Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File:                     BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier:          LZ0e8nhaKDLDyFKXKtclOFuIuwaN8wyYpISNYNJN9CI=
Subject key identifier:   7B:92:3F:16:5B:95:E1:13:E4:DB:06:2E:2C:84:4D:A1:A3:27:0E:23
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer:       /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial:       01A0FDFDF85AAA23C1795E86F914C3866CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number:          0D42
Signing time:             Fri 02 Oct 2026 19:01:14 +0000
Manifest this update:     Fri 02 Oct 2026 19:01:14 +0000
Manifest next update:     Sat 03 Oct 2026 19:01:14 +0000
Files and hashes:         1: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: ndtnDmNuEy1ZOoAcLFisoyPSmJmYqYkk7moL7/BabpI=)
                          2: CI4ko7IFE2eF3AlAlzoIHGGOq_A.roa (hash: r0qwmSw9Inbl8qdHUq2nQr86Vl9zhDV6qpUzB9VSqQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:fd:f8:5a:aa:23:c1:79:5e:86:f9:14:c3:86:6c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
        Validity
            Not Before: Oct  2 19:01:14 2026 GMT
            Not After : Oct  3 19:01:14 2026 GMT
        Subject: CN=7b923f165b95e113e4db062e2c844da1a3270e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:4b:9d:c0:d1:e2:32:59:5e:ef:d1:f6:be:
                    98:fe:ec:d5:0b:fb:e7:d4:3d:ed:09:0d:c8:19:76:
                    aa:4b:38:0f:c6:e6:9d:b3:90:e1:bd:04:a3:cc:f0:
                    38:03:9c:fc:e6:c1:14:dc:9d:72:85:43:34:07:ec:
                    8e:a5:c2:43:d9:56:cb:9e:be:b0:8f:cb:7b:93:39:
                    47:84:a4:41:4c:85:08:85:ff:99:35:0f:78:b3:7f:
                    07:3c:4e:b6:4a:71:3e:c9:a5:32:7b:78:a5:10:95:
                    f1:c2:0c:90:f6:55:3b:3a:b2:63:ef:57:3a:91:3e:
                    02:37:67:d2:82:52:97:c7:8a:5e:62:9e:02:0e:65:
                    dc:90:5b:7f:7d:f2:7e:61:c7:7e:c0:30:34:ae:30:
                    c0:e3:cb:80:a7:34:69:96:be:e1:fa:12:65:30:4a:
                    0d:d4:9f:8b:a4:c0:bd:33:b0:a6:4c:6a:d5:63:f0:
                    60:00:d7:72:60:19:3a:f1:d7:e5:85:80:e1:69:9c:
                    c4:0b:e1:03:86:a3:8b:95:7b:c4:77:57:4c:53:23:
                    db:11:2b:4e:ad:53:e4:63:dc:c6:46:23:8a:91:87:
                    a4:38:bc:9f:77:7d:28:2e:24:d8:2d:2a:4e:07:55:
                    86:a1:5e:dd:89:ce:4b:1e:1d:42:6d:e3:af:86:30:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:92:3F:16:5B:95:E1:13:E4:DB:06:2E:2C:84:4D:A1:A3:27:0E:23
            X509v3 Authority Key Identifier:
                keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e4:d7:94:55:14:9b:e3:4a:4a:99:d6:46:80:d9:57:2a:e1:
         b2:23:23:9b:b5:10:80:1a:dc:37:5a:01:b5:a9:a9:aa:a5:9c:
         39:ff:5f:6b:fe:28:93:cb:12:46:c5:e3:e9:5d:ca:dd:a3:86:
         35:d8:31:e6:93:09:09:02:65:05:96:3e:23:60:aa:84:8a:ec:
         3c:78:7b:2c:72:e0:00:09:7f:10:c6:60:c5:65:d1:4f:3c:2e:
         a7:ae:d4:77:ba:7b:44:96:c4:84:27:36:c3:32:13:1e:de:9b:
         ee:e1:14:46:b1:fd:3a:cf:de:b8:73:4b:da:03:cd:79:c5:9f:
         d9:dd:ed:0a:44:6c:12:a7:9e:87:fd:3c:88:3d:71:bd:bb:b2:
         cc:5b:21:45:e3:86:3e:95:64:68:71:94:89:73:1e:cc:26:dc:
         16:0b:07:3b:30:38:96:28:3e:d9:b0:a8:4e:7f:cd:42:d8:ac:
         a3:ba:36:b7:5c:3b:58:99:be:67:b8:9d:f1:91:9a:dc:2c:55:
         80:46:59:5c:1a:f5:02:f2:ae:54:4c:77:80:5f:0a:15:67:ef:
         03:8b:17:79:e3:f9:39:d9:4f:a4:67:3a:3c:18:46:b7:91:b9:
         22:f9:23:6d:71:63:76:5b:32:87:48:0f:ab:83:11:6b:10:fc:
         f2:f4:d3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:10:35 2026 by rpki-client