Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft
File:                     BsMIkdp--ppkRO_siLS-9VzLvlw.mft (raw, json)
Hash identifier:          lU2nt7r3lJUJRGW0Abt7cOPyXiDsSdNiQ1q+uH+w+X8=
Subject key identifier:   29:CE:D8:3B:F3:F6:55:A1:00:65:A9:57:0F:6B:F5:F4:91:89:A2:4F
Authority key identifier: 06:C3:08:91:DA:7E:FA:9A:64:44:EF:EC:88:B4:BE:F5:5C:CB:BE:5C
Certificate issuer:       /CN=06c30891da7efa9a6444efec88b4bef55ccbbe5c
Certificate serial:       01A0C21FEA7A95AFD59B98CEA4DB04CECDD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsMIkdp--ppkRO_siLS-9VzLvlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft
Manifest number:          61
Signing time:             Mon 21 Sep 2026 04:01:06 +0000
Manifest this update:     Mon 21 Sep 2026 04:01:06 +0000
Manifest next update:     Tue 22 Sep 2026 04:01:06 +0000
Files and hashes:         1: BsMIkdp--ppkRO_siLS-9VzLvlw.crl (hash: Y2ppNdVBbX0x49PK5g3a8mudmvysJcJwHNFAOq7rt1s=)
                          2: RY5xZtAewLvoNEAnvQtECF1BZvk.asa (hash: xHxuQyjcUABUyWov3id5fKYv6Lxc5d+V2F63qGPITw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsMIkdp--ppkRO_siLS-9VzLvlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:1f:ea:7a:95:af:d5:9b:98:ce:a4:db:04:ce:cd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c30891da7efa9a6444efec88b4bef55ccbbe5c
        Validity
            Not Before: Sep 21 04:01:06 2026 GMT
            Not After : Sep 22 04:01:06 2026 GMT
        Subject: CN=29ced83bf3f655a10065a9570f6bf5f49189a24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:5e:f9:07:50:62:6f:fc:22:02:15:06:a9:
                    99:0a:80:14:2f:da:0e:99:89:db:4d:b1:c6:6a:b5:
                    75:3e:75:8e:93:0d:c4:64:84:9e:03:be:a3:ae:fe:
                    80:af:ce:6f:df:a4:1c:bf:5c:55:a9:82:2e:74:f0:
                    d4:34:e1:18:10:7c:69:96:05:cc:e1:05:f7:41:f0:
                    8e:01:d1:e5:c3:05:66:f4:bd:1e:cc:be:0a:eb:71:
                    d9:bc:18:d2:dc:b1:93:f3:00:f5:3c:f8:1b:10:74:
                    33:85:f4:55:70:96:a9:66:33:2d:00:4e:5e:6c:67:
                    0b:36:ae:4c:c3:e7:ed:29:cf:68:c4:70:64:41:9f:
                    62:72:38:69:01:d9:dd:0c:88:6f:06:e2:09:17:43:
                    2c:5e:0b:17:89:90:da:2a:63:41:03:4e:7f:b9:79:
                    18:de:80:47:fa:6c:69:40:68:26:8d:89:b8:e4:f4:
                    98:59:1c:75:d4:9a:b4:8e:1b:79:be:bc:90:d6:a7:
                    18:db:2d:85:32:e5:9b:10:af:a7:b3:6c:58:3f:29:
                    bd:2c:2f:ff:0e:e3:d2:1c:d7:1c:22:c6:4f:a2:c5:
                    de:0b:b8:46:23:47:04:5e:57:ba:28:1e:d0:ca:96:
                    79:df:30:78:2c:d9:ad:c6:a7:3f:aa:ea:79:56:44:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CE:D8:3B:F3:F6:55:A1:00:65:A9:57:0F:6B:F5:F4:91:89:A2:4F
            X509v3 Authority Key Identifier:
                keyid:06:C3:08:91:DA:7E:FA:9A:64:44:EF:EC:88:B4:BE:F5:5C:CB:BE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsMIkdp--ppkRO_siLS-9VzLvlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:11:dc:66:a3:19:c3:59:49:9d:fd:80:27:f5:95:e8:7b:1b:
         f8:40:4d:f9:1d:4e:2f:04:5e:f0:7c:f1:6f:bb:3a:23:5d:ef:
         5d:82:26:fd:1c:bd:6c:47:46:5f:5f:f3:05:52:88:ae:29:2b:
         68:98:29:e7:84:13:7d:d2:b1:5d:86:0d:58:4e:91:46:c9:4a:
         64:a2:e8:d1:a0:bf:13:94:55:39:cc:d4:0f:34:d8:1f:a9:d8:
         cc:d6:e0:cf:60:ce:e7:84:5c:ee:04:15:73:4d:c5:c7:60:10:
         ab:de:e9:f1:d1:e6:0a:33:65:22:98:65:32:2e:6f:06:80:e4:
         3a:08:16:f4:86:84:3e:61:ff:bb:ab:5b:7d:07:1b:72:dd:0b:
         ff:49:d3:5a:11:87:d0:8e:4d:89:0d:3f:e5:e9:d6:1e:f3:95:
         d9:7e:3e:a4:75:05:6d:b8:a5:a2:0e:9d:76:f2:30:98:32:70:
         3d:e0:c6:09:04:c1:fc:7a:5e:bf:d3:1c:03:4b:67:41:b5:23:
         af:29:57:bf:fb:b9:c1:2f:a4:6d:35:b2:68:80:12:b6:a3:97:
         64:a1:e5:3d:1d:07:c8:fc:fa:ba:5b:08:87:a5:ec:f5:0a:49:
         da:96:a4:e1:02:fd:86:cb:f4:d2:fe:cf:9d:92:5b:90:8d:50:
         a7:37:59:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:27 2026 by rpki-client