Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File:                     BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier:          PpVT+6k5saTwQ6NBzwiyEUU9OwnWfmRuuiXkVWg1hqQ=
Subject key identifier:   B5:2F:38:94:60:46:85:12:EB:5B:2C:96:85:7A:A3:31:BA:14:C5:B7
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer:       /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial:       01A0CD10DF87DE305A61CD40E10D631223A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number:          078B
Signing time:             Wed 23 Sep 2026 07:00:29 +0000
Manifest this update:     Wed 23 Sep 2026 07:00:29 +0000
Manifest next update:     Thu 24 Sep 2026 07:00:29 +0000
Files and hashes:         1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: dUUxOI/FVGWoNB93zeMgGsKUei4b9z5lwSIJ5dnQDqg=)
                          2: oeeUNH_u8HxoB6Gbedq862_OYJg.roa (hash: Xrem3WCbpam6OLjoGPhqcP2mKEQjM9Q29NunWFcGIDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:10:df:87:de:30:5a:61:cd:40:e1:0d:63:12:23:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
        Validity
            Not Before: Sep 23 07:00:29 2026 GMT
            Not After : Sep 24 07:00:29 2026 GMT
        Subject: CN=b52f389460468512eb5b2c96857aa331ba14c5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:db:a6:f3:a8:87:eb:6d:0c:d7:83:a4:69:
                    be:d4:87:03:72:ba:87:91:35:a4:78:b5:d7:cb:46:
                    0d:41:fc:14:97:50:80:0a:7c:0a:1a:70:e8:c2:e8:
                    55:4e:6b:b3:36:9c:5e:5c:f7:b0:42:96:d8:b9:63:
                    eb:9a:1d:ea:bc:f2:24:94:f4:d4:39:e7:a8:e9:56:
                    cf:4d:12:9b:64:b6:a1:99:fa:20:66:0d:c6:fa:3c:
                    9e:73:8a:45:75:39:d2:20:9f:3a:84:a7:4d:47:09:
                    43:fc:1d:94:da:6a:f0:2f:0b:0f:d1:d5:f3:32:a1:
                    c1:0d:f7:d7:8e:48:1c:a7:e8:f7:cd:d9:55:03:eb:
                    9d:75:37:3e:73:62:e6:5d:fb:16:a6:51:c4:18:76:
                    14:ca:a5:cc:40:73:c7:72:54:0b:cf:66:c6:d5:62:
                    a6:59:49:d8:c5:a3:13:08:fb:18:69:3e:b6:2e:56:
                    64:c5:7d:43:c4:4f:7d:52:fa:9d:85:08:f1:d6:dc:
                    7a:3e:16:ab:b4:f3:c3:ab:a8:f2:b3:15:4e:71:1d:
                    c6:93:e8:16:0a:10:aa:e6:76:94:c2:3c:9b:29:29:
                    48:d3:79:c7:2b:cb:e9:78:6d:f4:9a:7d:cb:8b:eb:
                    6d:d4:c8:ae:d4:74:58:02:e2:8c:95:54:7e:84:60:
                    d5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2F:38:94:60:46:85:12:EB:5B:2C:96:85:7A:A3:31:BA:14:C5:B7
            X509v3 Authority Key Identifier:
                keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3d:01:ad:bd:a9:c7:a4:79:42:37:d8:5a:7b:95:72:31:1f:
         98:e9:6e:17:73:87:b5:4d:5e:db:bb:72:81:16:27:e1:a9:1a:
         db:9d:57:9a:83:67:21:fc:90:8e:f9:cb:8e:61:c4:96:53:fb:
         54:82:17:a6:52:aa:27:80:d3:b7:8a:75:22:b7:a1:c0:b3:56:
         e2:2b:68:b0:4b:d0:f0:a8:80:ee:26:3c:5f:b7:32:0c:51:0d:
         0d:b8:16:91:ad:0b:e5:4d:80:79:bf:b2:bf:15:e5:bc:5d:a0:
         38:df:15:61:38:55:44:d6:d9:0f:e8:99:92:b9:dd:ed:be:e1:
         ea:7e:18:e9:20:6e:02:99:5e:9b:5b:9c:61:f6:1e:0e:f6:30:
         0b:75:99:70:6f:76:e9:05:3e:e9:14:c4:95:11:40:9d:5d:f8:
         2e:d4:87:af:0b:2b:01:3e:d4:ca:ea:3b:0f:ae:5f:ca:ff:1b:
         62:12:35:33:66:13:d2:27:f1:02:90:89:79:9f:6a:9c:da:d5:
         1c:0c:91:e6:4f:ca:77:6a:8d:fe:2b:e6:f0:1e:7b:d6:15:75:
         2f:9a:ed:d2:b0:35:5c:d2:20:14:5d:6a:f2:2e:d5:ef:5b:4b:
         b0:67:e2:9e:55:fb:65:bc:34:40:13:79:85:9e:41:bd:3a:f4:
         7e:31:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:15:20 2026 by rpki-client