Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File:                     BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier:          NJgOYgTf1n8RtbLMTcwaM1Do2CPr1X2J3Gp6FybNAAc=
Subject key identifier:   15:59:0A:7D:8D:59:CB:0F:62:72:EF:7B:96:40:66:1E:27:BF:5E:EC
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer:       /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial:       01A0DACD7DF02A7273B5E52BEC0D52D56469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number:          1515
Signing time:             Fri 25 Sep 2026 23:01:35 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:35 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:35 +0000
Files and hashes:         1: 0vww-Z4_zVXHcLMNjJsMQcHXTpc.roa (hash: dOMpJHCv+3Sv1nVkRTJLzmjEZf9LwutR2r+1CGv+lNY=)
                          2: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: Yp5d0WoAPVlJlNeUJZtsJSeLAKXav6BbhPOpZ84KfDw=)
                          3: SiNcv5rEzJRHrI-5CcZKLsJRvo8.roa (hash: 9lI/4TESgDTXpDMmIm3+fdqNLdl35fFEfVNTkxEHqEI=)
                          4: hO6sJjGenFnuYxmlzduMju3aiho.roa (hash: 8vgjyujnab6/ES53s2lNNZgYv3hfnctmecpj5jiZlkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:7d:f0:2a:72:73:b5:e5:2b:ec:0d:52:d5:64:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
        Validity
            Not Before: Sep 25 23:01:35 2026 GMT
            Not After : Sep 26 23:01:35 2026 GMT
        Subject: CN=15590a7d8d59cb0f6272ef7b9640661e27bf5eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:f0:fc:bb:ae:8c:07:76:61:8c:6c:64:b2:
                    24:a6:d9:11:fb:85:ab:2f:87:6a:a1:58:4e:ef:38:
                    4e:90:8f:d6:ea:63:f2:c2:91:93:2d:b7:f4:78:38:
                    05:ea:42:0f:bb:95:d5:7b:7c:2a:41:59:19:89:46:
                    5b:d7:66:26:b4:26:cc:f0:1b:a4:a2:08:e2:b6:4d:
                    43:38:b4:c8:2c:0d:08:81:4e:65:52:58:4e:b5:d2:
                    87:50:1d:dd:2b:2e:39:ea:27:86:6f:a1:ea:46:7a:
                    47:c4:f0:a1:e6:f1:7e:89:65:41:53:21:77:7c:ee:
                    2d:9f:9f:7f:de:42:e5:31:2e:79:f6:8a:38:a7:ac:
                    af:56:b0:9e:8d:94:56:61:44:c8:2d:6f:d0:73:26:
                    8b:c9:08:2e:fe:00:7e:69:47:b5:82:18:55:90:aa:
                    1e:0e:64:33:6a:9c:3c:37:a8:3a:57:1d:62:4a:26:
                    a4:98:a0:0d:9d:5d:56:4d:2f:48:b2:27:22:24:a6:
                    39:21:2d:79:50:16:db:5c:2e:2e:8e:37:69:0e:97:
                    9b:55:81:d4:7a:be:12:a2:e5:00:a7:84:9c:44:6a:
                    9d:71:2d:4e:cd:59:da:9c:36:ba:49:8f:66:36:6d:
                    e6:ca:4d:fa:52:1a:d4:40:6f:76:57:46:06:7a:fc:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:59:0A:7D:8D:59:CB:0F:62:72:EF:7B:96:40:66:1E:27:BF:5E:EC
            X509v3 Authority Key Identifier:
                keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:b7:c7:45:20:66:3f:95:bd:58:34:3b:17:82:5a:61:b9:
         d2:8d:73:0e:97:84:6a:cb:e9:60:b2:00:3d:05:d2:55:5c:06:
         03:08:d0:37:26:48:50:fc:69:77:f1:cd:78:f0:8d:ca:c9:6e:
         9a:c9:9f:71:53:5a:a0:43:cd:6f:ba:77:a4:f3:4b:db:65:3f:
         38:47:45:9d:3f:5e:b2:32:d2:c4:ae:36:7b:fe:91:61:01:51:
         a4:f2:a7:e0:ee:69:f2:57:12:f0:58:ed:ef:69:26:4c:07:41:
         d7:01:30:64:98:59:56:79:b6:8b:83:69:8f:e5:2c:02:34:1b:
         cb:05:1d:60:9d:e2:49:1e:1c:ce:82:20:6a:ec:a9:77:30:d4:
         71:6b:43:af:a4:73:70:4d:7b:a5:63:a9:37:2c:be:b2:bf:3c:
         c5:9a:58:d9:88:d7:e1:dc:2a:41:3d:0d:cc:7e:54:24:53:b1:
         d5:bb:46:45:ef:4e:8a:f6:02:7c:86:c6:d3:82:50:27:47:47:
         74:3a:5c:ff:e1:c2:26:09:f4:bb:bc:f0:05:c6:ce:6d:d0:2f:
         44:57:8d:5b:48:91:51:b7:ab:ef:7d:d0:ba:45:67:d3:5f:1b:
         79:8e:38:7b:73:df:d9:ff:fa:50:b0:03:78:df:09:5d:99:c5:
         c0:f1:45:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:39:13 2026 by rpki-client