Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/BvwFrO2kjHraf6-tojG-hqSBYrc.mft
File:                     BvwFrO2kjHraf6-tojG-hqSBYrc.mft (raw, json)
Hash identifier:          b0tpHEvfYegXKQWLe6EUR0YO7PBJp8z00xVuHg9SBdQ=
Subject key identifier:   97:06:AC:9F:4A:C5:77:12:1C:10:32:B1:5E:14:BB:F7:60:A7:E6:41
Authority key identifier: 06:FC:05:AC:ED:A4:8C:7A:DA:7F:AF:AD:A2:31:BE:86:A4:81:62:B7
Certificate issuer:       /CN=06fc05aceda48c7ada7fafada231be86a48162b7
Certificate serial:       01A0CE23B2CC11B1B4C3CF044DECBB7C287E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BvwFrO2kjHraf6-tojG-hqSBYrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/BvwFrO2kjHraf6-tojG-hqSBYrc.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 12:00:41 +0000
Manifest this update:     Wed 23 Sep 2026 12:00:41 +0000
Manifest next update:     Thu 24 Sep 2026 12:00:41 +0000
Files and hashes:         1: 1-tpDDyKo43VM9BSCjomtalPcE1M.roa (hash: w0hJqQXowAz+i3JwzCOx0V3WbbzbkPBGaFg5QCTJ2F4=)
                          2: BvwFrO2kjHraf6-tojG-hqSBYrc.crl (hash: lWBkCoaJi9JKM2Yha3S/dGwmZXjTLMeWfOFJB3VuAYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/BvwFrO2kjHraf6-tojG-hqSBYrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/BvwFrO2kjHraf6-tojG-hqSBYrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BvwFrO2kjHraf6-tojG-hqSBYrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:23:b2:cc:11:b1:b4:c3:cf:04:4d:ec:bb:7c:28:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc05aceda48c7ada7fafada231be86a48162b7
        Validity
            Not Before: Sep 23 12:00:41 2026 GMT
            Not After : Sep 24 12:00:41 2026 GMT
        Subject: CN=9706ac9f4ac577121c1032b15e14bbf760a7e641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:93:e8:e1:20:cb:42:30:08:36:c3:12:2d:
                    a8:ba:15:dd:01:94:5d:15:20:57:88:db:68:1c:30:
                    9d:ad:80:06:0e:82:50:0c:60:26:52:23:82:fc:ee:
                    d9:5a:84:f3:72:79:ef:a0:96:1b:bd:cd:4d:34:dd:
                    f9:7a:d8:0e:52:7b:0f:84:d7:27:44:94:b0:e3:38:
                    95:0c:58:6f:fa:e9:ca:a8:3a:dd:65:84:21:15:dc:
                    94:84:bf:47:9e:60:0f:05:e1:34:08:6c:39:3f:14:
                    8f:0e:51:57:ca:ec:fb:a5:07:f2:6d:96:78:a2:83:
                    7c:35:aa:18:e5:1f:68:97:59:87:a6:28:a7:6d:aa:
                    a7:23:d1:34:07:f5:f8:be:7f:98:eb:0e:b9:37:17:
                    60:51:a8:b0:6e:90:fc:5e:dc:30:04:93:d0:52:dd:
                    8a:51:00:c3:0d:51:32:1f:c8:dd:4d:c6:b8:2a:ad:
                    6a:16:8e:7d:a5:01:10:e7:0c:fa:19:df:55:a0:2a:
                    a1:d7:33:9b:8f:36:86:9b:ae:6e:b0:64:2e:9b:15:
                    fe:7e:c0:83:6d:d9:2e:25:f4:7a:82:03:c7:ba:79:
                    7f:2a:7b:2a:4e:72:47:6e:ce:fa:22:93:83:8b:6b:
                    48:c7:bd:c6:36:56:5c:cb:42:d5:71:a9:20:e5:7c:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:06:AC:9F:4A:C5:77:12:1C:10:32:B1:5E:14:BB:F7:60:A7:E6:41
            X509v3 Authority Key Identifier:
                keyid:06:FC:05:AC:ED:A4:8C:7A:DA:7F:AF:AD:A2:31:BE:86:A4:81:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvwFrO2kjHraf6-tojG-hqSBYrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/BvwFrO2kjHraf6-tojG-hqSBYrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/BvwFrO2kjHraf6-tojG-hqSBYrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:49:8f:16:05:ea:4a:cb:1b:56:e6:2f:6f:80:f3:86:e6:4c:
         23:ee:78:1d:ad:2e:84:25:12:30:ac:c8:c2:b6:74:a2:a7:63:
         b3:dc:19:d3:1e:23:19:ea:b6:ce:34:f9:53:b0:e5:9b:dd:8e:
         6a:43:55:5d:aa:da:e5:4f:4d:9d:b3:49:aa:f9:a9:2f:f2:ad:
         09:01:55:63:74:15:96:33:d7:10:28:b0:4d:ed:d3:7b:4b:97:
         c6:40:76:23:42:37:d6:bd:48:9a:ec:ca:0c:45:d1:3a:bc:35:
         d1:d2:4b:3c:27:d6:ed:a3:3b:3c:6c:3c:de:17:4a:da:8c:2a:
         25:b2:3c:6e:24:b3:b3:e4:45:61:53:c2:c0:39:31:7b:5d:6a:
         5c:06:8a:f6:e1:c5:ce:20:37:39:86:07:c7:06:24:9f:e6:c0:
         1e:9d:66:1e:3e:e2:2c:af:e7:b4:15:04:8c:2e:56:f8:ab:e9:
         48:95:c0:2e:04:b8:f3:d9:2d:45:d1:3f:56:6c:51:ba:19:dd:
         8a:4e:b1:0b:92:c0:73:30:40:41:6f:c6:22:51:50:2c:05:cc:
         33:3d:90:d9:93:7a:f8:b2:dd:ff:94:ed:ad:bb:0d:b4:9b:3d:
         54:6a:7e:32:59:6e:ae:11:04:8d:16:ca:03:0d:d8:56:c8:a2:
         45:b5:d8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:16:53 2026 by rpki-client