Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File:                     bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier:          nYx2CZeoWgFkciomceLiPDAnqKH6FZ5/94ha2pV4+ww=
Subject key identifier:   13:21:DA:98:EE:49:9A:CE:CA:7B:2A:B8:B7:CC:75:E4:2C:EA:68:9F
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer:       /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial:       01A0BEE7B3AEBA1B2B73A5307DFF1089605E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number:          1A7B
Signing time:             Sun 20 Sep 2026 13:00:50 +0000
Manifest this update:     Sun 20 Sep 2026 13:00:50 +0000
Manifest next update:     Mon 21 Sep 2026 13:00:50 +0000
Files and hashes:         1: LWs_a-IjpKyiNHYmRA5l6DCBk5w.roa (hash: sxEGN7MwA9AyuNhX1MvFrW1Irc6EYC19ff7DBTf7fx0=)
                          2: R-Ms9tnwVFr5zGPdMpveWYmvzTU.roa (hash: 4hVn6BmRDmF60zXMMdHkc2jChJsAngJEvYhtXGC9Vjo=)
                          3: ZK9ALarqOpzm0i2rpLZ-rHOMzdo.roa (hash: RllCIZ6AldL0IOvShUd1+ZNf+viS99vPh52YLrvbtJU=)
                          4: ZmcfgQVw9WznPpWT9yLghomma18.roa (hash: dwEz5IwUCOta4WNqfA1M1PPK2wh9BaQxA/M28+Mkwpk=)
                          5: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: k4k5GOB9BxEMIsF1u7wemLRD8JuHZS8R8TxVUYWqsX0=)
                          6: ks2_IkZaAakd1-3jQOWLy85dDy8.roa (hash: mLEy/InkNukmfeS2zm1mvXpvR+u6dmdc0Mw1w4KWFN4=)
                          7: ocrWH4LXI5AcanxmF84LShRjSnA.roa (hash: IvINQVuazfHHpSQNQUlXHe0rPDP3TKBhqPqw+YoqC5E=)
                          8: vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa (hash: TJZuXEOOt0r/V9EaRl+qnNfFa6UZgYtOnc2ci1AuANA=)
                          9: yO-faN1p6CDhjtBsMnJFSamd0b4.roa (hash: f5cjUT10BBqhpOr6X0AO88BjDl80sXjlHTe7MTa/7YQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:e7:b3:ae:ba:1b:2b:73:a5:30:7d:ff:10:89:60:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
        Validity
            Not Before: Sep 20 13:00:50 2026 GMT
            Not After : Sep 21 13:00:50 2026 GMT
        Subject: CN=1321da98ee499aceca7b2ab8b7cc75e42cea689f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:77:de:37:70:66:fc:83:02:27:ca:27:57:
                    e3:2d:88:95:16:0e:2b:87:86:5a:54:3c:ea:fa:ae:
                    6c:6c:d3:d7:0d:f9:89:38:4b:fe:72:3a:bd:3d:1e:
                    c2:cc:db:d8:3c:5c:89:d6:b4:b5:90:ba:d1:48:eb:
                    22:9c:51:62:ee:fe:0e:22:5d:25:65:02:1c:83:4a:
                    fd:ca:d2:be:d5:5a:08:a9:9f:2d:a5:f9:ed:c2:a0:
                    88:36:74:21:22:5e:b0:08:a7:d2:2b:4b:b7:ca:b6:
                    d5:75:fb:e6:43:b1:39:37:55:f7:cc:77:6f:43:3e:
                    9a:3d:8b:8f:e8:de:9a:08:c7:c5:53:49:46:bb:f8:
                    99:06:9f:9f:8e:81:57:30:34:11:26:88:77:9a:b5:
                    09:2d:3b:4a:43:c2:43:4f:e9:11:fc:b7:e9:4b:89:
                    6d:25:4d:ec:38:d1:f0:ff:a1:4b:64:6b:32:b7:f7:
                    2f:4f:04:2a:c8:72:bc:ce:ff:b2:56:d8:d5:e4:49:
                    73:79:f7:21:e5:fa:b5:18:c0:8f:82:ab:b3:a8:8e:
                    d0:dd:a5:85:1d:27:f7:59:84:59:45:f7:92:6e:08:
                    bf:96:7c:99:17:9d:12:c0:cc:f6:b5:96:1f:09:78:
                    b8:6d:06:ec:0e:0e:f7:73:aa:4e:d1:1e:a3:53:ac:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:21:DA:98:EE:49:9A:CE:CA:7B:2A:B8:B7:CC:75:E4:2C:EA:68:9F
            X509v3 Authority Key Identifier:
                keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c5:36:11:f1:98:f8:fd:8f:7e:f1:4e:45:03:d1:58:06:e0:
         87:a5:5c:cd:9e:f9:a3:66:97:17:6f:58:c5:30:47:f3:20:17:
         24:c3:9c:2f:e4:82:9b:7d:55:60:d0:ae:d2:73:b8:0d:61:cb:
         6d:1e:1f:98:d0:4e:b1:78:58:f4:51:d0:89:79:d8:25:ec:9b:
         9d:62:3a:f7:6b:75:cd:fc:2b:23:a9:f7:ad:d3:f1:e2:5d:6c:
         87:48:41:c7:ad:63:85:f7:93:2b:bb:f3:55:ac:c3:76:c6:67:
         57:f7:1a:f0:08:09:df:4a:71:ef:15:b6:f0:2f:4b:2e:a5:54:
         e5:08:81:62:9c:a8:cc:88:b6:1e:13:73:bf:0f:c2:f1:2f:e9:
         f8:6a:f6:0c:33:07:be:83:62:86:3e:e5:db:fe:5b:64:d4:d4:
         94:8c:7d:f2:b6:9e:a2:8e:b5:a3:ad:78:28:70:91:b1:b6:90:
         4c:1a:25:ce:e4:87:3d:46:4f:2f:ac:ff:fe:f1:f2:10:63:c6:
         74:62:ee:31:11:a9:27:43:c0:e3:05:f0:30:98:bb:3f:f9:cc:
         11:be:4e:ea:f8:eb:73:91:c0:2d:a5:90:8c:38:dc:16:ed:09:
         d0:99:10:c6:d4:ec:3b:51:57:78:fd:f2:fd:0f:6c:ac:93:63:
         a0:dc:a9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:49:59 2026 by rpki-client