Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
File:                     Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft (raw, json)
Hash identifier:          PzxbgxhmS1bBQK8gM28Syc9UW/zpI0iq7BTSHRhT5RA=
Subject key identifier:   93:1E:D9:FC:0A:28:40:50:13:07:C4:6F:ED:48:3B:45:43:EA:5E:99
Authority key identifier: 05:DD:41:6A:B8:7E:47:AF:A7:BC:EE:A8:32:33:4D:C0:F0:05:D5:BB
Certificate issuer:       /CN=05dd416ab87e47afa7bceea832334dc0f005d5bb
Certificate serial:       01A0CB905A0C4A4BD24C077AEBECD756FF43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
Manifest number:          021A
Signing time:             Wed 23 Sep 2026 00:00:30 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:30 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:30 +0000
Files and hashes:         1: Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl (hash: X2aeSkqAaNoKVMGxd1MUb7EPcmXv7sLmav77QQofLuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:5a:0c:4a:4b:d2:4c:07:7a:eb:ec:d7:56:ff:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05dd416ab87e47afa7bceea832334dc0f005d5bb
        Validity
            Not Before: Sep 23 00:00:30 2026 GMT
            Not After : Sep 24 00:00:30 2026 GMT
        Subject: CN=931ed9fc0a2840501307c46fed483b4543ea5e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:52:ad:96:71:d4:f1:37:2d:94:3d:4b:57:
                    1a:21:e4:98:16:96:2c:e8:bf:02:bc:00:16:a0:65:
                    69:49:fc:5f:1f:da:14:43:f0:c3:3a:47:23:8a:5c:
                    9b:11:c9:56:45:21:20:9e:52:eb:0a:ce:8a:f1:d4:
                    ac:42:f5:9f:44:90:19:cd:cf:fe:97:35:cb:e4:3f:
                    de:86:80:25:a0:dc:ef:d0:46:ee:3b:4a:9e:0a:07:
                    bd:0c:53:b7:db:11:8b:95:ea:a0:bd:7d:81:25:d9:
                    8a:fe:fc:0f:72:dd:ec:22:cc:7e:14:57:cb:4e:0d:
                    3b:39:e3:21:31:45:90:e4:c6:24:29:7c:ed:fe:95:
                    ef:af:d9:8d:f2:dd:a1:8a:3a:d1:cb:a1:4e:cd:9a:
                    3b:e1:6d:c9:fe:16:8f:35:e1:f6:d5:33:a6:65:c7:
                    0d:ae:ec:67:06:9e:e4:a7:7e:b5:dc:e5:c9:a5:f2:
                    5f:34:e8:a0:bf:8c:01:ed:c6:e3:06:82:80:b4:97:
                    c4:84:59:1f:f6:77:a4:e2:21:2e:0c:f8:8f:bc:80:
                    c4:d4:77:42:42:9a:67:b2:8a:ae:44:08:9e:93:6d:
                    e8:fc:e8:ec:6d:7d:6f:23:9a:5f:f5:bb:74:b2:ee:
                    53:1f:ec:9b:97:e2:ba:71:f4:80:9d:8a:78:77:69:
                    cb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1E:D9:FC:0A:28:40:50:13:07:C4:6F:ED:48:3B:45:43:EA:5E:99
            X509v3 Authority Key Identifier:
                keyid:05:DD:41:6A:B8:7E:47:AF:A7:BC:EE:A8:32:33:4D:C0:F0:05:D5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d3:8b:69:ec:72:e8:12:72:a7:b1:e5:1a:20:c6:6e:cf:e0:
         84:0c:05:d5:02:5d:8d:ae:0e:db:c7:11:04:66:b9:54:27:55:
         b0:23:b7:f7:c2:fe:d6:ef:21:7e:96:f3:94:e2:52:37:01:63:
         97:b1:34:95:ce:e4:b1:51:36:8e:02:0f:97:7d:3c:07:bf:08:
         1b:56:ac:2d:fc:96:39:21:ec:1d:76:5c:27:09:ae:14:ae:7a:
         bb:ed:7c:e6:16:32:5c:bf:6d:a6:2a:b9:a6:10:3f:7a:85:92:
         d7:1f:a4:5c:58:01:33:9a:0b:17:94:db:bd:39:84:d2:4d:5f:
         ce:e2:25:e5:dd:c2:dd:a8:2d:7a:e6:ba:3f:02:9e:39:8b:c3:
         07:b6:e9:b4:8a:1a:26:6b:0f:79:c5:00:6e:44:f1:df:64:f4:
         de:21:06:96:c9:06:a5:40:46:cc:ae:e5:31:f5:d5:c2:d4:e4:
         60:65:ed:75:4d:c5:be:08:d4:35:ea:46:f7:50:fc:e1:e0:ea:
         2e:15:d3:c2:5f:6b:f8:56:7c:70:09:c6:75:0f:22:8f:2f:c3:
         fb:8b:6f:cd:c9:96:4b:1e:6a:f0:de:cb:f3:c9:3d:d6:d9:61:
         ef:36:80:1a:d2:8d:e3:46:18:3f:40:77:37:d9:99:d5:43:94:
         dd:45:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:08:44 2026 by rpki-client