Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          oV1ZND0s6bXRPc+CwbMGYidzs4vzygv2tqHyVomBODU=
Subject key identifier:   A8:E2:F0:D6:0D:6E:3B:71:71:8D:E2:5A:02:56:BA:ED:10:44:79:7C
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       01A0D124E5907089AFFEEE02E6BC4879495C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          1A74
Signing time:             Thu 24 Sep 2026 02:00:51 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:51 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:51 +0000
Files and hashes:         1: 6MLGeDuttKLHmwjE_YPGG7vZqNI.roa (hash: xpTof2JHX21v/k79XQ8lsV/BL0epT0Yvy5Nz69a9itI=)
                          2: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: GeuB7+EcPYrvuVsTjhYuy5Y7XA4aXAtSdwn8EsT1kxs=)
                          3: C0RZortvMGTNI8mXSOH2ddVuOLU.roa (hash: 4ELgCPephP8Rm9C0fctLBQQtexf5QESV1+1cQTBIUFw=)
                          4: Z_L2k8DCyYPXTdYIoY3nfdijg64.roa (hash: ivL6lpqNY3Dw4m+rwt+54sqsIUCex6KJIoQEKHYKmZk=)
                          5: mKqPJjGRZ0H6YrO1beoh-YgmSrw.roa (hash: b1Fd2JbvZA0tfjGHdD2N1uDoKNQWOj5U77gTuCVwBwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:e5:90:70:89:af:fe:ee:02:e6:bc:48:79:49:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Sep 24 02:00:51 2026 GMT
            Not After : Sep 25 02:00:51 2026 GMT
        Subject: CN=a8e2f0d60d6e3b71718de25a0256baed1044797c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d5:d7:15:b9:e9:3f:1e:38:22:54:d0:d7:df:
                    66:9b:51:24:1a:8d:05:67:ad:1a:88:2f:ee:21:08:
                    d4:99:92:cf:8d:ed:a0:09:7c:7a:48:49:b9:72:f5:
                    e8:b2:4c:34:da:7c:4d:27:a0:52:77:55:b5:0b:c4:
                    2b:6d:c3:4d:d4:31:ee:7c:c6:7a:b2:8c:02:f8:62:
                    7f:65:77:ba:35:11:c2:da:52:dc:4a:8c:71:5a:92:
                    6d:19:b8:78:ba:a9:80:b4:67:44:5f:20:4d:ce:a6:
                    91:1c:ee:76:17:01:98:bb:fa:43:07:0d:a1:cb:fb:
                    72:04:96:e2:74:80:68:67:1a:49:32:c5:d2:6c:bc:
                    c3:df:7d:47:2f:48:74:e4:4d:b4:0f:63:5e:75:4a:
                    6e:c4:93:d1:ab:04:ae:6c:e0:65:17:07:43:53:5a:
                    ed:99:de:88:cb:ae:74:ba:13:cc:d6:0c:fe:73:a7:
                    84:cb:1b:4f:b2:4f:fa:5c:5a:6d:f1:92:bf:46:b4:
                    03:b2:63:5a:95:50:82:0e:13:6b:61:aa:7b:d3:38:
                    e5:5d:e7:00:f7:37:1c:38:e7:7d:e2:ee:eb:92:31:
                    fb:5f:45:2c:57:af:42:ee:c5:a9:d4:bb:1e:a4:cd:
                    53:98:97:d1:94:dd:35:a6:9a:f6:4a:b7:aa:9e:18:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E2:F0:D6:0D:6E:3B:71:71:8D:E2:5A:02:56:BA:ED:10:44:79:7C
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:6d:28:22:83:92:2a:f8:4f:1d:e8:60:c2:99:3b:0b:da:fa:
         9b:18:c2:41:45:de:7e:c1:7d:f1:f6:34:53:4a:71:69:b4:9c:
         46:d8:b3:10:1a:fa:60:c4:b0:5e:93:16:bf:0b:8d:b3:e3:b4:
         17:c0:7c:56:f4:80:08:8e:b0:33:25:8a:11:72:2c:45:bc:c3:
         5f:38:1e:ef:73:01:8c:96:ca:49:9f:7f:e5:29:37:4c:08:fe:
         5a:36:90:41:63:a4:5c:36:ff:b4:fb:cb:c0:2f:ad:33:94:6d:
         e0:ec:75:f4:c7:0c:c9:99:89:20:1d:14:2f:3d:11:9d:53:20:
         12:89:dc:19:96:a6:4c:5e:43:07:b3:9d:98:7a:16:82:f2:9d:
         6f:5f:9f:4a:47:01:9a:1a:4f:02:1b:17:a2:d3:cc:47:bf:a1:
         d6:b4:97:88:a5:e0:ec:42:45:73:b0:ba:74:e8:08:e2:4a:57:
         76:bf:1a:bb:14:51:5f:8a:c8:2a:6e:fb:60:b0:c6:33:83:1c:
         63:48:3d:f5:23:96:11:96:d9:61:ce:38:14:14:c2:df:0a:7a:
         23:f7:6b:8a:a7:a4:c0:60:9a:33:02:12:19:21:14:47:73:e1:
         86:88:68:24:48:ab:73:e8:a8:81:5b:45:94:81:31:e3:65:b7:
         a4:4f:b5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:50:55 2026 by rpki-client