Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File:                     bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier:          4D+7SqQaGoGRCjshJPMgdp8/FL1c/DkPNXJ0y5G31IY=
Subject key identifier:   98:9C:45:22:09:C7:07:6E:E9:60:DC:15:61:62:15:BC:D1:38:29:38
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer:       /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial:       01A0DBDFFDD345CE87102B276B94EB410A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number:          0822
Signing time:             Sat 26 Sep 2026 04:01:24 +0000
Manifest this update:     Sat 26 Sep 2026 04:01:24 +0000
Manifest next update:     Sun 27 Sep 2026 04:01:24 +0000
Files and hashes:         1: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: phwl28xudbdBIuy+RlkskcxbaW16EYJETNdwqyEa15o=)
                          2: d5Zhp1cA_fqDZ1FzU959TA66aj4.roa (hash: SuNZX9fanarDL2+daC3fGFckgN7apSeTYCwNJVS+b94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:df:fd:d3:45:ce:87:10:2b:27:6b:94:eb:41:0a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
        Validity
            Not Before: Sep 26 04:01:24 2026 GMT
            Not After : Sep 27 04:01:24 2026 GMT
        Subject: CN=989c452209c7076ee960dc15616215bcd1382938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:db:8b:e4:1a:f5:a2:15:52:d7:47:f3:4b:
                    fd:67:7f:76:c1:c1:12:ca:f0:7d:11:54:0a:f3:f9:
                    48:6d:94:2f:fe:1c:3d:54:7a:e0:0c:f7:5f:43:ea:
                    22:1d:49:e6:ad:e4:fa:c0:89:b8:48:6f:fc:11:31:
                    e0:04:ae:98:6a:74:0f:f7:ab:3b:26:de:31:ce:c6:
                    11:3f:39:e6:09:33:18:2e:57:b4:3c:9f:0e:e8:39:
                    41:3f:16:12:c5:06:45:ec:eb:20:36:1b:52:af:f8:
                    54:45:60:c5:84:70:fe:4d:bf:a6:0d:ad:32:43:18:
                    b1:21:3d:b4:00:37:22:3f:a7:fe:a4:81:2b:cd:e8:
                    dc:b6:58:23:bb:ef:bd:5e:a9:9b:6f:55:03:ad:8c:
                    fe:01:cc:bc:dd:38:2f:e5:de:d5:fb:aa:a8:cc:aa:
                    23:fa:bc:cf:52:8d:af:49:ce:66:7b:76:6c:4f:c8:
                    61:d9:21:93:ef:83:32:cf:13:f2:fe:37:f3:7a:03:
                    00:fa:3d:66:05:7c:0e:88:f1:46:76:dd:8b:d1:89:
                    71:c5:6c:7a:02:26:b0:f1:c5:61:e4:48:0c:be:60:
                    8a:8d:88:23:dd:1c:c0:3f:34:98:64:c1:a0:7f:6f:
                    53:2b:fc:33:b5:2d:cf:8a:40:af:09:59:67:b9:49:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9C:45:22:09:C7:07:6E:E9:60:DC:15:61:62:15:BC:D1:38:29:38
            X509v3 Authority Key Identifier:
                keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:97:64:02:72:b8:62:6a:95:41:1a:26:f8:76:f1:eb:eb:61:
         d4:2a:97:82:ac:fa:05:af:f0:7b:20:b2:ca:ab:0f:26:96:89:
         45:c3:18:17:0d:45:ec:4b:fb:77:b1:7b:52:e8:45:45:8a:41:
         db:27:b3:38:55:32:6e:b3:e0:97:85:d7:9b:4b:54:b5:87:7b:
         81:3b:ee:23:40:74:d7:38:6d:ec:7b:73:2b:75:28:fe:48:0d:
         62:c9:87:c7:c8:2a:4b:d7:ff:dc:e4:a3:36:65:ca:a5:6c:05:
         2d:02:fc:9d:b2:6b:48:71:4d:95:f5:2e:45:51:7c:e9:c4:1d:
         10:b7:1a:07:c4:e6:77:9e:08:7c:7e:dd:2c:45:b6:62:74:7e:
         b4:de:4c:5e:db:7e:93:98:7f:65:37:83:f5:d4:ad:3b:b4:01:
         6a:a8:a3:49:51:56:2b:a6:76:1c:fb:46:20:63:36:b8:df:dd:
         61:5e:17:1a:58:86:f0:d4:93:9d:ec:29:11:fa:97:f4:81:0a:
         ae:94:55:77:2f:21:85:4a:bd:0e:56:1b:98:18:14:2b:54:a0:
         64:91:0b:41:83:83:ab:ab:41:c4:bf:f1:4d:5e:9f:04:a7:07:
         30:d8:b2:82:8d:d9:e5:3c:04:60:e9:42:e5:8c:7e:a0:d8:07:
         ea:eb:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:47:12 2026 by rpki-client