Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File:                     bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier:          AQtqA02ETZuW/Y8wkANOfIJ7o2V0Fm3udkUOPLYuheg=
Subject key identifier:   5C:1C:BA:B3:BA:3E:16:F6:95:4C:35:43:2F:BF:CD:A4:45:F9:A9:FB
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer:       /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial:       01A103928EA936AEB5634F23A29A84FA8314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number:          06AB
Signing time:             Sat 03 Oct 2026 21:01:38 +0000
Manifest this update:     Sat 03 Oct 2026 21:01:38 +0000
Manifest next update:     Sun 04 Oct 2026 21:01:38 +0000
Files and hashes:         1: 5v9iEqqw9h8Wg3xh2Nok2-eNQQM.roa (hash: 3N4L/xDAzZWmVmC1vE/Ib8W3ZzU4rXZkkHgA9mF0qSI=)
                          2: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: 42Qp7VA++1xxE3Q8btrxSg2lxCfBNian5q5Y/Blc510=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:92:8e:a9:36:ae:b5:63:4f:23:a2:9a:84:fa:83:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
        Validity
            Not Before: Oct  3 21:01:38 2026 GMT
            Not After : Oct  4 21:01:38 2026 GMT
        Subject: CN=5c1cbab3ba3e16f6954c35432fbfcda445f9a9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:79:ae:f4:84:69:45:f4:7b:f8:61:35:eb:
                    dc:c8:f3:c3:ee:5d:d6:3b:e6:26:5e:57:d6:11:73:
                    0f:4e:42:b8:0d:91:46:84:e8:22:20:d5:d0:16:f4:
                    bf:e3:dc:db:fa:bc:c9:c5:ad:3c:64:24:23:53:b6:
                    46:20:70:e5:4e:96:de:ea:e6:48:6b:d1:34:73:f4:
                    e3:da:bc:4c:6a:b3:25:50:9c:8a:7e:d9:68:7a:f3:
                    ac:ed:32:27:b3:48:86:df:10:e8:45:b7:02:17:b0:
                    95:d6:f6:56:56:cf:b3:75:79:35:e4:93:c6:55:07:
                    cb:22:15:b5:61:9b:17:2c:92:26:31:47:5e:c5:cb:
                    18:8e:c5:ec:61:85:ed:60:8a:5b:3b:ba:c2:b4:14:
                    60:c9:27:e0:e5:3d:96:7a:80:12:7a:f2:df:64:45:
                    21:f8:c9:36:85:cc:f3:7a:31:1c:64:2d:3f:f3:f3:
                    74:43:66:3f:f7:99:ef:76:b7:64:1c:7b:36:ae:df:
                    ab:8f:0a:ed:0b:b9:e3:fa:2b:21:b2:f2:7b:dd:5b:
                    be:8b:7d:03:e6:e2:88:17:11:33:3c:ac:88:e5:c8:
                    13:89:f8:07:ee:36:61:fe:b2:ab:49:f8:01:45:8e:
                    e6:c9:7d:33:de:84:5d:79:2c:e0:b9:95:4a:15:96:
                    e2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1C:BA:B3:BA:3E:16:F6:95:4C:35:43:2F:BF:CD:A4:45:F9:A9:FB
            X509v3 Authority Key Identifier:
                keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e1:4f:fa:bd:5a:e4:3a:1a:0e:25:aa:1d:03:d4:60:9c:1b:
         67:16:c0:cd:1b:de:8c:5c:7e:27:a6:cd:14:79:0c:86:8d:61:
         63:56:d0:ac:27:9b:51:9a:0a:19:b8:e6:e5:73:fa:d7:93:7d:
         40:81:63:89:3b:a5:d4:26:28:c4:0b:1f:ee:c0:3f:ce:14:c3:
         68:ea:f8:29:a9:c9:49:69:2d:28:32:08:a2:d6:df:8e:94:dd:
         2b:16:76:e4:b6:11:79:c4:37:2f:13:1f:d8:aa:2e:94:ed:d0:
         00:aa:9c:4a:b9:2f:b9:04:85:af:93:a1:1c:13:61:67:aa:e8:
         d2:38:78:56:ea:b7:02:f7:c8:a2:eb:63:5b:ac:4d:cf:6c:94:
         9c:84:90:11:6b:0b:01:78:05:97:5c:9b:a8:46:9e:e5:c3:af:
         e2:3f:e6:9b:c6:d2:5f:d7:fa:01:49:7f:9b:f4:25:c7:f7:9a:
         35:78:7c:25:7b:9c:cf:ae:b7:89:9e:55:af:f3:18:51:b0:bb:
         de:17:36:bd:5f:5b:9c:18:97:5f:d5:81:0b:6c:15:cb:28:fc:
         e0:75:5b:17:1a:25:ff:98:6d:b1:0d:5d:08:9d:ff:e2:f5:ad:
         9d:cd:28:f4:01:25:c1:95:06:c6:d7:4e:e1:0e:80:ac:ec:5c:
         e3:d5:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 23:55:49 2026 by rpki-client