Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
File:                     bDjM5r4-JvXmJUacse03btd5v7A.mft (raw, json)
Hash identifier:          bqDh3QcS9W0+dE4+F5IljwEgW5lRgCc+Nx8uZ20HErA=
Subject key identifier:   42:DF:8D:4F:D5:7F:13:13:B1:E8:59:87:D9:76:E0:21:A7:5E:7E:85
Authority key identifier: 6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
Certificate issuer:       /CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Certificate serial:       01A0DF8676C78293724AD4F76B34E02FFE78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
Manifest number:          ED
Signing time:             Sat 26 Sep 2026 21:02:06 +0000
Manifest this update:     Sat 26 Sep 2026 21:02:06 +0000
Manifest next update:     Sun 27 Sep 2026 21:02:06 +0000
Files and hashes:         1: OZq72zv4sg7RvskqcH-YM473vC0.roa (hash: ZaPK+bZUcZeqLBhmkFhNu+PtlkG5P1ecScSV/otpvoU=)
                          2: aqZj2vUKzXW4OJOiXFcYzOGlOBE.asa (hash: OBvOGfVO6gpSCVcXtODca/H8DDZWmcTW85b6yxSA+tY=)
                          3: bDjM5r4-JvXmJUacse03btd5v7A.crl (hash: kH1lnM3EHsq64r9OBQMPSTprUMI7QVE5osb0ZPVuITM=)
                          4: isv1noVOs3IF7XKFRPIZvlT-zzs.roa (hash: Y7qPP/O0hbTSlwRSjlHZA/XaYa5Jq+RJtLqdMHL5xuY=)
                          5: vdQ0RaPFXcCVGYywpsZqkOR4hpw.roa (hash: ktZFb+NWv0kq4A04+BX1/mDAvqdfa84ChDii4aiEH4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:86:76:c7:82:93:72:4a:d4:f7:6b:34:e0:2f:fe:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
        Validity
            Not Before: Sep 26 21:02:06 2026 GMT
            Not After : Sep 27 21:02:06 2026 GMT
        Subject: CN=42df8d4fd57f1313b1e85987d976e021a75e7e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:25:e9:ab:d3:98:65:40:42:ea:51:e9:fa:
                    7a:c8:e8:c0:ad:4d:0a:8c:f0:f3:14:ac:23:c4:61:
                    2f:7d:cb:de:6d:dc:18:94:f4:f5:a8:d7:12:fd:b2:
                    56:ff:ff:25:d0:20:70:7e:42:45:f3:c0:c8:8b:0a:
                    ab:8b:40:0e:a0:a8:aa:68:58:c4:5e:d1:44:2e:c6:
                    90:fe:d3:b1:43:b9:00:57:fd:2c:2c:45:3d:bb:1b:
                    77:54:ee:b0:7f:75:8a:97:98:ba:8f:73:82:ad:a3:
                    5f:c8:b3:b8:fd:87:f9:d2:b4:0f:8e:dd:4e:9c:25:
                    1e:33:f7:07:04:a4:c7:54:08:93:65:2d:80:1c:88:
                    77:54:9a:93:77:87:df:f2:e3:89:06:b5:2b:a4:fb:
                    fb:67:bd:1d:c2:d3:24:b6:62:d4:1f:0a:ec:31:2b:
                    c5:ad:cc:1f:01:e9:63:6e:ac:a9:d6:03:b5:fc:ca:
                    b5:9a:33:6c:44:21:48:2b:00:35:0f:74:cc:a9:3d:
                    54:49:95:fb:6a:2d:54:a4:a4:90:7a:7f:bc:9b:c1:
                    6a:da:cf:f3:d4:bf:35:b8:c6:db:d7:0c:d3:1c:49:
                    18:d1:aa:b7:41:e8:b7:f9:8a:7a:62:54:62:2c:9d:
                    fc:4b:1f:c1:2b:e8:cc:6a:e0:f7:3e:17:0f:20:d1:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DF:8D:4F:D5:7F:13:13:B1:E8:59:87:D9:76:E0:21:A7:5E:7E:85
            X509v3 Authority Key Identifier:
                keyid:6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3f:10:21:46:1f:fd:5b:f7:19:c6:90:86:79:6f:98:e8:28:
         a6:90:a2:04:8d:c1:6a:d3:8d:df:3a:22:e1:15:25:a9:94:cc:
         31:fd:af:c4:91:8f:e7:e8:56:e6:7a:1b:3b:a0:ac:61:fd:d1:
         97:fc:ea:c5:f0:e7:26:12:48:74:2d:6d:3f:52:db:f1:31:0a:
         98:56:10:5c:a9:1e:6c:52:6e:36:e1:c2:3f:24:f4:03:e9:d3:
         de:27:f6:c0:8f:5d:3a:8c:f4:1e:ca:d2:31:dd:4d:84:42:c1:
         f7:bf:e0:3b:36:1c:c8:80:05:d9:c8:98:88:13:48:5e:61:47:
         39:65:b2:eb:30:b7:25:68:b4:e9:97:c4:ec:07:eb:63:2c:4a:
         ff:15:c6:a1:32:11:41:11:de:0d:dc:03:ae:f6:8c:22:98:0c:
         c6:9a:2e:2a:0b:d6:6f:32:7e:cf:06:ef:24:5d:95:6c:b4:2d:
         a2:f4:6b:89:7c:7b:e6:61:30:78:8a:d2:e5:81:90:3c:44:1c:
         05:1c:50:ea:d6:4b:80:16:03:db:34:24:b6:3f:fd:ea:8e:be:
         f8:ac:03:f3:40:6b:34:ae:cf:68:57:cd:0e:eb:82:0a:ee:41:
         6b:91:e3:98:1d:de:88:d5:58:f0:cc:4b:1a:5c:92:db:61:87:
         76:65:82:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:36:47 2026 by rpki-client