Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File:                     BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier:          IKyxRNpcyEmVpVOJEAtPyW7N0Zfsh2oIfFqfMYhjKVs=
Subject key identifier:   0E:37:DE:33:59:A9:E9:BE:65:C3:96:FE:7A:E1:F1:C5:54:A8:52:50
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer:       /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial:       01A0CAB534A4BF5D0ACE4817AFDD69B235E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number:          0C78
Signing time:             Tue 22 Sep 2026 20:01:08 +0000
Manifest this update:     Tue 22 Sep 2026 20:01:08 +0000
Manifest next update:     Wed 23 Sep 2026 20:01:08 +0000
Files and hashes:         1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: WB4BlISrtXDPSs77U5R+ZfWG5hJn7eul8GyD6lv0J9Q=)
                          2: QfmQSbGn-rduzrFqyr6Sbemoe_M.roa (hash: osfrqMp9JnWBuxKfciaGluVi+EkA7SyhrK0LWIgUKOM=)
                          3: UPMg7rWjV3hDDE0mnmogG2n2blk.roa (hash: JwH0lLPwflRE6ZZP7SZUGCLHGbBuaoFOuDPOldCNPLk=)
                          4: V1ivFQWDP77i8oEcG_p8QyZQJAM.roa (hash: dOMZrRoKiVBS9GiMZZVqHJQh/9Gux0X1bI6FS/AevuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b5:34:a4:bf:5d:0a:ce:48:17:af:dd:69:b2:35:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
        Validity
            Not Before: Sep 22 20:01:08 2026 GMT
            Not After : Sep 23 20:01:08 2026 GMT
        Subject: CN=0e37de3359a9e9be65c396fe7ae1f1c554a85250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b1:ad:3d:03:75:f7:ff:f5:ad:46:88:31:77:
                    cf:2b:95:5a:08:b6:79:35:f1:32:02:d4:82:f0:16:
                    6e:94:43:2d:fc:c1:b3:2b:04:73:0f:51:23:21:99:
                    1f:5b:c9:09:54:dd:1a:40:24:46:ed:3a:3a:d0:b5:
                    ba:21:46:e1:ce:59:f3:d1:1e:29:27:72:f3:32:6f:
                    ec:2e:42:b4:52:19:b9:3e:e7:59:b1:b2:33:4a:45:
                    31:88:4f:2a:2c:9e:4d:00:6d:d9:8f:17:7a:e9:a3:
                    b8:94:81:2c:38:0d:bb:f9:de:2f:45:93:28:44:62:
                    54:24:96:6b:50:55:33:f3:a0:c3:5b:33:ca:fd:03:
                    f5:ce:cf:37:ee:2b:9c:78:cd:41:e1:0b:53:f3:fd:
                    be:18:1d:5e:5c:d5:ca:55:de:e5:9c:7d:56:62:6b:
                    08:b0:97:bf:8c:18:da:73:90:ff:f7:07:28:1f:e3:
                    1d:5d:1a:22:b6:2d:a2:5c:85:9a:ff:c5:08:10:ef:
                    bd:b0:f1:01:b5:38:27:cd:dc:5c:5c:55:d7:94:30:
                    3e:cf:b7:55:45:25:4e:f0:fd:67:72:45:2b:10:10:
                    9f:df:7b:c7:fd:ee:1e:9c:49:1c:be:a3:4a:38:c1:
                    42:0a:dd:2b:60:78:f0:9e:cb:82:d9:b1:48:ad:86:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:37:DE:33:59:A9:E9:BE:65:C3:96:FE:7A:E1:F1:C5:54:A8:52:50
            X509v3 Authority Key Identifier:
                keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3c:66:47:69:56:93:cd:90:1b:68:64:69:bd:44:0c:65:70:
         81:e5:ce:6e:20:d7:5d:99:56:3d:72:1c:71:36:37:c4:92:37:
         1e:27:3f:94:2c:45:ff:d8:c4:2f:46:61:76:84:c8:89:3d:30:
         9d:6c:72:17:6e:19:7b:e4:b5:de:78:0b:01:5c:8f:52:a7:f0:
         21:77:01:af:de:0f:cc:b8:68:a3:fc:6c:f9:47:c0:55:d0:ff:
         9c:ee:c9:72:5f:9f:e4:a4:ab:24:0e:2d:e8:f6:b2:06:a5:28:
         e5:45:44:08:88:a5:44:c9:d2:69:ac:16:ce:27:a3:76:11:32:
         41:59:e8:12:21:33:0b:3d:82:2c:57:a7:a7:eb:86:15:74:1c:
         ac:d8:9d:b4:a1:6e:fd:5b:d1:40:7a:2a:2e:5b:4c:3f:e1:f4:
         dc:11:c6:36:bd:9f:fb:af:c1:d7:fb:7d:b8:6c:13:a3:e8:c2:
         61:c3:85:28:65:cd:86:21:3a:84:3a:7f:c0:19:af:b3:fd:a3:
         f1:47:fc:5d:19:40:95:b5:74:72:c4:4b:c4:50:3a:a0:20:9d:
         88:96:cf:bd:ab:b7:84:0f:03:18:1a:1b:f1:37:67:c9:f2:65:
         c7:dd:b2:96:20:1a:55:2d:24:a2:0f:15:21:40:e1:9f:17:fd:
         15:91:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:42:34 2026 by rpki-client