Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          Ux2qdwmf57yn/m1cYYLIE5pWWquqymMPKwu8jqv3SgY=
Subject key identifier:   50:74:81:59:37:9B:D8:E7:CE:6C:8A:AD:31:B0:2D:F5:A5:CD:B7:96
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       01A0CF6D1E3387D3FE2EC15612E848357320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          075D
Signing time:             Wed 23 Sep 2026 18:00:29 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:29 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:29 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: 9w+1cJN0iQdjPdLnleHQZ+y9uiWYRZFlist1iZLRoQg=)
                          2: hcqZCPDvPSfZpsnstBmJSYUoG0E.roa (hash: 2rsfgP2jZdPy9F0m+kXCLPK5gqhv9//1FnvVgzLaUiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6d:1e:33:87:d3:fe:2e:c1:56:12:e8:48:35:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: Sep 23 18:00:29 2026 GMT
            Not After : Sep 24 18:00:29 2026 GMT
        Subject: CN=50748159379bd8e7ce6c8aad31b02df5a5cdb796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:ce:cd:e0:8d:b8:7d:6e:14:dd:80:ce:fe:
                    aa:df:98:77:46:80:76:f6:b2:94:1b:6a:93:49:3f:
                    c9:aa:34:48:a3:48:ce:0d:35:55:53:54:25:59:74:
                    07:8b:a3:fc:34:0f:06:8d:dc:c6:cb:61:5c:33:8e:
                    2d:a9:3e:89:10:76:71:f3:77:4e:bd:cb:21:1c:eb:
                    67:ee:5b:72:40:cc:4e:af:61:c4:b9:34:35:63:4b:
                    fc:56:c6:03:d6:48:28:7b:c6:c5:a2:e1:d6:61:71:
                    03:c7:1c:f1:8c:e1:28:e3:62:12:b8:26:a1:6d:38:
                    cf:92:87:6b:26:b6:9c:4f:49:3f:14:bb:4d:8c:aa:
                    aa:a0:18:10:93:c0:8c:0d:04:a2:af:a3:6e:de:d6:
                    14:2c:59:d3:32:72:f2:d0:26:fa:b7:26:6c:1f:29:
                    b2:0d:40:f8:e2:4a:99:0f:ec:9f:9c:0f:6e:bf:a3:
                    cb:4c:45:c1:96:1e:5f:85:85:2b:a0:d3:19:0a:57:
                    1b:6a:d4:90:02:0c:a0:36:df:4f:0f:c3:ee:93:f3:
                    db:62:74:d9:9a:10:91:38:60:ae:61:5f:86:41:55:
                    27:0a:6d:c5:e1:8b:71:05:c2:1c:cd:83:e2:f3:81:
                    ca:28:27:aa:fc:e0:bd:2b:19:55:82:56:fe:04:97:
                    39:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:74:81:59:37:9B:D8:E7:CE:6C:8A:AD:31:B0:2D:F5:A5:CD:B7:96
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:61:3a:f9:5a:95:b8:4b:ec:ec:42:ac:ea:f7:b3:8f:c0:
         c9:0f:fb:6d:61:97:64:e5:49:a2:81:74:04:b6:b4:b1:7f:e7:
         1e:70:8c:52:bb:f4:cf:54:0e:c8:3f:40:f8:db:21:bb:e9:c8:
         4b:0c:88:c6:74:67:c9:14:21:27:48:9a:1f:ea:8f:5c:f5:57:
         f4:b4:27:de:26:cd:9c:ad:70:f5:bb:05:b6:17:7a:49:a4:47:
         9c:e7:87:0a:23:cd:c4:a2:aa:88:68:e3:f0:98:6e:8d:eb:18:
         1c:23:b1:e1:11:4e:81:ee:6a:43:16:fd:f8:85:b4:8c:d0:b3:
         c4:9d:a9:7e:99:21:2a:8e:90:f5:70:8a:b2:2b:87:1c:8b:c5:
         d1:a1:d9:c0:4f:6e:43:3d:fb:93:d8:39:a5:45:59:c3:66:9c:
         4b:02:b4:c5:94:20:cf:57:fa:e0:c8:43:f8:d1:96:75:a8:3e:
         36:8a:35:99:f8:00:e6:e6:a4:7e:38:bb:22:0f:b1:f7:96:3a:
         ac:b3:db:ab:58:96:a0:e2:7d:a0:1f:ba:0d:ae:9d:52:36:4a:
         4b:df:f9:6d:48:99:60:14:0a:08:76:9b:35:9b:d2:a1:1f:d9:
         2b:6e:8c:c7:d5:39:38:3c:06:3a:4e:bc:f6:3c:86:50:de:ef:
         37:01:e5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:58:17 2026 by rpki-client