Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File:                     BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier:          FltmQscn0lc32dwEDAB3pPjv8tHYZglMhKuLrDNdu3o=
Subject key identifier:   F6:09:06:93:A6:04:82:CD:5C:C4:A7:8D:E4:2E:06:4B:FA:D5:C0:EA
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer:       /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial:       01A0CC364EC94C26DABC9A7984B37ED5245A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number:          199F
Signing time:             Wed 23 Sep 2026 03:01:46 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:46 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:46 +0000
Files and hashes:         1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: futOgp/meActwkpo89U2akuSZwCPp/0lZnUPSA24Bu8=)
                          2: VOZJu72cAptf5GuMnp6OPKeTdE0.roa (hash: +OF7YYgIQ+7gBnhNy1lihal/9JWS4Vp1lDBnsJWaWy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:36:4e:c9:4c:26:da:bc:9a:79:84:b3:7e:d5:24:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
        Validity
            Not Before: Sep 23 03:01:46 2026 GMT
            Not After : Sep 24 03:01:46 2026 GMT
        Subject: CN=f6090693a60482cd5cc4a78de42e064bfad5c0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:ab:fc:a3:5c:ff:a4:df:a6:af:eb:44:46:
                    44:92:36:01:1f:11:e1:03:30:61:1c:01:4a:02:37:
                    d3:3b:e6:d4:38:81:81:d5:ab:da:67:2a:8b:5f:50:
                    97:7d:16:ee:2f:3f:56:50:48:b2:41:d1:e6:c4:e7:
                    e7:b2:4c:6d:2d:01:c0:f7:35:93:01:43:94:6d:85:
                    c1:1c:60:52:95:07:9c:0e:b7:00:45:8d:49:78:4e:
                    e9:71:89:0b:f3:d2:51:8e:d6:86:66:59:57:9f:cf:
                    d3:44:31:74:8c:e3:4b:3a:fd:b3:0e:22:91:53:a0:
                    86:9a:4e:09:5f:cc:3d:a5:7a:ca:ae:5e:aa:bb:c4:
                    30:ce:8d:11:d8:5c:72:cc:fe:dc:30:65:38:1f:c0:
                    5c:55:84:03:d2:94:5c:ce:9d:10:b7:0c:d8:c1:96:
                    6e:9a:10:b1:bc:0d:03:05:ef:89:df:b5:59:d7:58:
                    9d:db:70:0e:7f:1f:51:f2:c8:0a:0c:55:dd:3a:d4:
                    46:4c:6d:de:33:00:aa:ca:9e:b7:95:86:ae:ae:dc:
                    46:31:9c:95:5b:14:8d:cb:da:19:26:0d:c5:0f:bb:
                    87:03:e1:71:fe:56:59:7d:a5:a0:95:36:99:1b:26:
                    11:5a:2d:95:bd:bd:a9:27:dc:e1:68:82:15:25:d1:
                    ea:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:09:06:93:A6:04:82:CD:5C:C4:A7:8D:E4:2E:06:4B:FA:D5:C0:EA
            X509v3 Authority Key Identifier:
                keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d1:6a:54:7f:e8:82:18:2b:4e:4e:fa:ed:7f:eb:a1:04:1a:
         e1:8f:9a:e9:7a:28:06:59:c5:9c:3d:db:df:bc:26:7f:37:3a:
         76:36:d3:f6:21:0e:3b:8e:f0:ef:91:72:89:15:70:7e:4a:5f:
         66:68:9a:f6:c9:e9:37:6b:7c:53:f1:f7:a7:eb:64:20:d5:5b:
         dc:33:01:04:dc:07:df:9d:73:2c:7b:4a:36:0f:b4:04:b2:57:
         3a:d9:ce:c5:3c:0b:74:4c:e3:bd:71:56:dd:fd:f4:7e:1d:fd:
         4d:b3:d7:46:b9:be:b7:95:bb:71:c2:0f:e6:a3:5a:70:5c:78:
         b6:36:a6:d0:55:35:c4:0f:a0:46:61:6b:97:e6:ef:83:c1:a1:
         ce:4e:ec:df:de:18:4a:a5:d7:a6:b7:c4:27:39:d7:0a:47:d8:
         ae:06:3a:2b:cf:43:80:cb:a5:ab:3b:77:74:9c:a7:68:e1:9d:
         86:97:11:6e:71:c6:57:bf:81:b0:31:ce:1d:50:e3:44:2c:5c:
         05:db:f7:66:6b:a7:82:c7:75:10:e4:58:62:a6:de:c0:55:e2:
         d0:b3:78:10:d6:73:a3:7b:df:05:04:56:db:51:ab:29:cb:c6:
         0a:27:f0:83:7a:ca:ca:67:ed:92:da:b6:95:27:4a:32:aa:7d:
         10:35:4c:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNk7JTCbavJp5hLN+1SRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODgxZjM1N2VhNjY4MGRkZTUyYTJhOWJmYmJiNmVkNDM4
NWQ4ZDkwHhcNMjYwOTIzMDMwMTQ2WhcNMjYwOTI0MDMwMTQ2WjAzMTEwLwYDVQQD
EyhmNjA5MDY5M2E2MDQ4MmNkNWNjNGE3OGRlNDJlMDY0YmZhZDVjMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQer/KNc/6Tfpq/rREZEkjYBHxHh
AzBhHAFKAjfTO+bUOIGB1avaZyqLX1CXfRbuLz9WUEiyQdHmxOfnskxtLQHA9zWT
AUOUbYXBHGBSlQecDrcARY1JeE7pcYkL89JRjtaGZllXn8/TRDF0jONLOv2zDiKR
U6CGmk4JX8w9pXrKrl6qu8Qwzo0R2FxyzP7cMGU4H8BcVYQD0pRczp0QtwzYwZZu
mhCxvA0DBe+J37VZ11id23AOfx9R8sgKDFXdOtRGTG3eMwCqyp63lYaurtxGMZyV
WxSNy9oZJg3FD7uHA+Fx/lZZfaWglTaZGyYRWi2Vvb2pJ9zhaIIVJdHqyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYJBpOmBILNXMSnjeQuBkv61cDqMB8GA1UdIwQY
MBaAFAWIHzV+pmgN3lKiqb+7tu1DhdjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEt
M2M5MWFkNGIzZTA4LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEtM2M5MWFkNGIzZTA4
LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9FqVH/o
ghgrTk767X/roQQa4Y+a6XooBlnFnD3b37wmfzc6djbT9iEOO47w75FyiRVwfkpf
Zmia9snpN2t8U/H3p+tkINVb3DMBBNwH351zLHtKNg+0BLJXOtnOxTwLdEzjvXFW
3f30fh39TbPXRrm+t5W7ccIP5qNacFx4tjam0FU1xA+gRmFrl+bvg8Ghzk7s394Y
SqXXprfEJznXCkfYrgY6K89DgMulqzt3dJynaOGdhpcRbnHGV7+BsDHOHVDjRCxc
Bdv3Zmungsd1EORYYqbewFXi0LN4ENZzo3vfBQRW21GrKcvGCifwg3rKymftktq2
lSdKMqp9EDVMPQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:29:05 2026 by rpki-client