Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File:                     bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier:          Hhy+w4Bh254isUkom5YuPt8Jc1TAQLuMQC08QYM0vj0=
Subject key identifier:   BF:FD:F7:12:22:D5:01:78:77:63:45:1E:57:E1:6F:46:28:BD:AF:91
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer:       /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial:       01A0DF4E922270CE5D7FFD5E3B2481AB0BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number:          1A9C
Signing time:             Sat 26 Sep 2026 20:01:03 +0000
Manifest this update:     Sat 26 Sep 2026 20:01:03 +0000
Manifest next update:     Sun 27 Sep 2026 20:01:03 +0000
Files and hashes:         1: 328obmvXVWbvAMop_HfnB4VBuFY.roa (hash: A+vzGJG6ZYLioHt2aiC6BoYmTu3H+L0hP4qvDiW+fN4=)
                          2: InqWS5rTHtoJHqAAMNFNS-6YNzU.roa (hash: PCgwCy8zvVIhGv1SDbFVEmkSMCsbV4aCFlf6s9OR4Ns=)
                          3: JR2M09GCpZW9QLiWPV5Nh4Xzi2Y.roa (hash: oLtprbGhXfon2wItL/gqD1O+okJBDODvKqWcSysscUY=)
                          4: NWHW5q_qhg6SlW3OG9l3k3r4P3w.roa (hash: y/S2uulJMpPFuOlueA/dlGtJQcnVeWIduCeRXiRzsbs=)
                          5: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: u+wUf1RydbbzJfdNzt1abZEN1mpAaTK1I7as5Wmu2QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:4e:92:22:70:ce:5d:7f:fd:5e:3b:24:81:ab:0b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
        Validity
            Not Before: Sep 26 20:01:03 2026 GMT
            Not After : Sep 27 20:01:03 2026 GMT
        Subject: CN=bffdf71222d501787763451e57e16f4628bdaf91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:eb:92:dd:d6:5b:01:4a:af:62:45:bd:c1:47:
                    af:3c:be:f2:a2:0c:c5:9b:a0:2c:85:92:42:52:10:
                    09:f4:02:91:2f:75:f3:db:53:c6:18:21:e1:c5:b3:
                    eb:13:53:b7:4d:3a:f8:f9:fa:01:16:85:fc:3a:78:
                    04:04:d4:2a:61:fd:4c:1d:5d:48:b9:ce:b4:86:38:
                    71:49:a1:de:78:0c:9c:5f:dd:d6:84:b1:06:7f:b2:
                    15:bb:e6:e5:99:24:c9:83:e0:07:7a:0c:06:2d:33:
                    16:fe:de:a8:f5:05:e4:e2:a3:61:0c:1c:12:48:55:
                    56:c3:39:bc:16:d1:88:57:aa:5a:20:cf:77:f5:a0:
                    46:44:59:98:23:bb:e2:aa:19:c8:9f:7f:57:a0:6c:
                    34:35:71:a0:9a:85:e0:d4:31:f8:a3:11:2d:9a:3f:
                    a1:c5:33:bc:f3:cd:ff:8f:30:da:4d:cd:e4:d1:79:
                    30:f4:57:67:d6:22:9d:cd:03:f6:bc:f9:e3:ad:62:
                    97:9f:fe:ca:19:ff:85:a8:08:35:13:6c:e0:a9:9c:
                    bb:4f:7e:f6:2e:0b:99:ae:22:56:0c:98:05:cb:4c:
                    a6:6d:cf:3e:fd:c4:1e:be:19:56:15:26:54:f3:ff:
                    fe:cd:5e:13:84:66:91:dc:86:6b:f0:fc:d2:3b:aa:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FD:F7:12:22:D5:01:78:77:63:45:1E:57:E1:6F:46:28:BD:AF:91
            X509v3 Authority Key Identifier:
                keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:33:7e:c6:5f:19:e1:99:06:3a:3b:0f:0c:68:0b:ec:72:2f:
         6a:31:b9:a4:8b:f9:e0:18:80:b7:28:be:1d:e2:95:4e:35:c1:
         44:bf:49:e2:17:ac:08:6e:a4:51:8f:9c:cf:82:79:90:44:7a:
         2e:c2:a4:c9:13:4f:d2:0c:52:fb:b3:66:68:40:c9:20:a6:ee:
         0a:a7:fa:b6:dc:45:4c:84:bb:66:30:ea:c4:51:49:6d:13:a1:
         5d:89:ba:ad:18:cd:84:9f:4b:74:d1:5e:4f:13:62:40:bb:8f:
         04:56:af:2e:44:6b:44:57:16:6e:81:78:4d:0d:71:47:90:5b:
         21:6a:75:d0:3a:e6:46:a2:f9:29:26:c2:b2:8a:fb:2f:ad:20:
         85:69:84:7d:11:b8:7c:4d:ec:56:38:53:30:6f:d5:86:fe:ac:
         74:b4:f5:85:a7:42:79:f6:57:f5:3a:0f:5a:92:04:e8:35:d4:
         42:03:48:da:62:0b:bd:52:ee:47:f3:ff:b2:06:9d:df:7b:59:
         d9:59:58:e0:56:cf:5a:e4:f6:07:f4:14:3b:76:7a:60:c9:3f:
         ae:a4:04:48:54:48:d1:e8:6f:82:5f:0f:98:74:4e:2b:ed:6b:
         7f:da:a2:8f:c5:0f:c1:a2:af:25:10:5f:4c:3b:ba:50:af:7d:
         b4:09:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:38:23 2026 by rpki-client