Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File:                     bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier:          do0e8q8McQkXCugzbE8ON1c53l1NykjU8DEn2y5Xo7Q=
Subject key identifier:   B3:4B:20:0D:36:A9:6F:3A:AC:CC:1F:DC:8C:A1:CE:B8:04:AC:ED:86
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       01A0CE9115E948CE2030CB803CCBB8A97CD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number:          0DC5
Signing time:             Wed 23 Sep 2026 14:00:09 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:09 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:09 +0000
Files and hashes:         1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=)
                          2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=)
                          3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=)
                          4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=)
                          5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=)
                          6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=)
                          7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=)
                          8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=)
                          9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=)
                          10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=)
                          11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=)
                          12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=)
                          13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=)
                          14: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: 47S6lHrlWgBnGEcseVprERDulyQbf1k6kHImupF88wc=)
                          15: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=)
                          16: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=)
                          17: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=)
                          18: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=)
                          19: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=)
                          20: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:15:e9:48:ce:20:30:cb:80:3c:cb:b8:a9:7c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Sep 23 14:00:09 2026 GMT
            Not After : Sep 24 14:00:09 2026 GMT
        Subject: CN=b34b200d36a96f3aaccc1fdc8ca1ceb804aced86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0c:56:66:ad:37:de:51:48:1c:15:1f:ef:7d:
                    ab:c6:2f:44:0f:9f:dd:90:05:9f:2c:9b:cb:61:b7:
                    a7:b6:2f:4d:c6:97:1d:72:46:2a:00:f2:ce:82:bc:
                    ae:49:79:bf:db:b7:b3:1f:4b:11:47:2b:28:c0:bb:
                    a4:2a:a2:78:99:2c:34:da:8a:e0:38:09:4a:f5:21:
                    cb:5a:9b:a0:85:14:22:db:07:3f:d0:5d:92:56:33:
                    7d:d3:a6:bb:38:b2:48:ad:5f:52:e1:3c:b3:d3:3b:
                    bf:10:de:89:66:1d:13:46:39:90:9a:26:dd:f8:ac:
                    6b:77:98:59:ca:65:90:6a:24:d3:cf:64:40:13:bc:
                    ba:50:7f:9b:79:85:a9:47:39:f7:90:e9:ef:14:9d:
                    04:66:22:49:4b:6e:35:d1:7c:a8:09:b0:74:31:23:
                    d4:83:86:4c:c1:a8:ae:44:4c:6e:01:36:a0:20:b8:
                    72:9f:3b:bc:e7:14:1f:db:99:35:c0:d0:c6:3c:94:
                    28:e3:fc:5c:96:65:65:b6:e5:6f:82:40:1f:c2:f0:
                    62:0b:45:27:f8:ca:f7:83:28:36:a2:74:d8:b3:79:
                    39:66:5b:b1:c7:9c:2d:d7:f0:aa:97:db:1c:e6:09:
                    5d:8d:59:40:76:5b:31:f0:70:b9:7a:44:6b:34:c9:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4B:20:0D:36:A9:6F:3A:AC:CC:1F:DC:8C:A1:CE:B8:04:AC:ED:86
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:37:1e:f0:a5:d2:91:3f:59:2e:2f:bf:c4:4c:8a:28:b9:aa:
         c9:54:41:d4:e8:aa:aa:93:7d:29:04:8c:d8:00:f5:26:05:45:
         19:02:46:7b:a2:27:6e:f7:9d:ed:29:2e:0c:ed:6a:02:63:47:
         57:08:ed:cc:f0:0b:7d:49:d9:a9:a5:e4:2c:21:5c:1d:28:1e:
         ea:48:20:ba:e8:ad:37:4d:7c:b7:7e:b1:2f:b7:2b:96:f4:0c:
         e0:1f:ba:42:93:9d:be:d6:f7:38:70:e2:68:4a:3d:3f:b3:52:
         cf:f0:31:70:34:bf:b9:fe:0b:25:93:5c:78:e5:22:5e:37:ac:
         1e:dd:96:b7:e9:25:25:bf:6a:7e:99:90:f3:e3:e2:ad:42:78:
         47:f6:29:1f:ea:36:99:d5:f8:0d:26:b2:d4:be:d4:a5:0c:35:
         07:6d:cd:f0:a5:72:42:98:aa:9a:83:7d:ee:18:64:fe:67:17:
         ca:f7:c7:3b:e5:5d:83:da:ce:ca:dc:c2:dc:a8:eb:14:f7:f1:
         a3:0d:5a:28:ad:e1:68:46:a2:b5:72:71:7d:58:dd:e2:48:16:
         f1:12:ad:e2:a0:f9:5f:ed:50:95:34:b1:f6:da:d2:9a:49:38:
         ce:9d:80:13:e0:54:fb:c3:f3:38:56:9b:66:d7:4d:fc:f3:67:
         d1:dd:1b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:10:03 2026 by rpki-client