Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
File:                     bdxuUU9PYurbPicQ6snJ8vBkX3g.mft (raw, json)
Hash identifier:          0VsPtZk75iCVxbLbm58dQURTtq2S2dmonncIZnSOSJg=
Subject key identifier:   DB:CB:26:B4:5E:3E:88:C5:45:1B:60:16:3E:BD:CE:98:3B:91:9A:BD
Authority key identifier: 6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
Certificate issuer:       /CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Certificate serial:       01A129561CE8623026D68D51E6035370AAF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
Manifest number:          0348
Signing time:             Sun 11 Oct 2026 05:01:11 +0000
Manifest this update:     Sun 11 Oct 2026 05:01:11 +0000
Manifest next update:     Mon 12 Oct 2026 05:01:11 +0000
Files and hashes:         1: IIP1y0Ygnnk-m9njlLkFRgHOiJQ.asa (hash: MQcB8erVJ5t0mt5m65SC96rSPLoGOQd4tXoTWIovg1Q=)
                          2: bdxuUU9PYurbPicQ6snJ8vBkX3g.crl (hash: NrJ5HvNrKdW5Pa8heTVL27p7nSnxBjv4HdJOrYF9nHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:56:1c:e8:62:30:26:d6:8d:51:e6:03:53:70:aa:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
        Validity
            Not Before: Oct 11 05:01:11 2026 GMT
            Not After : Oct 12 05:01:11 2026 GMT
        Subject: CN=dbcb26b45e3e88c5451b60163ebdce983b919abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:46:00:69:4c:c9:18:33:e8:c3:b0:f4:91:
                    69:7d:e7:fa:e6:8e:cd:a5:89:57:13:cf:13:f9:54:
                    25:ce:9d:d7:15:36:9d:4b:29:84:41:54:0a:0c:7d:
                    4d:c4:bf:3c:20:d1:f9:88:4e:f1:35:75:2e:65:dd:
                    66:bd:bb:22:37:a6:d2:21:0a:e1:08:db:83:1c:96:
                    df:9b:d9:f2:b1:6e:55:0c:74:af:f7:07:2f:48:99:
                    f7:2e:3f:39:86:47:a6:ae:88:ea:5b:f2:e9:18:9c:
                    e0:0f:06:83:f5:e7:1b:4d:e9:62:5f:ba:68:03:ff:
                    bc:8c:45:29:f4:a6:e9:ac:cc:d2:3e:63:91:60:58:
                    be:44:23:64:2a:49:52:b6:50:b8:f4:f0:4b:af:62:
                    6c:aa:5d:31:25:70:e8:51:76:b2:fa:07:43:8d:8c:
                    4a:73:31:10:d8:9e:74:d7:06:61:d1:e1:8c:81:21:
                    e9:6d:cf:dd:e9:4f:1e:96:cd:b4:ad:b5:83:54:af:
                    62:74:af:f8:51:ba:57:ac:f6:33:8b:94:15:7a:76:
                    a7:80:c6:b1:d2:ab:d6:ba:df:b0:76:03:8a:7e:90:
                    9d:e6:b7:4d:ad:f7:c0:9c:8e:30:6f:0a:d6:24:1b:
                    c2:87:02:23:e8:01:be:af:d0:05:4e:cf:e7:00:98:
                    7f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CB:26:B4:5E:3E:88:C5:45:1B:60:16:3E:BD:CE:98:3B:91:9A:BD
            X509v3 Authority Key Identifier:
                keyid:6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:28:76:1e:52:0a:3d:27:c4:67:94:ff:60:bb:d2:fe:a1:8e:
         1d:90:fd:96:5a:a4:9c:63:85:77:5d:24:ec:16:d2:df:ef:8c:
         0f:35:c5:e0:6a:27:bb:20:b8:46:9b:8a:b6:e2:18:70:aa:14:
         00:f8:bb:ff:0d:89:fe:2c:88:b7:41:0c:f9:40:a8:e8:56:49:
         80:5b:95:1b:ba:db:1e:ca:09:9a:d9:ba:44:ae:3a:b4:82:da:
         87:9b:e1:31:ce:07:b4:98:42:ff:6d:11:1b:d8:74:23:45:ff:
         20:0b:65:a8:a4:44:e0:be:50:2f:b7:22:ae:fa:30:09:7a:34:
         85:6c:eb:02:ad:ae:b3:b1:42:a2:04:48:c2:d0:b4:a3:9e:fd:
         73:38:30:ca:5e:b8:19:f0:9b:17:7c:13:dc:55:df:3a:c7:a4:
         ab:fa:b2:1a:22:f8:5d:44:e2:16:05:5b:8d:d0:39:37:6d:93:
         ba:53:15:60:86:b4:97:f9:0a:59:f1:f1:50:b2:a2:92:b6:64:
         42:d2:48:4f:f8:e2:03:91:4a:4a:5c:56:63:00:3e:bc:a4:a4:
         71:52:83:e4:fa:ed:b1:7d:a0:66:e2:9a:c6:f2:11:b5:fa:d3:
         89:a5:f1:91:ca:b6:c6:82:9f:13:f8:24:9b:e9:4a:98:9a:d8:
         c3:1f:0f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:36:05 2026 by rpki-client