Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File:                     BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier:          rVe6WY8OVjw4BeDOgHlYhZ0qDENU+Ef/ZUtfn/YDtfg=
Subject key identifier:   C1:9E:81:CE:2A:68:09:BE:A2:E5:75:DA:4A:0E:64:17:FC:29:78:3D
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer:       /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial:       01A0D236F83DC567490042F203E26B148147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number:          198B
Signing time:             Thu 24 Sep 2026 07:00:12 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:12 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:12 +0000
Files and hashes:         1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: t7fSfYvdCU5GQNa5Y+zu8zohIDQ/jRJGO72KPZuBJCo=)
                          2: qh-sD6kOkExAEQOZYjnoqxx9DpY.roa (hash: 5t8eLCXvC3atBWqULd/nurDvBUxx1v91TFam4vLNrJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:36:f8:3d:c5:67:49:00:42:f2:03:e2:6b:14:81:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
        Validity
            Not Before: Sep 24 07:00:12 2026 GMT
            Not After : Sep 25 07:00:12 2026 GMT
        Subject: CN=c19e81ce2a6809bea2e575da4a0e6417fc29783d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:aa:e8:33:92:4e:34:45:5c:d5:ed:5a:aa:e8:
                    97:8a:b4:b2:99:bc:36:63:0b:12:86:e1:2f:4d:c2:
                    38:98:7e:42:7a:3a:6c:56:b3:7a:9e:53:ee:92:53:
                    9d:02:f0:3d:47:99:93:92:50:34:c7:d1:40:ca:be:
                    2f:a9:a5:0f:19:71:53:9a:5a:0b:7e:67:d7:35:b6:
                    9c:67:44:78:3c:0f:b9:44:67:05:c0:5d:72:84:40:
                    73:7b:b3:7b:f7:00:8a:3b:8c:f9:2d:ce:9a:55:d7:
                    31:a7:7c:b9:1f:b0:14:57:a9:bf:35:d6:a2:c3:91:
                    6d:0b:f7:ae:23:18:58:bf:a6:fe:42:e3:e6:54:ec:
                    d4:b3:e8:06:7b:f5:ac:9f:2b:e2:9c:14:7c:c6:cb:
                    ca:0e:dd:e5:25:b0:04:9b:69:77:cf:45:df:ac:e8:
                    16:2d:d7:07:6d:ee:58:5f:3b:2b:59:ae:25:4e:bf:
                    07:e6:78:62:e5:ae:76:c6:47:b7:0e:f1:9b:f8:22:
                    21:3f:8c:ca:77:84:8d:d2:2a:8c:dd:91:2d:5b:00:
                    21:eb:8a:c2:29:76:ef:12:fc:68:4a:f1:a7:a6:09:
                    d4:f0:3f:20:85:6b:55:76:d2:ec:ee:73:24:28:1d:
                    89:22:3d:19:a3:e1:f0:76:4f:28:71:fa:50:cc:4b:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9E:81:CE:2A:68:09:BE:A2:E5:75:DA:4A:0E:64:17:FC:29:78:3D
            X509v3 Authority Key Identifier:
                keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:11:44:2b:21:5b:21:27:22:49:12:95:12:ef:69:7d:23:3d:
         77:b4:72:7e:3d:25:98:23:57:a2:ab:ea:bc:14:48:51:0d:f9:
         77:c8:65:05:12:7c:b4:0b:57:c8:f0:de:f5:19:7c:32:aa:d0:
         73:58:47:51:22:49:ea:f1:1e:91:33:0b:c2:e2:e8:f6:ef:2d:
         6a:25:3a:2a:de:a4:37:eb:60:c0:24:0f:79:9e:d1:e4:fc:91:
         0b:90:d0:d9:2c:3f:13:c9:65:5b:be:98:ae:75:00:58:46:98:
         43:a2:56:24:dc:1c:d4:3f:46:e1:e9:ef:ec:de:19:65:44:50:
         42:d3:32:40:85:66:7f:6a:52:e4:07:e8:a1:75:65:66:48:ba:
         02:ad:40:c9:16:8a:e9:a1:d5:5f:67:f3:bb:7f:e3:33:bb:00:
         1a:a9:74:39:d7:3a:d9:7b:3c:9a:e6:13:1d:50:77:31:89:5f:
         08:19:0a:a6:e0:36:f0:68:75:e3:3a:bf:3e:3e:da:94:0f:6c:
         61:46:55:96:db:f2:ca:5f:fe:25:9e:f4:cf:ef:d0:a9:38:ec:
         fb:b1:e5:f8:d0:3e:ea:2d:c2:4b:b0:11:bf:f6:99:08:32:4e:
         3a:75:c0:64:3a:83:a9:52:e2:5f:95:b0:4d:00:e0:34:ea:ca:
         35:d8:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:49:03 2026 by rpki-client