Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File:                     BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier:          ibjhr0ZvlhkUgO3AFv614HzGl2Q3kd1L57joDJm/mhM=
Subject key identifier:   EB:D9:86:F1:7E:46:12:5B:79:60:F1:40:90:C2:0A:98:89:B2:33:27
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer:       /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial:       01A0F56879C362EC06B7C2E2AA7186DC8CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number:          175E
Signing time:             Thu 01 Oct 2026 03:00:59 +0000
Manifest this update:     Thu 01 Oct 2026 03:00:59 +0000
Manifest next update:     Fri 02 Oct 2026 03:00:59 +0000
Files and hashes:         1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: T5LGJH1vpHBUOLjj6HId6WtXlScSi6/fkJrS8M01/2A=)
                          2: ue1Yig8TYgxiOV1FxPhvIsY035g.roa (hash: 3msZkfxcU6jcS509BBjupbbAc7uKaBkwJ1wFsWgzHXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f5:68:79:c3:62:ec:06:b7:c2:e2:aa:71:86:dc:8c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
        Validity
            Not Before: Oct  1 03:00:59 2026 GMT
            Not After : Oct  2 03:00:59 2026 GMT
        Subject: CN=ebd986f17e46125b7960f14090c20a9889b23327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:00:5a:f2:ca:0e:95:ff:97:99:1a:49:c6:34:
                    d5:41:f5:92:0f:1f:e5:c9:52:aa:75:0e:66:44:ab:
                    db:5f:1b:d3:04:79:68:fe:b1:6f:b4:20:2f:95:81:
                    ad:f7:62:44:2e:c8:87:cd:db:a1:04:88:e3:62:f5:
                    32:3d:12:2f:56:73:f0:49:7b:14:0c:c2:0f:f5:14:
                    f4:79:44:5b:28:e6:8d:cf:c3:6f:9b:0b:35:01:2f:
                    ec:64:28:e2:0f:66:cd:64:26:3a:c9:ef:63:dd:93:
                    e6:11:74:72:95:dc:db:4b:10:0b:3b:ab:99:5f:bc:
                    17:44:be:8e:75:67:1a:2c:56:af:be:17:4d:65:0e:
                    97:dc:2d:aa:25:8d:b5:ad:32:2e:23:0c:53:cd:6c:
                    30:74:ac:e3:e1:86:c7:8b:b0:74:c1:57:58:54:b2:
                    00:6d:61:96:65:2b:2f:94:a1:12:41:c5:68:55:34:
                    65:82:f3:bb:27:05:10:bf:f0:32:c3:90:a7:05:bd:
                    dd:e2:6e:af:85:6e:70:68:5e:ba:94:fb:b2:18:79:
                    cb:a7:27:57:9f:cc:a7:a4:aa:d1:10:68:53:dd:d7:
                    d6:22:a6:2d:45:4a:6d:e3:b9:11:8a:9f:d6:dd:c7:
                    84:bb:c2:cf:08:ef:58:f2:be:71:b6:24:de:26:5b:
                    c7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D9:86:F1:7E:46:12:5B:79:60:F1:40:90:C2:0A:98:89:B2:33:27
            X509v3 Authority Key Identifier:
                keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:bd:47:a4:e9:6b:b9:f0:b2:db:40:2b:73:3f:eb:4a:8d:6b:
         8f:de:73:fe:b7:d3:b9:ac:c3:8f:b0:ff:4f:ca:71:e7:23:85:
         e0:1d:8c:c9:d1:14:e9:ab:3c:3d:69:4c:a1:a2:e4:d4:b5:02:
         03:3b:f0:8d:e9:aa:ba:83:ec:bd:f8:1f:31:4c:51:57:2d:37:
         1c:90:a0:4d:1a:64:d5:98:48:77:f2:59:24:cd:85:1b:99:59:
         6b:bd:82:af:cd:2a:80:ad:6a:56:2e:24:93:de:fe:ca:68:31:
         3f:de:61:39:77:1e:21:81:66:f0:b8:d1:a4:83:5b:36:9d:61:
         ec:74:d7:8a:7d:16:49:38:0b:b1:e8:20:d7:37:39:41:0c:22:
         9c:2a:a9:b9:9b:7f:1d:8a:1f:85:ac:70:0d:9b:eb:46:cc:48:
         10:b0:ec:f9:85:f2:96:f2:7b:22:82:ac:69:7e:c6:b2:04:28:
         54:3d:30:71:d3:b8:cb:8c:80:ce:d4:5a:9d:87:d7:0d:7b:a6:
         c6:97:1e:98:12:c2:f4:57:b8:d4:30:73:15:c2:5e:60:da:e2:
         fd:ad:ee:05:1a:57:a0:92:34:2b:3a:93:a9:7e:54:14:44:90:
         b7:c8:d3:d8:ab:cd:4b:1c:5a:08:8e:05:bf:ad:7d:f4:c6:e6:
         c2:64:f4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:07:07 2026 by rpki-client