Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File:                     BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier:          VanxABJr0kGCAzc1oPOLS/ZvrpVbpLaVu7gjf3RJvyM=
Subject key identifier:   7B:87:3A:29:FB:C2:48:F0:71:2C:15:F0:A6:33:02:B0:64:AC:11:3C
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer:       /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial:       01A0E8C08A8A62C237F97EE8F5D7FBBEB4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number:          0B47
Signing time:             Mon 28 Sep 2026 16:02:07 +0000
Manifest this update:     Mon 28 Sep 2026 16:02:07 +0000
Manifest next update:     Tue 29 Sep 2026 16:02:07 +0000
Files and hashes:         1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: CGTKkas647/4MiUqwhmmjpWgvSckQ5TqJ3NZGyvtkUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 16:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:c0:8a:8a:62:c2:37:f9:7e:e8:f5:d7:fb:be:b4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
        Validity
            Not Before: Sep 28 16:02:07 2026 GMT
            Not After : Sep 29 16:02:07 2026 GMT
        Subject: CN=7b873a29fbc248f0712c15f0a63302b064ac113c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:e1:61:e6:68:29:15:86:43:01:b3:41:5d:
                    e2:7d:48:70:90:47:7b:b0:1b:39:53:57:d8:f9:a8:
                    70:95:00:b9:8a:89:a8:0d:a8:26:e3:77:23:0b:a3:
                    a8:51:77:8f:eb:7e:ad:7f:3c:71:2f:a3:0c:e4:95:
                    a9:c8:9b:2e:03:a3:da:f2:47:27:97:8b:1f:d5:b7:
                    c4:96:75:44:11:8b:1c:84:f3:aa:e0:4b:bd:a3:a3:
                    a6:18:5a:ef:0e:5d:ca:55:7a:e1:90:d6:04:ae:f2:
                    47:24:5c:03:46:d2:e0:a6:a3:6d:39:c0:9c:49:54:
                    83:b1:4e:01:f7:63:a1:72:00:9a:72:68:d4:d7:9d:
                    a0:97:4c:45:c9:df:fc:e6:9b:64:f0:d6:a7:32:34:
                    ea:71:ca:c7:5d:90:10:bc:9e:92:86:24:da:c7:b2:
                    9b:9d:7e:99:26:c8:9f:4d:73:9e:6b:fd:c9:25:d8:
                    38:0c:88:c3:06:ee:1c:27:21:10:1f:7f:3a:c2:80:
                    73:e9:f6:bb:71:87:8d:ce:09:41:1d:41:c1:25:74:
                    61:34:36:20:cf:fd:f0:9d:96:4b:b5:ed:b2:fc:c4:
                    bd:40:8a:22:3f:e0:8d:65:81:16:be:61:7b:d7:fa:
                    97:25:dd:6c:25:f9:ed:ae:bc:0b:ce:0f:de:95:36:
                    fd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:87:3A:29:FB:C2:48:F0:71:2C:15:F0:A6:33:02:B0:64:AC:11:3C
            X509v3 Authority Key Identifier:
                keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:58:6f:53:ed:16:ec:b3:c9:86:50:7a:14:72:e5:53:dc:f7:
         c2:f3:7d:26:d5:8d:f8:56:78:b3:5b:5e:7d:fc:f0:a0:c7:72:
         d2:c0:1a:71:3d:fc:5a:b1:52:a8:78:3e:bb:2e:e5:c8:5a:b8:
         68:63:ff:a2:d1:2e:a0:5f:46:a5:1d:d5:0f:17:fa:ec:e2:b0:
         dc:fd:cb:ad:70:9a:67:30:28:a2:b3:ef:c7:ad:b3:d4:82:5a:
         a5:db:22:65:9b:9a:5c:92:67:40:a0:c3:e9:4c:28:ae:38:0b:
         43:56:16:52:e6:41:ea:ef:a1:69:79:ae:36:9e:c7:df:80:d7:
         14:f5:65:69:88:21:27:4a:c5:57:72:ff:46:0c:7a:af:7f:2b:
         fd:f2:6d:38:86:03:73:be:7b:4c:d0:3e:61:38:f9:43:a2:28:
         1e:cf:49:41:e2:76:59:6f:d5:7b:ad:41:4b:d6:c4:3c:10:7f:
         59:7b:cc:fd:d6:3b:39:50:0a:58:11:1a:32:98:79:94:7d:b4:
         22:59:5d:e5:6b:81:49:3f:5c:28:aa:0b:aa:8d:5a:1b:5c:b8:
         3b:d7:d8:54:13:15:7c:a7:de:4e:df:2e:8b:5a:b1:00:f1:3b:
         7f:7e:6f:09:ea:48:10:f4:d6:ae:76:40:b3:6c:7c:20:c3:ad:
         7c:78:50:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDowIqKYsI3+X7o9df7vrS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZmM1NTU3NDg3NmUwZDZmYWJlOGE5NzkxY2MwZDM2NjVh
ZmY4ZTYwHhcNMjYwOTI4MTYwMjA3WhcNMjYwOTI5MTYwMjA3WjAzMTEwLwYDVQQD
Eyg3Yjg3M2EyOWZiYzI0OGYwNzEyYzE1ZjBhNjMzMDJiMDY0YWMxMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFnhYeZoKRWGQwGzQV3ifUhwkEd7
sBs5U1fY+ahwlQC5iomoDagm43cjC6OoUXeP636tfzxxL6MM5JWpyJsuA6Pa8kcn
l4sf1bfElnVEEYschPOq4Eu9o6OmGFrvDl3KVXrhkNYErvJHJFwDRtLgpqNtOcCc
SVSDsU4B92OhcgCacmjU152gl0xFyd/85ptk8NanMjTqccrHXZAQvJ6ShiTax7Kb
nX6ZJsifTXOea/3JJdg4DIjDBu4cJyEQH386woBz6fa7cYeNzglBHUHBJXRhNDYg
z/3wnZZLte2y/MS9QIoiP+CNZYEWvmF71/qXJd1sJfntrrwLzg/elTb9DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuHOin7wkjwcSwV8KYzArBkrBE8MB8GA1UdIwQY
MBaAFAX8VVdIduDW+r6Kl5HMDTZlr/jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hZGE1OTEtZjBiYi00MzRhLTkzODQt
ZTk4MDYzOTIxYmYwLzEvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hZGE1OTEtZjBiYi00MzRhLTkzODQtZTk4MDYzOTIxYmYw
LzEvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1hvU+0W
7LPJhlB6FHLlU9z3wvN9JtWN+FZ4s1teffzwoMdy0sAacT38WrFSqHg+uy7lyFq4
aGP/otEuoF9GpR3VDxf67OKw3P3LrXCaZzAoorPvx62z1IJapdsiZZuaXJJnQKDD
6UworjgLQ1YWUuZB6u+haXmuNp7H34DXFPVlaYghJ0rFV3L/Rgx6r38r/fJtOIYD
c757TNA+YTj5Q6IoHs9JQeJ2WW/Ve61BS9bEPBB/WXvM/dY7OVAKWBEaMph5lH20
Illd5WuBST9cKKoLqo1aG1y4O9fYVBMVfKfeTt8ui1qxAPE7f35vCepIEPTWrnZA
s2x8IMOtfHhQPw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 02:34:28 2026 by rpki-client