Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File:                     rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier:          vbcmu9U2fTQB//gQ24p7S8objQMcGUW3tQYs7FJFPUo=
Subject key identifier:   AD:CF:EA:C5:7F:7C:EA:8F:A3:24:BD:2A:BE:35:2A:60:A3:63:56:D3
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer:       /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial:       01A0CDECECA673FCF94DF3FBF417AF9A6462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number:          0AEC
Signing time:             Wed 23 Sep 2026 11:00:51 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:51 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:51 +0000
Files and hashes:         1: PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa (hash: 3aTcfO9vdu7qWCaFGCqBM2AkObZO7u8nWp9PGSX53QM=)
                          2: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: SoGjSsV0BOJwxXm+bTHEKQLKDWIea44AuB6qWXaSexM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:ec:a6:73:fc:f9:4d:f3:fb:f4:17:af:9a:64:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
        Validity
            Not Before: Sep 23 11:00:51 2026 GMT
            Not After : Sep 24 11:00:51 2026 GMT
        Subject: CN=adcfeac57f7cea8fa324bd2abe352a60a36356d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:75:bf:f8:19:f4:c5:16:02:39:e7:62:ca:
                    a2:50:92:6d:ee:3d:2e:d2:dc:fa:a4:93:c0:46:33:
                    00:e5:d6:1d:23:b4:21:b1:85:3e:4c:86:a1:c0:54:
                    bf:f8:af:eb:12:97:77:a4:69:5c:3f:16:7a:7d:55:
                    c0:af:14:ae:8a:4c:65:df:72:10:33:36:76:20:ff:
                    91:4e:43:a7:9e:4c:38:d6:71:a4:5a:cc:55:f9:ba:
                    80:c8:2f:ca:0d:6e:5c:1c:e8:f6:58:10:09:7c:b1:
                    1b:5f:09:44:c2:2b:a1:af:c7:34:a9:11:12:1c:cc:
                    2c:46:1f:0e:40:98:8d:a1:bd:88:f4:75:9d:b4:7b:
                    06:59:a5:c4:e6:48:ef:7d:40:d9:75:c1:3c:3d:da:
                    0b:11:56:96:36:ce:66:5a:28:ca:2d:b8:c7:88:77:
                    86:44:50:b6:4f:0c:d5:82:34:97:9e:2a:b4:e3:c2:
                    40:dc:7a:2c:65:0b:df:f8:4b:42:ab:92:46:34:08:
                    7e:01:b4:5e:4b:53:4e:98:59:f2:4b:86:12:02:fc:
                    e9:1c:0e:93:39:df:6c:82:cd:ec:5d:6f:41:4f:51:
                    d6:19:af:76:ce:6b:66:21:3a:0a:e0:ef:6a:d4:70:
                    45:1f:44:c6:b2:bf:e1:e7:f0:b9:dc:ce:c8:f4:65:
                    0e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CF:EA:C5:7F:7C:EA:8F:A3:24:BD:2A:BE:35:2A:60:A3:63:56:D3
            X509v3 Authority Key Identifier:
                keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:45:66:71:ca:9b:a5:fb:dc:33:fe:06:86:fb:31:fc:21:83:
         cf:dc:52:c7:fc:7e:0e:0c:df:f1:36:bd:43:89:c3:24:32:e4:
         b2:01:fc:38:d7:c9:23:40:bc:2d:88:27:6e:3b:32:8d:de:44:
         ca:c0:dc:27:fe:33:b0:20:29:ec:8a:9f:7a:dc:6e:66:b7:8e:
         4c:88:7b:e7:c2:90:1d:10:f2:e0:91:29:ad:41:dd:48:d6:96:
         05:a1:b4:66:14:a3:09:fe:ba:1c:99:b8:98:04:97:63:5e:88:
         b4:44:60:60:0b:db:34:f4:87:e6:2b:db:11:91:99:bf:af:e8:
         5d:4b:14:dd:3b:c7:36:8a:3d:70:1a:a0:18:45:01:a2:b2:d2:
         6e:db:7d:e5:76:0f:dd:02:9a:7f:61:42:b7:48:34:17:07:72:
         be:72:2a:60:54:3f:ed:bf:1b:85:d4:d0:b1:ac:a9:36:67:6a:
         14:32:44:7a:9f:75:cd:04:7a:f8:9c:e2:68:e6:a2:49:2a:f1:
         92:08:95:41:a2:56:12:67:e2:18:7e:0b:d1:be:03:c2:e8:89:
         0e:ae:bc:29:50:8d:56:f0:04:1a:49:67:bf:6b:7a:c7:de:0b:
         5e:1c:98:06:0d:a8:3c:84:80:8d:34:78:58:a3:e0:30:27:51:
         51:25:ce:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:00:47 2026 by rpki-client