Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
File:                     B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json)
Hash identifier:          +hDXMkqUkO9si76xoQCIsMWwJEmuFyW+mRxtRL9/wd8=
Subject key identifier:   C6:9F:44:90:27:3A:23:2A:71:67:C9:9F:45:A9:CF:60:CB:DD:F9:FE
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Certificate issuer:       /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial:       01A0BF1E01067A2ABF1860FED410EE036351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
Manifest number:          052F
Signing time:             Sun 20 Sep 2026 14:00:09 +0000
Manifest this update:     Sun 20 Sep 2026 14:00:09 +0000
Manifest next update:     Mon 21 Sep 2026 14:00:09 +0000
Files and hashes:         1: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: NMI04t/SXZcrRXaBHG4wmbFuKi7mISjyH3lg2Y7GcIU=)
                          2: sz9G7DpWjEEMUVJVVxcUaKAB47w.asa (hash: qMSm9Lo5lhWN3TZsyk9ikcvCy7eunxVm7Ys7+c4vy5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:1e:01:06:7a:2a:bf:18:60:fe:d4:10:ee:03:63:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
        Validity
            Not Before: Sep 20 14:00:09 2026 GMT
            Not After : Sep 21 14:00:09 2026 GMT
        Subject: CN=c69f4490273a232a7167c99f45a9cf60cbddf9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:cb:4a:08:ac:96:d8:96:2b:98:ef:1a:34:
                    e1:52:9d:57:1d:da:38:80:5d:cf:b2:20:fa:68:8c:
                    cc:df:5d:79:24:6e:3f:31:2f:83:7c:8c:8e:a1:d1:
                    02:eb:7c:76:15:59:8f:29:40:04:5b:c8:29:f2:98:
                    17:69:70:8a:a0:c5:ef:72:75:0c:f5:3b:d3:07:ec:
                    f5:ab:ec:f3:16:70:88:c0:f9:3b:f3:af:f2:91:67:
                    d5:fc:d3:a5:67:3d:38:ee:b6:82:28:ad:76:b1:25:
                    34:f5:27:f4:0a:5c:cf:ff:12:c9:81:d4:96:88:69:
                    48:9e:67:04:a3:b8:50:d6:9a:5b:40:74:e7:e8:3a:
                    27:9a:f5:8d:a5:cf:3c:fb:37:ac:d3:2f:8e:34:f9:
                    b5:ab:e3:68:b4:60:84:d2:29:c5:b4:d5:c4:4d:a6:
                    3d:70:cf:66:c6:f2:15:94:7f:8c:41:bf:84:5f:57:
                    d1:a4:83:f5:e1:65:8b:af:bf:16:23:45:32:c5:35:
                    07:49:72:8d:3f:e8:72:21:39:42:44:7f:51:97:ea:
                    5e:19:55:52:20:cc:4e:6c:58:e5:d2:98:67:e8:f1:
                    70:c0:99:09:00:d9:eb:8f:85:55:5e:16:84:ee:b6:
                    fc:99:49:22:b2:f7:6b:e0:c3:3c:03:56:17:09:64:
                    94:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9F:44:90:27:3A:23:2A:71:67:C9:9F:45:A9:CF:60:CB:DD:F9:FE
            X509v3 Authority Key Identifier:
                keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3d:24:67:6d:2a:da:b0:c4:d5:07:a5:1e:35:02:82:e5:f8:
         39:be:e2:00:c3:82:f8:f9:b9:36:7f:89:79:3f:37:cb:72:b2:
         f8:d2:06:86:8c:c7:e0:1b:88:2b:e8:51:15:d3:50:56:aa:30:
         6c:7d:24:ff:6b:26:a5:2f:b2:3a:77:44:9d:92:5a:dd:e2:ab:
         9d:1d:73:ac:b6:11:53:8d:b7:11:cc:07:7c:3f:c9:46:6a:9b:
         07:8c:fa:51:51:49:b4:26:13:ba:28:24:da:fc:40:c5:ac:ae:
         c5:72:ed:3a:8d:e1:36:d1:11:1a:c6:ce:37:3a:b0:8f:c5:c4:
         f9:42:e4:ee:44:1d:51:3b:09:ce:64:9d:f0:b0:eb:5d:0a:94:
         28:ac:7c:71:bf:35:77:3a:1e:a7:be:c1:02:97:e1:47:fc:92:
         fc:7e:13:93:41:3e:f0:ce:c0:23:1b:36:c7:e7:bf:7a:45:0c:
         c2:4a:b9:e2:21:d3:b4:96:95:f7:e6:43:b5:58:5d:c1:98:96:
         13:34:60:fb:1c:b3:25:ea:1d:f1:55:d7:43:60:73:10:a0:0d:
         6f:9b:4c:87:35:f0:c6:96:48:ed:5d:3d:5d:4d:68:dd:f8:0f:
         b5:89:96:9e:ab:29:d3:cd:15:eb:a1:ae:79:31:87:5f:a1:00:
         3c:32:1b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:41:08 2026 by rpki-client