Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File:                     Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier:          mwqLmmrFj+9UL9Vd+UY4YDAkL1Z8JK8MFKtMJ5kD+Rc=
Subject key identifier:   E1:92:10:E0:68:FE:68:B0:2A:72:DD:8B:11:C2:D9:9D:43:AE:8E:08
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer:       /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial:       01A0D493E2BD7743472A80327E73EF3085EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 18:00:56 +0000
Manifest this update:     Thu 24 Sep 2026 18:00:56 +0000
Manifest next update:     Fri 25 Sep 2026 18:00:56 +0000
Files and hashes:         1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: wor/JKdb4UYrs2xCSRMMPfrQRt6CEPDz1d/YAf7jDgI=)
                          2: JKANABqd6E0fTlpYiraRYYJi5Is.roa (hash: kpgkNjTCyYCDSV5Bfn9GBPVaDYU8s9QPiJ/Y5QzbmG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:93:e2:bd:77:43:47:2a:80:32:7e:73:ef:30:85:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
        Validity
            Not Before: Sep 24 18:00:56 2026 GMT
            Not After : Sep 25 18:00:56 2026 GMT
        Subject: CN=e19210e068fe68b02a72dd8b11c2d99d43ae8e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:07:93:c3:4b:55:c6:46:4e:08:8b:1a:fe:
                    45:8e:f4:c4:12:67:76:f4:da:bf:4e:82:57:d5:15:
                    56:48:69:0e:32:2c:da:2a:85:37:c5:17:1a:22:b8:
                    89:c6:6f:f4:ae:67:4d:45:6e:cd:69:6c:78:46:02:
                    a1:2c:94:03:06:31:34:9c:53:56:fd:c9:a2:89:15:
                    e3:81:f6:b9:a6:77:cf:da:1d:57:fd:22:a8:61:b6:
                    82:c9:a3:5e:a9:49:5c:ec:fe:f8:18:17:5c:21:6b:
                    80:f5:63:72:1b:0f:3a:86:20:3a:c7:e2:f4:ec:83:
                    41:2b:9d:d1:57:a7:7b:12:96:67:5e:c2:10:3c:a7:
                    ee:73:07:6a:22:94:1b:02:b8:49:54:3b:23:01:0e:
                    b6:dc:b2:48:3d:b7:1a:1a:aa:eb:a8:3a:3f:2d:c4:
                    db:e2:35:8a:72:dd:6f:59:af:f7:de:bd:8b:63:e0:
                    a6:e2:e3:49:62:e6:e1:cc:3a:70:b7:85:cc:a4:74:
                    93:19:72:43:b8:3e:59:99:82:37:a6:8a:e9:25:db:
                    49:05:1f:2a:c6:42:ee:da:3e:2d:c8:39:98:c7:e6:
                    85:b9:6c:a1:73:51:d2:ec:a3:52:2d:d4:1b:51:b1:
                    82:20:fd:4b:f7:45:37:6d:d3:07:ab:be:da:e8:7c:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:92:10:E0:68:FE:68:B0:2A:72:DD:8B:11:C2:D9:9D:43:AE:8E:08
            X509v3 Authority Key Identifier:
                keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:59:74:e5:a5:fb:22:01:d4:b7:76:40:82:32:40:58:56:c3:
         a2:3e:5d:94:c4:63:b4:32:1b:44:38:9c:3d:5a:29:29:ce:1e:
         5e:cc:71:a7:26:49:04:60:ef:1e:e2:a6:d4:d6:6d:15:92:22:
         ef:4a:4a:86:4e:6d:ec:81:cf:13:2e:28:65:1d:75:0d:f8:0b:
         2d:a9:0b:ff:82:c7:57:9b:ed:a4:86:10:83:60:1d:a0:10:4e:
         95:8d:d6:75:bf:b0:af:3e:ce:2f:9f:75:8b:be:fb:f0:e7:71:
         66:ee:7b:fa:6b:ac:bf:9b:66:b6:fe:e9:5f:3a:88:c3:06:e1:
         9a:21:a6:e9:fa:21:f0:4d:55:06:6d:e4:31:af:5a:00:ba:31:
         1a:46:d9:f3:1e:10:b2:7e:bd:d2:eb:96:1d:8b:67:1f:e3:2e:
         6c:9b:9e:ea:ea:74:9a:e0:ab:68:0e:fc:f9:8b:6c:d1:39:d1:
         d3:0c:6d:06:c8:dd:28:07:70:ae:75:ad:f5:c3:0a:68:a2:10:
         2e:2a:4a:ba:26:24:fe:ff:0c:3e:37:bf:0b:fa:3b:e2:90:f1:
         fb:f8:59:d6:ab:90:c3:9a:19:33:96:dc:64:1e:a0:90:1e:21:
         c0:2f:87:30:e2:d9:57:91:5b:cb:ee:c0:1b:98:2e:05:d2:89:
         c0:8b:24:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:56:27 2026 by rpki-client