Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File:                     v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier:          tY6x3mvKoQCg0D5iqM4Bev8HE0ZoW3a2S5bzJadt4b4=
Subject key identifier:   6D:BD:8D:D3:FF:77:54:57:DE:A0:7B:53:21:B6:0E:FF:08:12:E2:97
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer:       /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial:       01A0E43F3D18AB365637A83DCFF7ACEC2EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number:          134B
Signing time:             Sun 27 Sep 2026 19:02:24 +0000
Manifest this update:     Sun 27 Sep 2026 19:02:24 +0000
Manifest next update:     Mon 28 Sep 2026 19:02:24 +0000
Files and hashes:         1: 4cK2toKGStLvtVpJDp0UztrPgH0.asa (hash: ZNY72R7qVZc/Zu94pUGocbYyKhf7trhy+TL1EY5kc7Y=)
                          2: CHYxKsoN6IeVA10L6kUmg387K4E.roa (hash: mPumrjNcFYvdRL5bdDvvsuVOxWBNEvLLvkR9dRXxG+0=)
                          3: HEYAnN_9hlNawT0gfEq7cBceqz4.roa (hash: I1MGXqqgieCZdZAjgnAyAg80Pf2U7lhaBnlyBhpIJso=)
                          4: SDoF-WCqCPjknLT2mM2_4GQ1V00.roa (hash: 9DCTVTfRoXNgWVh36MOAbrslGxs/tC2WsKyt8y4+r+o=)
                          5: gDYEALi2Hj-tupJ_rsL3s8tznlE.asa (hash: 68FX2IHGNZcEoY9bCkB81Lljsq+1FZmQtZVe4paP9Q4=)
                          6: uWtL-ZUWThEBX2Kk-wgOPUghIXk.roa (hash: 5DR/R0A/IU4wtB24PmXGRhwrZ3nwhIVVut65+Q4hkXk=)
                          7: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: EExydKanuctgz/waYlay2bW2vhVkVIM4XwNWOEF//ww=)
                          8: wshhYohjqXbtPI9N4_VP7v1zc_4.roa (hash: K9LIAOWThDljnJHgTvgI98ZZwaUx513/nLgNGKabvmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:3f:3d:18:ab:36:56:37:a8:3d:cf:f7:ac:ec:2e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
        Validity
            Not Before: Sep 27 19:02:24 2026 GMT
            Not After : Sep 28 19:02:24 2026 GMT
        Subject: CN=6dbd8dd3ff775457dea07b5321b60eff0812e297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:b4:c4:72:73:71:48:cc:50:e7:3c:41:95:
                    98:a4:65:e2:8e:4c:f3:c7:4c:fa:c7:c6:6a:26:01:
                    12:5d:9f:5e:6f:16:23:97:63:72:65:10:2a:a0:99:
                    16:91:c3:f7:cf:9b:f7:92:1d:be:bd:6d:07:9b:d5:
                    57:fb:5d:fb:28:26:29:af:c6:4b:80:84:7a:08:f0:
                    7d:99:8a:72:dc:71:c3:e4:b5:a2:31:9f:d8:ba:87:
                    27:0e:7e:31:4d:f4:20:e4:00:e5:6e:11:81:90:a9:
                    e6:7d:15:4d:1a:5a:c0:10:aa:b9:af:fd:53:d8:25:
                    93:97:b6:78:3a:cf:71:73:f6:b6:e2:73:82:bd:73:
                    78:61:a7:e2:00:2a:26:a9:7d:39:c3:1c:31:b4:ed:
                    24:6b:65:52:ba:45:84:2a:44:f4:b4:da:16:3d:43:
                    37:98:e1:39:38:06:78:ca:31:59:88:07:44:34:2c:
                    19:f1:90:dc:f1:0e:be:e0:c2:3f:13:5c:3c:f4:ca:
                    e3:3d:87:15:2b:22:b7:da:e2:ca:ae:39:98:45:da:
                    c8:b4:5c:73:b7:a4:88:45:2e:bb:b8:4e:5e:03:a7:
                    e9:9b:40:31:8d:3b:12:23:00:3b:a2:d9:85:a1:92:
                    60:f5:d9:6e:a6:46:e2:0c:56:21:0c:eb:70:86:60:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BD:8D:D3:FF:77:54:57:DE:A0:7B:53:21:B6:0E:FF:08:12:E2:97
            X509v3 Authority Key Identifier:
                keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c1:29:09:11:2a:18:c0:12:66:94:82:e4:09:3c:7b:8d:e9:
         1f:29:1d:b2:3d:17:ce:bc:a0:1c:1c:16:de:43:f7:b1:f2:24:
         79:75:3a:d2:8b:78:a5:41:28:6c:cc:4a:f4:0d:1b:93:47:c5:
         7a:11:e0:c8:dd:fc:ed:a6:e7:e5:37:91:c8:6c:89:43:81:06:
         74:0e:03:ba:ab:f4:46:f5:96:c5:00:ac:ef:29:49:b3:3a:ca:
         5a:34:89:65:01:33:8c:cf:ff:64:a3:14:c4:60:8e:88:57:5b:
         05:fc:b1:91:7b:00:e0:84:c4:3a:67:b7:9c:f1:92:b5:43:16:
         de:e1:6c:40:79:78:42:eb:a1:0b:f2:d8:63:88:50:d6:bb:7b:
         37:4b:fb:5d:ef:67:79:d7:88:25:b8:ce:85:51:41:15:f0:06:
         67:6b:40:3c:42:f8:66:1a:d3:7c:e1:55:0e:6e:64:f5:e3:89:
         0c:ce:42:74:1f:97:3c:bc:8b:87:cf:c4:c1:07:87:f6:d5:08:
         31:55:da:82:f6:13:13:75:3d:fa:b4:f4:4a:d8:97:dc:58:75:
         8e:be:6e:6f:fe:c2:01:0e:13:67:9c:f9:00:23:3e:b1:89:2e:
         77:d4:b7:5f:49:6d:07:0a:1f:17:d3:cd:e0:e9:00:55:bc:ff:
         98:12:bd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:57:23 2026 by rpki-client