Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
File:                     v-V8w9sYQEcMc6CWBdGH172Vlcs.mft (raw, json)
Hash identifier:          lbcJeyC9R3EVSDAJQHsKrW9P7cVvo5e3tb/hCiKltQ0=
Subject key identifier:   84:EB:23:7D:53:77:9D:4A:26:62:78:82:5F:09:E6:B5:F9:2C:47:FB
Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
Certificate issuer:       /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Certificate serial:       01A0D1FFF0CB712399D996E92C1456BCF061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 06:00:06 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:06 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:06 +0000
Files and hashes:         1: 2ikB92Z1YZga53T_5TgPbCYNO2U.roa (hash: 6LYS7/XU1c9VFgwkPm/Cq36EgEjl8++/LJln5tJD5X8=)
                          2: v-V8w9sYQEcMc6CWBdGH172Vlcs.crl (hash: dMloLDkiDUTUz4jPFIOGJzmvb7YncLSRClRp0KugamM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:ff:f0:cb:71:23:99:d9:96:e9:2c:14:56:bc:f0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
        Validity
            Not Before: Sep 24 06:00:06 2026 GMT
            Not After : Sep 25 06:00:06 2026 GMT
        Subject: CN=84eb237d53779d4a266278825f09e6b5f92c47fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:82:65:99:27:21:59:e5:87:ad:e3:07:e1:
                    af:d0:d7:77:b6:9e:53:22:c8:4d:c5:b4:d9:7f:0a:
                    ba:47:76:f0:ca:44:e4:c7:0f:cc:14:4c:0d:ea:6a:
                    40:56:74:e3:eb:8e:01:74:0e:e4:d9:5f:a7:eb:33:
                    1a:ec:f1:60:27:bb:80:bc:85:63:53:16:c7:b3:01:
                    4a:2a:ab:ac:cd:e0:de:dc:a6:09:f7:20:3f:a9:36:
                    13:61:ef:bd:02:9a:65:66:71:5e:f6:e5:33:24:14:
                    42:0c:bb:f8:d7:ff:92:25:0c:5e:9c:4b:3b:4b:e7:
                    d1:ce:49:56:06:d3:6a:78:b9:64:86:8c:ee:64:41:
                    52:14:ad:2c:73:f6:6d:0f:d7:d4:09:6d:c4:f2:35:
                    e4:2c:14:88:9f:3a:6a:e2:8a:41:fd:21:b3:1a:42:
                    bd:48:0e:fa:07:e0:2d:53:50:e3:3f:82:c4:d4:00:
                    ce:c5:7e:76:4c:95:a0:c5:08:6d:8a:9f:2c:25:e0:
                    a6:d4:3a:0d:5a:76:65:fb:cd:7c:37:ec:9b:e1:33:
                    14:ff:99:55:74:58:75:39:79:29:43:9b:6a:77:17:
                    23:27:73:5c:b8:e8:20:d7:8f:e9:35:78:2e:6a:b4:
                    0c:b1:18:0b:b8:2c:5c:40:d7:a7:fe:bd:a1:cf:11:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EB:23:7D:53:77:9D:4A:26:62:78:82:5F:09:E6:B5:F9:2C:47:FB
            X509v3 Authority Key Identifier:
                keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2c:6d:58:ed:d6:da:c3:94:4e:02:31:ec:c6:71:cc:ee:bc:
         d3:fb:56:0a:9b:f8:09:22:31:63:65:6d:b8:2b:ec:4d:57:83:
         80:e0:80:1e:79:cd:f8:9d:d9:ab:7f:c6:0c:ee:a4:5d:88:2f:
         77:04:a7:4f:53:ff:96:70:f8:15:d4:5e:18:c7:44:c5:42:40:
         26:c3:4b:08:3e:22:2c:6d:cb:a3:54:3c:a0:fc:c1:ae:4f:c0:
         bb:88:94:40:95:a9:fc:d3:25:fa:3d:48:ab:91:fe:cc:21:cf:
         50:3b:f1:82:01:0f:d5:df:11:aa:10:c4:a8:50:20:20:09:4a:
         6b:ba:d4:bd:0d:92:4d:f8:3c:d1:03:84:38:df:98:1e:3f:e1:
         10:1e:56:67:93:d6:7b:04:0a:8a:a2:2e:42:5c:45:a9:21:43:
         ed:c4:e5:b0:16:c4:a7:f2:4d:94:67:29:f7:a7:c2:92:96:8a:
         f0:f0:d6:30:c5:fc:c4:d6:95:61:01:12:2f:b7:1a:2d:63:88:
         00:ea:32:da:f9:fc:cf:ab:9f:ca:de:70:16:16:53:d7:86:ca:
         bf:53:be:57:32:d6:6e:7f:9c:ed:3b:e9:7d:8f:1b:24:a8:79:
         f7:b4:75:60:67:d5:08:23:51:12:4f:40:1e:1f:8c:7a:93:74:
         90:65:d6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:54:06 2026 by rpki-client