Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
File:                     bDjM5r4-JvXmJUacse03btd5v7A.mft (raw, json)
Hash identifier:          fv+GCb4wckIzmxiRInatrkBjBqrBQGJEpJyHS/vvQFw=
Subject key identifier:   3E:94:E8:19:0C:52:B9:C5:E8:10:4C:C0:93:C9:B8:D3:46:A5:4C:45
Authority key identifier: 6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
Certificate issuer:       /CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Certificate serial:       01A0E1750632F55CC713CD52C07F4C2ADDFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
Manifest number:          EE
Signing time:             Sun 27 Sep 2026 06:02:17 +0000
Manifest this update:     Sun 27 Sep 2026 06:02:17 +0000
Manifest next update:     Mon 28 Sep 2026 06:02:17 +0000
Files and hashes:         1: OZq72zv4sg7RvskqcH-YM473vC0.roa (hash: ZaPK+bZUcZeqLBhmkFhNu+PtlkG5P1ecScSV/otpvoU=)
                          2: aqZj2vUKzXW4OJOiXFcYzOGlOBE.asa (hash: OBvOGfVO6gpSCVcXtODca/H8DDZWmcTW85b6yxSA+tY=)
                          3: bDjM5r4-JvXmJUacse03btd5v7A.crl (hash: IrwcXTWizQbcfXJ9bJx6c7SN9opL2QL6pObhaGaA6wM=)
                          4: isv1noVOs3IF7XKFRPIZvlT-zzs.roa (hash: Y7qPP/O0hbTSlwRSjlHZA/XaYa5Jq+RJtLqdMHL5xuY=)
                          5: vdQ0RaPFXcCVGYywpsZqkOR4hpw.roa (hash: ktZFb+NWv0kq4A04+BX1/mDAvqdfa84ChDii4aiEH4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:75:06:32:f5:5c:c7:13:cd:52:c0:7f:4c:2a:dd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
        Validity
            Not Before: Sep 27 06:02:17 2026 GMT
            Not After : Sep 28 06:02:17 2026 GMT
        Subject: CN=3e94e8190c52b9c5e8104cc093c9b8d346a54c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:84:27:22:56:88:4b:c4:90:4b:92:a9:5d:
                    e4:65:dd:88:da:49:34:a1:55:d2:28:f2:9d:fc:7c:
                    8a:f8:ff:f5:17:46:a1:00:b4:b1:03:db:1f:92:25:
                    f2:13:1b:a4:2f:31:30:17:26:76:c5:4f:c9:96:c7:
                    51:a5:e1:b1:03:17:42:7c:22:61:8e:b0:bf:0e:31:
                    3d:06:b0:76:77:43:79:70:68:6b:3e:08:1d:eb:49:
                    a2:b6:62:c7:e3:8e:d7:fa:a8:75:f8:d6:8b:ce:cd:
                    a3:c3:10:3a:d0:df:5f:d4:77:3e:61:7f:1f:40:b6:
                    fa:4b:8b:83:5e:a7:e8:bf:f3:fc:e7:cd:17:8c:00:
                    b7:ac:0f:0c:c9:09:b0:ff:25:53:00:2b:9a:43:29:
                    37:fb:c6:fa:c7:61:c7:3e:46:90:53:89:b2:60:06:
                    97:d2:d5:dc:51:fc:82:b7:ea:38:ac:24:f7:66:38:
                    35:72:75:d3:72:ac:f8:2b:b3:97:2d:99:07:e9:f9:
                    c2:f9:6e:78:4c:65:22:7b:1a:5a:ae:e5:6c:e4:57:
                    72:92:ad:35:71:7d:2f:7f:ca:dd:e2:e0:58:41:0b:
                    ad:77:18:57:d9:a7:b1:d3:f1:2c:a4:b3:54:54:3f:
                    56:b9:63:46:80:d4:98:09:a5:cc:e2:e0:13:79:9e:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:94:E8:19:0C:52:B9:C5:E8:10:4C:C0:93:C9:B8:D3:46:A5:4C:45
            X509v3 Authority Key Identifier:
                keyid:6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f1:b2:f8:93:e0:9a:f8:73:38:50:f5:e5:68:eb:f5:28:ad:
         26:40:02:51:1b:53:6a:94:f0:bb:cc:ac:6c:31:f7:d2:19:a4:
         69:88:a6:96:94:8f:43:19:58:71:ce:50:12:c6:6e:6e:90:ea:
         36:29:ef:71:f8:44:85:de:cd:ed:d9:1d:04:71:f5:5b:48:6f:
         01:be:36:be:98:fa:6c:7a:5a:fc:1b:1d:10:62:08:36:b2:f1:
         7f:a5:61:90:52:cb:9e:23:3b:4f:00:1d:2a:95:30:1f:9c:56:
         10:7d:8c:b1:3e:6a:49:3c:8f:55:0b:4f:2b:81:43:60:ef:54:
         81:cc:40:17:99:46:41:f1:d4:7c:6d:0c:63:70:74:e7:4b:60:
         7b:2a:2a:ba:98:62:a8:b8:36:af:ab:b7:ce:52:34:e2:0e:24:
         47:99:6e:22:77:7b:75:10:4c:c4:0a:6d:bb:81:ef:96:29:8a:
         d1:24:6b:d6:9d:a2:28:c7:4c:7b:e2:9e:54:2a:5d:48:85:fb:
         56:9a:a9:18:91:bf:dd:e7:92:43:7a:38:9a:53:54:e7:8a:5a:
         cd:a2:87:06:63:ce:49:d4:66:08:22:48:71:6a:05:d7:58:5c:
         2b:3e:33:3a:f2:68:b8:52:0f:99:d7:b3:56:ae:ef:9f:a0:a8:
         44:f7:be:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:04:00 2026 by rpki-client