Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
File:                     BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json)
Hash identifier:          PoiR8o6JVc4ZdFOUcjd7PC8HDcJwzi5r1u4jJqgeMNU=
Subject key identifier:   0B:96:9A:97:F1:84:32:18:00:72:21:94:15:C2:22:BE:1E:58:B1:49
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Certificate issuer:       /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial:       01A0D0B6691D5930EDFD6BC4E0C890FA3704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
Manifest number:          0D44
Signing time:             Thu 24 Sep 2026 00:00:10 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:10 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:10 +0000
Files and hashes:         1: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: Lb8fxRnIyAhRRbtq0jhwaXDWakhoxV6XmNdCcWRHps8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:69:1d:59:30:ed:fd:6b:c4:e0:c8:90:fa:37:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
        Validity
            Not Before: Sep 24 00:00:10 2026 GMT
            Not After : Sep 25 00:00:10 2026 GMT
        Subject: CN=0b969a97f18432180072219415c222be1e58b149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:7b:f1:fb:b5:0c:73:f2:0b:d5:f2:64:86:
                    d2:9e:97:31:48:16:5a:43:74:fc:d9:32:16:93:c9:
                    b6:e9:70:33:7a:5e:fb:18:af:2c:38:40:9e:a7:6e:
                    81:dc:1d:58:10:3b:36:c9:87:4c:d7:08:63:86:9a:
                    a7:63:fd:ab:1b:0a:5d:0b:f7:09:b1:6e:13:b6:f5:
                    82:f8:b1:d2:d7:fe:99:47:b3:6a:1f:87:f2:16:6e:
                    b8:8a:3b:21:f0:2b:cf:81:53:6b:e1:8d:7b:0b:87:
                    10:bb:68:86:51:36:f4:b6:9a:a5:92:27:05:1c:a5:
                    8d:5e:a1:70:ad:cc:f1:2c:43:85:80:11:05:fb:fb:
                    52:b9:a5:26:3f:09:e4:5b:95:a0:c3:79:c1:c7:ac:
                    3d:8a:83:5d:10:ac:2f:46:51:aa:1c:f1:1f:f6:1a:
                    4e:a8:d7:03:f8:e8:fb:f1:8b:50:b3:64:01:56:d8:
                    66:05:9a:0f:47:67:b2:ce:c5:7d:c4:65:31:e8:0d:
                    e6:e8:58:24:28:a1:45:b4:de:aa:06:e3:60:02:3f:
                    d3:19:a2:f0:4d:84:b7:13:bd:ab:e3:76:f9:21:91:
                    4d:53:c1:db:1c:c6:fe:ac:b1:67:fe:b5:86:86:bf:
                    06:42:a3:44:31:a5:a6:69:70:19:6c:25:bc:e7:00:
                    36:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:96:9A:97:F1:84:32:18:00:72:21:94:15:C2:22:BE:1E:58:B1:49
            X509v3 Authority Key Identifier:
                keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a2:cb:b5:cf:09:13:85:3a:52:d9:7c:c8:71:52:9b:29:7a:
         e3:4e:39:72:b2:db:80:17:13:fd:52:8a:5b:a5:3d:99:94:43:
         bd:4d:88:ba:3c:5c:96:5b:89:4d:a4:d7:3d:6f:21:b6:95:4d:
         18:a9:98:08:19:76:8b:70:15:cd:9a:00:55:93:dc:63:5a:9d:
         af:c1:2a:73:e1:12:91:f7:6c:76:7f:8b:26:18:19:37:0f:1a:
         f4:08:e1:fe:58:00:06:ab:e9:52:8c:03:b1:ae:81:ef:a3:c0:
         e7:14:af:35:06:03:67:50:41:4e:82:d4:70:e9:2e:f5:f7:25:
         21:18:44:96:e1:ff:70:fe:db:92:73:09:b8:06:59:67:fe:31:
         e0:44:eb:84:69:fa:f6:b5:94:cf:a0:60:04:97:f8:fc:17:40:
         44:b7:b7:11:22:69:51:bf:59:ba:53:f5:ec:15:50:6b:1f:51:
         9a:93:6f:46:41:e8:5b:99:00:6d:50:10:ae:4c:41:81:30:ed:
         96:f5:e0:79:3c:e3:48:b8:42:dc:73:dd:b5:6b:35:ce:d5:f0:
         34:4d:e3:2d:62:81:aa:2c:92:0b:7f:c6:01:ae:9f:d7:21:63:
         06:25:75:9f:09:83:71:5d:bd:55:e0:ce:33:b7:be:1a:f1:31:
         ba:77:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:56:55 2026 by rpki-client