Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File:                     BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier:          T54ItMTNUPOa47JH1TK9Q4QwCiGIuqhgDS2XuDdGwMw=
Subject key identifier:   DF:16:55:3C:59:A8:95:8C:75:14:F7:CA:4B:FB:6A:23:F3:79:BB:B0
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer:       /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial:       01A0D048B13A7ACAF263062B33B5BA6478D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number:          15EA
Signing time:             Wed 23 Sep 2026 22:00:19 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:19 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:19 +0000
Files and hashes:         1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: Kfv4fbbEQjpnOKzeSQ/oAssEpj6MzJwqxuVKC4Z5jnE=)
                          2: LlG8oa0OcM6D5__vgtmHgcfqaK4.roa (hash: lJ+TEaX4SXPiPfb3rAwLTY40jdx2wogsDRxF7aOmvGk=)
                          3: z8l7mSU9KRY7NvwDgtk1N6bfpzg.roa (hash: UTc6qeGzgzsNu3Jv91oY0o4Hfys++8pCjFFEFQc/98o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:48:b1:3a:7a:ca:f2:63:06:2b:33:b5:ba:64:78:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
        Validity
            Not Before: Sep 23 22:00:19 2026 GMT
            Not After : Sep 24 22:00:19 2026 GMT
        Subject: CN=df16553c59a8958c7514f7ca4bfb6a23f379bbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:eb:08:c2:1e:a3:4a:00:6d:28:dd:1c:ea:
                    a7:cb:ae:2e:57:92:2a:31:78:67:35:9b:33:45:12:
                    3d:04:cf:bc:4b:68:70:b1:52:91:80:33:ad:f5:b4:
                    19:2c:6d:72:b3:0a:f9:ec:1c:89:2d:d3:f5:6d:39:
                    06:7e:e5:76:50:d2:4e:62:1d:62:97:35:d1:ce:80:
                    79:ab:55:ff:4c:2a:f3:3f:f3:e9:6f:e8:83:be:5e:
                    94:48:ad:cc:7e:fc:18:fd:e4:9c:8f:f9:69:3a:28:
                    29:00:7d:1e:b7:ff:89:51:13:7b:9e:88:d2:86:a8:
                    80:11:af:5d:ba:37:2b:2c:cb:f6:c0:0b:3f:6e:49:
                    c8:0f:6b:49:3d:4d:5f:0b:aa:b7:3b:ee:fc:7f:29:
                    a2:ad:ad:7d:b9:af:ab:63:ff:6f:eb:a6:23:b9:01:
                    cd:d9:58:eb:ed:44:c5:9a:7b:6d:b3:78:48:93:7c:
                    7e:52:5a:74:1a:0b:82:de:21:5b:f8:44:2e:fd:6e:
                    cc:85:3c:7f:41:a5:a2:c0:56:e5:28:b2:6a:14:1a:
                    44:05:b5:d2:8c:20:d7:0b:dc:88:47:24:0e:a0:cf:
                    3e:89:ee:f8:8e:ef:06:4e:4d:ed:77:08:4b:aa:1d:
                    e3:b4:80:05:07:a5:11:29:3c:5e:fa:08:66:bb:f7:
                    1b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:16:55:3C:59:A8:95:8C:75:14:F7:CA:4B:FB:6A:23:F3:79:BB:B0
            X509v3 Authority Key Identifier:
                keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:81:e0:38:d6:cb:65:ec:35:69:be:42:f3:c4:8f:a8:f6:8a:
         8a:cb:e2:ed:b4:a6:97:da:71:98:62:93:90:1f:91:89:eb:0b:
         b4:d3:8c:63:72:25:d4:25:79:3a:88:89:eb:d2:be:a5:8f:40:
         fe:7f:58:1e:8d:1e:fa:e6:f8:17:99:c4:b0:7f:f7:fe:8c:1e:
         51:cd:8f:db:b2:e7:e8:72:f5:b4:73:ca:e8:66:0a:fc:0f:07:
         38:fe:7a:a8:06:bd:f9:97:1b:e6:32:74:e6:47:8e:37:2b:ff:
         ad:bd:03:87:ef:d6:8b:a6:9d:f7:87:02:fb:1f:9b:62:fa:e7:
         b2:cc:9a:62:d9:68:2b:22:cd:d5:80:bf:dc:97:a6:13:8c:83:
         f1:1b:32:43:aa:c8:8d:9f:ae:27:db:e8:0a:f8:e5:e1:93:22:
         0f:09:55:9c:6a:ef:34:ca:37:21:65:40:dd:73:d6:fd:0e:da:
         bf:23:b1:3a:39:d3:fe:c6:17:54:4c:74:b4:e8:0b:9f:06:ed:
         2e:1e:eb:3f:2e:4d:83:de:d4:49:f1:b1:84:25:81:aa:3f:67:
         c3:0e:99:d8:09:2e:f9:1c:17:42:71:d5:c0:4b:7e:5a:7d:e2:
         6c:8d:1b:48:0f:6b:62:12:1f:38:cd:19:f6:a1:9a:ad:ac:fa:
         bb:08:68:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:08:15 2026 by rpki-client