Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File:                     v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier:          mXX2jpc9z4xK8hm5hctymIZ8sNbgOAlYJVBU7hrfz98=
Subject key identifier:   B0:0D:0D:38:F6:CD:59:95:FF:97:02:BF:00:0B:20:4F:7A:63:BF:5C
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer:       /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial:       01A0C5580014520F4C26186E12D1BD2CEFF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number:          0EAB
Signing time:             Mon 21 Sep 2026 19:01:13 +0000
Manifest this update:     Mon 21 Sep 2026 19:01:13 +0000
Manifest next update:     Tue 22 Sep 2026 19:01:13 +0000
Files and hashes:         1: 5POQaq2FIBregxvYNKnQ0LZ68eA.roa (hash: 3ZBwuPJNCoHXmfqEKRXgDso3hRBamUObQVJiGRHt5+M=)
                          2: qdDk0UCI7yKoHISVxuAvDt7ubkY.roa (hash: fOL7bC2/gVsejbMGdZIPK51yUoyiGdvxfMzybuHtZ1c=)
                          3: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: 2XDVphcxKrOpOiMP1Wl6IqgykKCydLXUjqEfJ1o1vR8=)
                          4: wWjX3G1u8VVJrZxUXxszdZPmLOQ.roa (hash: r4GR8IEEVmZoiDV/k0vnJZnERNrwiOO08DpOlDa1gSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:58:00:14:52:0f:4c:26:18:6e:12:d1:bd:2c:ef:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
        Validity
            Not Before: Sep 21 19:01:13 2026 GMT
            Not After : Sep 22 19:01:13 2026 GMT
        Subject: CN=b00d0d38f6cd5995ff9702bf000b204f7a63bf5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:92:03:61:d2:4c:db:8c:ce:f3:0a:d6:92:51:
                    e8:06:84:a3:9f:b5:f9:01:31:70:75:0e:21:ab:1c:
                    55:51:ee:36:86:71:e9:d4:46:d8:04:43:ff:99:32:
                    34:d7:d3:a8:d9:0a:cd:1a:a5:c0:ba:da:4a:d4:32:
                    ca:ca:e9:d2:b6:20:e0:de:04:78:1c:30:cc:27:f0:
                    2c:64:ce:e9:fe:24:35:7d:24:9d:17:b4:5f:d6:d9:
                    af:aa:44:f8:9e:e7:c1:bb:e5:3a:70:69:3b:8a:20:
                    9a:5d:45:a8:b4:68:d9:9c:e4:b6:58:01:b8:02:57:
                    83:e4:bb:84:10:c9:91:58:03:09:1c:de:8b:b2:c3:
                    8b:ec:e5:75:1e:f3:36:da:91:0b:1d:e2:0a:80:98:
                    d9:ac:68:01:af:47:8d:81:46:dc:f2:ed:fc:bb:8b:
                    69:07:ba:14:c0:7e:4a:9c:f3:bc:83:4f:dc:27:d7:
                    3a:d2:1a:45:d1:6a:a6:48:88:62:29:2f:67:79:e2:
                    90:1b:4e:35:93:62:ac:a7:4d:42:be:0e:23:b0:5d:
                    34:4a:cd:d9:16:0e:5b:02:49:6b:2f:fd:e5:c0:73:
                    84:55:d6:98:22:29:99:cd:65:b7:48:bf:7e:f7:96:
                    8d:8c:ef:50:78:46:23:4b:8e:26:66:a7:a1:68:6c:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0D:0D:38:F6:CD:59:95:FF:97:02:BF:00:0B:20:4F:7A:63:BF:5C
            X509v3 Authority Key Identifier:
                keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6b:f5:16:f3:f7:7d:2b:1d:9c:a7:ab:93:5b:73:97:33:bf:
         2f:39:8c:2d:4c:1d:17:72:dc:e4:90:2c:fb:ea:db:06:0a:40:
         0e:61:78:c9:8a:b1:55:0b:8f:a7:bb:4a:c1:6e:82:98:3a:d8:
         30:ac:0a:e0:fe:9e:a0:73:07:4c:c2:f3:80:b4:7d:da:47:9a:
         b5:61:5b:7f:b2:1b:ce:1c:2c:de:88:fd:35:b1:2d:09:89:93:
         10:04:02:ec:b9:fc:78:d7:aa:c0:8c:0b:a2:6c:2e:23:32:14:
         1e:f8:c8:48:3a:a3:c4:41:ad:07:17:33:29:99:ca:27:db:03:
         13:27:ed:ec:b3:bf:11:24:3b:57:0e:8c:e3:24:37:e1:b5:46:
         2b:f4:12:30:a9:97:a8:9b:47:a4:be:e1:0f:dc:95:b9:93:2a:
         7d:f1:28:4e:52:b9:17:15:bd:6a:b8:17:51:6a:6f:ff:46:69:
         b3:ab:5a:9a:ff:b8:7b:3c:7c:d5:e3:b2:5c:6f:b0:3b:b6:97:
         2f:71:f0:5e:4e:f9:a0:3d:13:f0:fb:f1:80:16:77:f9:ea:ec:
         0b:31:7b:0b:41:84:2a:bc:17:10:7d:a3:cb:f7:3c:a8:2f:72:
         ff:e9:02:ac:bc:5d:e0:d9:71:c9:de:ea:39:d1:21:bb:ef:ce:
         f2:8e:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:49:22 2026 by rpki-client