Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
File:                     Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json)
Hash identifier:          D0vwjYeuy9j2mgeLQXs5Ki2Wsx1TmSIZlHwCFFNaCsU=
Subject key identifier:   CC:2A:03:85:3C:71:8A:4D:9B:09:69:D1:1D:45:68:FB:EF:7D:1E:ED
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Certificate issuer:       /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial:       01A1DACA56D9C0F4169070DA32357645D31D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
Manifest number:          129C
Signing time:             Sat 14 Nov 2026 16:00:55 +0000
Manifest this update:     Sat 14 Nov 2026 16:00:55 +0000
Manifest next update:     Sun 15 Nov 2026 16:00:55 +0000
Files and hashes:         1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: sagxHGZTagkHkH64CpLj4+1LIvd7Cj2vvJ9E/qPTD4s=)
                          2: kSI4irkD9U8KDXqCeEKiZkl6aR4.roa (hash: PoZR+wKPBBgyzuCqmdDQdwcuOsR3JlozNGdHHFlennk=)
                          3: oPMPQL97ioOPzcI3nCulVuvoz9s.roa (hash: sBtKUfuDXNASlU06N3GnwSJFJv6yHZNIVqXOTCSz1yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:ca:56:d9:c0:f4:16:90:70:da:32:35:76:45:d3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
        Validity
            Not Before: Nov 14 16:00:55 2026 GMT
            Not After : Nov 15 16:00:55 2026 GMT
        Subject: CN=cc2a03853c718a4d9b0969d11d4568fbef7d1eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:b2:01:5f:93:73:b6:fd:32:f2:2e:9f:0c:
                    9c:8a:92:d1:0b:4f:03:f6:ef:9d:d6:da:29:ca:d0:
                    86:a4:5c:e6:ca:8f:75:71:96:47:a4:c4:39:13:6b:
                    aa:f6:76:57:0b:aa:e6:67:6f:09:c6:0a:8c:78:9f:
                    7e:30:b5:af:e9:14:a7:85:6f:03:ac:3a:ff:0e:76:
                    6f:e3:14:85:2b:3c:05:4f:2d:b9:33:94:c2:fe:f4:
                    c3:44:4c:6a:b3:d3:06:db:cd:6a:bb:36:ae:68:c7:
                    d1:7f:0e:2c:75:4b:b2:1f:bd:7b:b2:f1:27:b4:a5:
                    9c:ce:e1:4d:89:50:de:76:9f:41:4f:a0:55:3c:3b:
                    2d:b0:16:98:fd:69:c9:6c:e1:e1:b7:34:6f:1b:d9:
                    04:81:fe:06:e5:33:36:53:91:2b:7a:4d:86:be:be:
                    a5:06:97:df:2a:6b:16:5d:24:c1:f8:9f:44:df:0d:
                    80:27:0b:d9:67:0d:f9:e5:38:05:d1:c8:8c:77:2a:
                    f1:93:ac:48:bf:42:02:98:20:29:9e:ae:de:77:8d:
                    5d:3f:1c:7e:39:10:5b:a8:ab:34:ae:44:b2:44:9d:
                    e5:35:12:9b:fc:ea:1f:18:72:66:95:1a:cf:5a:45:
                    50:54:12:85:e5:19:24:93:81:64:d7:f7:87:bc:6a:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2A:03:85:3C:71:8A:4D:9B:09:69:D1:1D:45:68:FB:EF:7D:1E:ED
            X509v3 Authority Key Identifier:
                keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8e:f0:ec:2f:c4:01:19:4e:96:c5:c8:b6:16:b1:42:71:09:
         fb:0e:70:c5:7b:37:32:71:fd:ad:1f:b6:c4:f8:5f:f7:4c:73:
         44:5c:8f:47:ac:de:3c:d7:d7:03:ab:b4:66:0d:5e:69:52:11:
         55:45:d8:e2:18:e2:8e:bb:b8:f8:1a:d9:82:09:0e:41:18:71:
         a6:9f:03:36:78:ab:7b:38:d3:2d:78:83:86:4e:b6:19:7b:82:
         36:88:42:74:b8:c8:16:8a:ef:9b:99:46:39:1d:19:ef:a0:03:
         50:7b:19:fd:0e:03:29:1c:02:68:50:ed:d7:96:7a:44:15:9b:
         9a:6e:d8:2a:e6:8d:14:f4:75:fa:ca:31:5d:cc:99:9a:bb:04:
         07:d4:86:80:a8:bb:eb:0b:11:60:06:00:8e:92:26:35:d0:67:
         c8:e0:71:f9:25:7e:33:c1:b6:5b:68:30:36:63:04:58:70:0b:
         4b:09:88:d8:57:2e:9f:42:33:9f:38:ef:27:4f:4b:b5:6f:3e:
         60:96:89:97:99:cb:a1:cf:71:98:da:b8:88:31:f6:a1:36:8f:
         ab:e0:e0:36:10:22:08:af:f3:d3:60:3c:db:e2:7c:98:30:1d:
         3b:e8:a8:60:42:92:22:f5:9a:e9:a0:10:69:fd:f7:d7:85:b9:
         79:ab:98:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:22:32 2026 by rpki-client