Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
File:                     bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json)
Hash identifier:          DnOM8W1a92E6g8dHo9773L5htBU/2x0oo+X/0RItybg=
Subject key identifier:   06:2F:DA:0E:97:A5:20:90:8E:8A:6F:2F:EF:74:B5:62:6F:36:EE:77
Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
Certificate issuer:       /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Certificate serial:       01A0D34A855C740F8560D7874D2C1146D14D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
Manifest number:          0C03
Signing time:             Thu 24 Sep 2026 12:01:11 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:11 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:11 +0000
Files and hashes:         1: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: lRKJ/pS8QTr81nR5BE91ib4bfH+DZM4F3a7os5s+gZY=)
                          2: e1omXpCIQpnerGyCBf44XvMH7b8.roa (hash: WuuVal2MbC5TVrn+qWtOZo1dB1Kr34wJojmJ2NY5UPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:85:5c:74:0f:85:60:d7:87:4d:2c:11:46:d1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
        Validity
            Not Before: Sep 24 12:01:11 2026 GMT
            Not After : Sep 25 12:01:11 2026 GMT
        Subject: CN=062fda0e97a520908e8a6f2fef74b5626f36ee77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:6e:05:92:9c:9f:e1:8e:e1:33:c6:86:74:
                    30:88:77:be:52:9b:17:af:c4:02:a4:99:f5:72:8d:
                    d7:e9:48:6e:d6:b1:22:c4:99:dd:e5:fb:13:32:eb:
                    25:d6:55:68:6f:f7:b8:b6:6f:31:5a:62:c3:07:66:
                    7d:36:a0:de:86:10:06:f1:7a:78:57:a1:1f:08:4f:
                    38:3d:b4:0f:17:e3:9c:c0:55:02:86:38:1c:d5:89:
                    84:e3:ab:a0:81:d6:94:e0:08:56:1a:1f:b4:8d:66:
                    65:cd:d7:de:46:d2:3e:0b:85:d7:79:82:9e:8f:1a:
                    6a:46:11:48:73:6b:12:1f:af:7a:5e:7b:da:c6:d2:
                    53:ab:ee:ac:94:10:0d:fb:fc:29:17:d8:7b:69:1b:
                    25:0d:49:cd:32:42:53:4e:45:79:69:41:39:75:1a:
                    79:b0:3a:90:dc:2c:11:87:52:b6:8c:27:7a:23:e5:
                    20:13:1b:b2:66:aa:47:97:60:46:44:d5:db:de:75:
                    42:8d:a9:50:5e:ec:d0:cc:6c:bf:82:3a:b9:2c:19:
                    e3:e4:b0:29:34:12:96:a7:0e:52:0a:c6:44:ad:31:
                    e7:1b:e4:be:e6:5a:80:ee:20:95:61:92:c8:53:7a:
                    37:70:84:eb:7d:bb:1c:63:cf:0c:a1:d3:60:2e:19:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2F:DA:0E:97:A5:20:90:8E:8A:6F:2F:EF:74:B5:62:6F:36:EE:77
            X509v3 Authority Key Identifier:
                keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:eb:be:85:5f:41:c3:9f:f3:cc:7f:c9:56:c7:90:5a:55:f5:
         19:41:e2:2d:9b:09:ea:9a:ea:f4:95:49:37:ae:5a:ea:de:e0:
         9d:e3:44:0d:50:9f:f7:27:43:c6:27:35:52:fb:2b:20:81:65:
         20:4a:f1:ad:4a:a8:26:06:72:73:fb:47:e3:15:22:9e:6c:eb:
         d6:5e:2c:a2:86:56:18:19:7d:51:87:57:40:fa:89:dc:f4:5c:
         6c:ee:81:ae:60:71:b2:71:39:68:28:10:26:b6:c0:1c:a3:4d:
         db:3b:28:c5:5d:c1:d9:de:64:78:09:b5:2d:bb:f2:bd:59:ed:
         e7:e6:27:57:e0:f5:37:43:e8:49:d8:48:6f:3d:a9:a5:14:c7:
         cc:3a:da:49:4b:28:51:38:db:f0:e6:f1:86:a3:db:2d:25:3c:
         24:ca:4d:5d:5a:19:cd:b8:81:fa:9f:ae:3d:f8:a8:d4:c3:2a:
         19:b4:60:5c:9c:6a:c6:5f:b2:89:5f:9e:cd:15:0c:cc:ee:7b:
         d1:22:47:54:00:a1:83:71:6d:ac:82:ee:f1:48:a6:10:f7:d1:
         0b:de:fb:43:35:3b:5e:36:53:15:39:0d:1d:7b:c9:e9:d6:20:
         ae:e2:a2:fa:8e:91:b0:9a:b8:9c:27:18:61:aa:61:6a:fc:8b:
         23:2e:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:54:46 2026 by rpki-client