35PnhW/JZNRRU=)
                          6: z0nXWSkz_JLKLHJCkKA9U67FdGc.roa (hash: xae8oodNdDVC2s/8+DAGGBsXdSpIKWBcfhO7zRcgtWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:2d:3f:c9:ff:71:4a:07:48:90:db:13:70:0c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
        Validity
            Not Before: Sep 25 10:02:27 2026 GMT
            Not After : Sep 26 10:02:27 2026 GMT
        Subject: CN=d5ce432c0825655572077b4e72a006ee07bdb54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:b4:f4:11:8d:f7:5f:c0:6f:fb:f1:e9:9d:
                    16:21:2f:65:c3:fa:39:c0:66:cd:28:4b:54:34:ea:
                    fb:66:9d:2a:22:ed:3c:27:94:a7:41:f2:1c:4d:9d:
                    64:65:eb:a6:4a:b4:c6:66:af:16:4f:c3:60:40:8a:
                    08:8a:80:c5:96:c1:18:e6:17:bd:73:6a:99:ae:cd:
                    6e:bb:a4:fa:17:7d:9d:4b:7d:14:c8:70:8c:36:ec:
                    c8:26:0f:7e:a2:11:c5:6a:bb:6d:b2:69:f6:fb:d9:
                    c3:2e:67:71:55:76:5d:8c:b8:83:e8:12:b5:62:d4:
                    02:cf:4f:b9:03:5d:09:94:81:79:16:f9:9d:ec:5b:
                    f3:a4:f2:3e:21:6f:f7:69:93:65:bb:fb:b1:35:4f:
                    d3:ef:11:ae:d9:a4:8b:08:c4:42:1a:f5:0b:72:3f:
                    cf:b4:e0:8b:7b:de:8f:63:61:dc:11:27:51:08:05:
                    cf:14:32:6a:82:81:31:5a:46:6c:9e:af:f7:a0:1f:
                    5a:73:f9:59:30:0d:fc:ac:5b:e3:ff:36:08:c3:bb:
                    92:48:65:4d:3e:a2:d4:de:77:6f:25:8e:71:7a:17:
                    15:6b:49:46:1c:71:f7:28:54:c7:3d:09:d1:c7:f3:
                    59:24:9d:cf:b2:b9:e7:24:27:a6:28:a3:2d:5a:bd:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CE:43:2C:08:25:65:55:72:07:7B:4E:72:A0:06:EE:07:BD:B5:4C
            X509v3 Authority Key Identifier:
                keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ae:af:a7:ce:53:1b:c4:73:64:2a:fa:43:e3:5d:0c:48:5e:
         28:9b:da:da:eb:6f:55:3c:27:3d:10:ee:4d:85:cb:74:4d:80:
         31:81:01:80:0d:a6:43:12:3f:c5:15:b1:9a:b7:92:25:7a:5a:
         e9:99:18:0b:c9:c2:d4:90:c3:86:1a:4f:df:83:09:7f:54:94:
         1c:6a:b2:63:95:cb:85:4d:16:e0:11:a6:c7:d1:fe:24:62:a2:
         d2:80:da:b4:56:65:fd:a8:7a:07:de:c0:00:60:b5:71:27:a9:
         c2:7d:fc:d8:0f:10:14:0c:ff:ae:4a:ac:43:e9:cd:51:a3:69:
         02:d2:24:d1:c0:14:88:da:11:92:70:8a:d0:94:14:47:12:13:
         14:7d:8e:af:11:72:c8:5f:57:48:42:ce:ee:b6:ca:66:92:37:
         13:0c:98:1e:e8:d2:b0:0d:90:ad:21:ad:17:27:43:f0:74:86:
         d4:4f:45:e1:7e:a3:9b:5e:9f:88:b3:e7:a3:3e:72:8d:90:25:
         00:a6:3a:42:a1:43:26:78:b5:ac:a6:3d:26:8b:46:29:76:9b:
         7a:00:42:5f:4e:25:79:8c:48:90:2e:23:3d:f3:e4:cc:d2:6c:
         d4:e4:f2:1b:cf:b1:a8:02:9c:8b:d4:a1:7b:22:f6:0b:42:7a:
         6b:97:35:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:52:46 2026 by rpki-client