Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
File:                     v-V8w9sYQEcMc6CWBdGH172Vlcs.mft (raw, json)
Hash identifier:          zfot2TfPR5j/eHYV5khsjgbNp3G6HVDfAlj6J3d7Bg8=
Subject key identifier:   83:48:6B:8E:D0:11:40:05:75:55:56:17:71:A3:7B:B9:86:9F:A0:4E
Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
Certificate issuer:       /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Certificate serial:       01A0E3622E1A8843E2D66968AD9024892E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
Manifest number:          1A78
Signing time:             Sun 27 Sep 2026 15:00:57 +0000
Manifest this update:     Sun 27 Sep 2026 15:00:57 +0000
Manifest next update:     Mon 28 Sep 2026 15:00:57 +0000
Files and hashes:         1: 2ikB92Z1YZga53T_5TgPbCYNO2U.roa (hash: 6LYS7/XU1c9VFgwkPm/Cq36EgEjl8++/LJln5tJD5X8=)
                          2: v-V8w9sYQEcMc6CWBdGH172Vlcs.crl (hash: IpOaM2WO1EZGDnXp8ZrOStKZk8bknqLJLnnhKkb0PVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:62:2e:1a:88:43:e2:d6:69:68:ad:90:24:89:2e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
        Validity
            Not Before: Sep 27 15:00:57 2026 GMT
            Not After : Sep 28 15:00:57 2026 GMT
        Subject: CN=83486b8ed01140057555561771a37bb9869fa04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:85:1a:f2:a7:07:af:ba:d7:51:0c:82:b5:
                    90:73:af:53:5d:d7:c8:bb:58:66:eb:70:78:09:66:
                    78:79:c9:ff:a8:d9:e6:72:fa:b3:a7:46:51:9e:95:
                    89:06:06:32:02:4b:95:cd:51:3e:ac:18:f5:0b:83:
                    1f:f3:59:6d:c2:5e:8b:b2:2e:87:a2:57:66:5b:b5:
                    59:db:44:f7:0d:25:9f:40:73:7b:0f:fa:93:da:9c:
                    60:9d:12:1a:e8:17:1c:dc:78:3d:fa:b3:ec:ad:fa:
                    73:5a:fb:0d:0a:07:42:ed:bc:9a:dd:a1:6e:33:01:
                    cc:fa:7a:ef:5b:77:1d:9e:8f:9c:e3:18:0e:79:96:
                    65:13:ad:95:05:27:f9:ae:34:c7:7d:28:b4:f5:55:
                    c7:dc:0d:e8:34:0b:57:0c:a8:c0:1a:a0:56:28:29:
                    c3:a9:7a:4c:b7:6b:c7:d8:5c:c5:da:c9:7f:2e:09:
                    69:44:69:47:c3:59:1a:9b:37:52:90:d1:15:30:df:
                    fa:d4:8d:11:1f:00:0f:25:0e:e6:73:40:ce:1b:b8:
                    a6:c5:a6:b4:df:e8:c8:22:93:00:9a:03:80:60:b2:
                    02:8a:17:eb:b0:bd:fd:a6:e1:3c:5c:65:89:a9:61:
                    ab:3d:17:28:b7:b9:99:aa:e5:a1:c4:17:e2:16:7f:
                    c1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:48:6B:8E:D0:11:40:05:75:55:56:17:71:A3:7B:B9:86:9F:A0:4E
            X509v3 Authority Key Identifier:
                keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:de:b5:e0:51:33:28:3e:a6:97:be:51:e9:9d:07:f4:f3:95:
         f9:4f:04:fb:e0:14:a0:da:a7:9e:19:56:86:4f:0a:b4:bc:76:
         3f:bc:1f:7b:b7:bc:8d:6a:43:a9:54:79:5c:4e:53:78:49:92:
         0e:6b:1d:6e:56:c2:3d:c1:3e:17:51:15:c1:af:74:bb:63:0e:
         56:d8:09:c3:f5:1b:8b:a7:f2:26:4d:2e:ad:64:1c:b6:fb:0c:
         d5:e3:fd:e5:f3:c9:cc:9b:8b:68:96:9d:ec:da:53:77:86:69:
         ba:03:66:3f:d6:16:63:02:02:c8:96:f1:7a:51:b3:6b:86:1e:
         c8:64:b1:2f:01:30:2d:fa:85:71:ab:56:3e:c5:31:8c:d1:c2:
         0d:b8:d1:9b:a9:66:c6:33:3c:9a:68:f1:b4:d5:7a:12:81:bf:
         95:ed:86:eb:b1:2e:fd:34:3a:e8:bb:e3:bb:f9:4b:1c:0a:14:
         8f:90:9c:8b:52:ec:63:a3:8f:e4:ac:e9:26:ed:fb:be:00:03:
         06:99:bd:f6:a4:42:a2:cc:7b:7f:e8:81:d5:4e:88:61:c0:7c:
         4e:93:01:2d:18:00:c5:d3:4d:b9:f7:04:20:75:bd:5b:d0:68:
         27:d1:86:3b:fe:35:df:cb:63:7a:d9:34:98:ad:80:00:af:a7:
         96:01:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:59:37 2026 by rpki-client