Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File:                     1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier:          yNf7nnzKMBJq+QKF2FRb4PeC0DuqFwEOkQWSspx3aYg=
Subject key identifier:   77:48:BE:84:9B:D2:B8:D2:69:7A:AC:53:38:95:A2:67:B9:CE:F9:9E
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer:       /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial:       01A0D01249C4520E466CB3A75122CFC7B904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number:          10BE
Signing time:             Wed 23 Sep 2026 21:00:54 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:54 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:54 +0000
Files and hashes:         1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: JKjwqkzDUnbCXh31oxLbbBnEgdwhya+jFi94vdQzB48=)
                          2: c0qjnxMkH3o7BZA9mjDB8PjcK9Q.roa (hash: fEnYLhGdSUfVNqcVBY8ilLsCtbiLQsP9mptf7JMTUOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:49:c4:52:0e:46:6c:b3:a7:51:22:cf:c7:b9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
        Validity
            Not Before: Sep 23 21:00:54 2026 GMT
            Not After : Sep 24 21:00:54 2026 GMT
        Subject: CN=7748be849bd2b8d2697aac533895a267b9cef99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:14:2f:27:4c:6f:2a:c6:0e:23:a6:67:c8:
                    29:63:5b:b6:a1:df:ce:a6:4a:63:79:3b:23:e8:ec:
                    c1:bf:3b:f0:e4:9f:83:52:81:f6:46:e2:fe:c9:fd:
                    b2:cc:e8:0b:7c:99:1a:73:32:8f:65:6c:c0:00:9f:
                    9b:85:fa:18:b6:31:c2:f3:82:36:fa:5c:62:b5:fc:
                    bd:8c:bb:e3:57:ce:fc:12:f9:71:aa:fa:c9:dc:b4:
                    4f:72:71:89:6a:35:9e:36:ff:8b:72:f7:be:87:3d:
                    70:50:69:e9:10:4d:f2:60:c6:10:20:a0:aa:f7:85:
                    11:f0:8c:da:77:58:8d:d9:f6:dc:69:41:90:78:c2:
                    94:45:88:5c:e2:44:41:5c:91:0c:40:65:29:6e:2d:
                    6f:3a:d9:bd:a8:84:6c:bd:a7:53:b4:4a:bf:3a:63:
                    91:40:21:29:84:8e:48:7b:18:c1:f9:2e:a6:fe:90:
                    b1:74:bb:eb:dd:61:a5:dd:30:76:04:e8:45:28:2b:
                    b0:dd:2c:89:64:38:23:60:6a:a8:23:22:96:b2:75:
                    07:64:90:fa:6e:8f:a3:10:c7:61:94:70:73:03:d5:
                    70:ba:7b:57:fe:1c:5e:aa:7b:0b:3d:27:60:2c:71:
                    3c:b8:d2:fc:9a:2b:d3:4b:da:1a:a9:53:57:64:45:
                    b3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:48:BE:84:9B:D2:B8:D2:69:7A:AC:53:38:95:A2:67:B9:CE:F9:9E
            X509v3 Authority Key Identifier:
                keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:50:5f:26:7a:e7:c3:f0:e2:7a:a3:05:d3:80:07:b6:4c:a2:
         9d:b6:06:d0:56:ba:d7:19:03:c6:a7:96:66:c0:dd:3b:81:23:
         87:8d:ee:b4:bf:a1:92:6f:95:38:5e:5c:7b:81:ec:a1:d8:2d:
         5c:fa:e9:46:7f:76:81:58:2b:a3:08:af:33:35:18:ce:a6:82:
         40:3e:9f:7e:83:0c:af:cb:70:82:ac:98:ac:b7:ec:75:07:7f:
         2e:35:59:1b:30:77:af:85:12:ef:53:0b:ad:a3:17:14:e1:71:
         f5:f5:b1:3a:c4:f9:a0:4d:af:5e:be:44:65:1f:db:62:42:e8:
         2e:77:78:fd:e4:34:8d:f4:c7:86:bc:b6:3a:47:2e:08:e0:a7:
         79:b9:69:a3:de:41:fd:0b:52:37:9e:54:73:d3:ce:28:24:44:
         27:36:81:1f:95:a3:c0:02:7b:e8:3a:7f:95:4e:4e:0c:97:da:
         81:92:52:b3:07:bc:27:09:99:e3:0f:9b:7d:1e:67:c4:0a:ed:
         6f:6b:7f:de:da:7d:5b:5d:7c:e6:d9:89:73:51:b5:79:b8:4e:
         d8:d8:1f:a4:fa:7e:d5:c8:72:17:c0:26:0e:91:25:91:f4:28:
         83:03:d9:d9:da:e6:25:1e:f1:ca:be:18:53:21:03:4f:ab:8f:
         1b:21:ce:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:14:52 2026 by rpki-client