Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
File:                     Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft (raw, json)
Hash identifier:          bHNmS8+9DQjGqE8m7EI0W2G6nDiyfHbv6GZY4qpNqDU=
Subject key identifier:   A8:97:EF:1E:3F:F7:12:D1:77:69:48:E0:51:99:54:73:9F:37:42:B8
Authority key identifier: 05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
Certificate issuer:       /CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Certificate serial:       01A1005B1D741DBCCDBD813A15DD5629FA40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
Manifest number:          FE
Signing time:             Sat 03 Oct 2026 06:02:13 +0000
Manifest this update:     Sat 03 Oct 2026 06:02:13 +0000
Manifest next update:     Sun 04 Oct 2026 06:02:13 +0000
Files and hashes:         1: B2xA4r-YaWuzxF9e9Bejx8Nv8ow.roa (hash: BJSQF7U6lyI4DjZVMUaEYkHTgkb9afW2KgWbmWHAUr4=)
                          2: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl (hash: OSv5Qr/f3WZpY7VvEdt2jgDbF2sHbikWL12VziJA4Vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 06:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:5b:1d:74:1d:bc:cd:bd:81:3a:15:dd:56:29:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
        Validity
            Not Before: Oct  3 06:02:13 2026 GMT
            Not After : Oct  4 06:02:13 2026 GMT
        Subject: CN=a897ef1e3ff712d1776948e0519954739f3742b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:8f:08:c5:f8:ca:84:92:e5:fa:b4:08:a4:
                    9f:61:b0:10:78:d5:96:9d:48:cf:b9:c0:57:bf:5d:
                    0c:63:a0:cb:00:dd:60:26:fa:8e:d1:03:3e:a1:7c:
                    7c:a7:d5:55:c8:50:1d:b0:86:f9:3c:af:a0:5e:01:
                    65:d8:91:34:b6:4b:f7:08:5e:1e:90:03:fb:9e:2c:
                    93:bd:b2:6d:85:91:cc:8e:a8:2a:ca:62:f4:14:2b:
                    d0:10:87:f9:51:34:5d:7a:73:47:42:ff:63:98:c2:
                    ab:a3:41:9d:a8:2e:97:24:41:8a:cc:ed:01:54:4c:
                    fd:3d:60:9b:35:83:d3:bc:19:01:73:0e:b1:7f:e8:
                    21:4e:84:c1:95:c7:89:06:5f:26:17:bc:f2:e4:f4:
                    4a:d0:14:94:c2:ce:83:c9:25:aa:b6:56:65:a2:21:
                    7f:e9:9b:90:cd:59:67:de:47:fb:c8:b0:96:44:b0:
                    b9:36:a0:3d:ff:40:8f:47:46:d2:7f:f8:14:97:b8:
                    3c:49:de:6e:b1:fc:13:ac:7d:b9:3a:d5:cf:24:ba:
                    a2:70:fa:4d:6a:2c:5a:dd:82:f1:04:fa:06:0a:0b:
                    8e:4f:f4:ef:be:63:23:2f:38:6c:f6:b4:61:9a:49:
                    6f:fa:66:71:f0:43:dc:7e:9c:d6:f4:ae:02:c9:1b:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:97:EF:1E:3F:F7:12:D1:77:69:48:E0:51:99:54:73:9F:37:42:B8
            X509v3 Authority Key Identifier:
                keyid:05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:35:f1:9d:35:0c:92:cc:95:97:bf:09:5e:9a:16:9f:87:5e:
         d3:96:a6:53:64:5e:6d:d3:ed:3b:0d:0a:65:15:d7:49:f3:c0:
         35:32:55:d8:f8:69:8e:6d:a9:d2:82:55:6e:05:42:95:99:27:
         a0:35:3b:71:fa:0f:39:e9:33:86:53:ea:ea:6c:8c:8c:79:96:
         32:4a:e9:16:a7:af:85:68:92:0a:4d:ef:46:32:14:4c:1f:31:
         e7:dc:d2:fa:c2:8c:41:32:eb:ff:ca:f4:cb:d4:54:b5:d7:68:
         94:ac:69:62:21:ce:d6:32:53:24:38:a6:e7:8c:35:51:8d:07:
         35:99:49:84:5a:d6:44:5a:09:44:a8:4e:cf:40:48:b6:00:06:
         10:81:a5:a7:f2:46:ce:7f:ab:18:e0:3d:e6:73:61:b7:88:31:
         0c:26:db:b6:0e:a9:f9:97:c2:95:67:e6:30:3a:a2:ac:67:67:
         10:93:ec:6b:70:1a:6e:1d:b2:96:03:83:98:2f:fd:f5:11:fc:
         41:3c:21:77:11:55:ae:fd:f5:5a:5b:2e:e6:cd:df:3f:a3:98:
         aa:e2:10:4d:e5:d1:75:ac:fc:c4:2c:61:cb:1d:b0:02:80:b3:
         c7:cb:bf:49:d1:ba:3d:d4:56:33:91:4a:cb:2c:46:2c:f7:89:
         0f:ba:24:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 16:31:08 2026 by rpki-client