Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File:                     Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier:          vCO4WWOWy+OVloGJNx2+CHhNSB0u9Bti1EVss4NAI1Y=
Subject key identifier:   32:CF:CB:4B:AB:FE:17:A4:56:9B:4E:8C:1B:DE:A0:D9:FF:8C:F6:D4
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer:       /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial:       01A0CEFF98C0A0FFDDB9FDB61EDA709786F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number:          1A6A
Signing time:             Wed 23 Sep 2026 16:00:52 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:52 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:52 +0000
Files and hashes:         1: 8XBb8f006dAeg3l4fnfnzsnEQsA.roa (hash: N8WQzeOeKm6GPZPjDggc/GsTVLgLPn7sKtNoO/OiHAw=)
                          2: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: PBw2GyG7gA5VA7wRFhhypTs94iCRdIY4S1s1x4nmqvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:98:c0:a0:ff:dd:b9:fd:b6:1e:da:70:97:86:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
        Validity
            Not Before: Sep 23 16:00:52 2026 GMT
            Not After : Sep 24 16:00:52 2026 GMT
        Subject: CN=32cfcb4babfe17a4569b4e8c1bdea0d9ff8cf6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:33:c0:7b:7e:21:98:ad:ad:35:88:11:5b:
                    5b:be:2d:1c:dc:a4:7b:2b:63:eb:bd:39:1f:29:23:
                    07:ec:c2:0f:0f:ba:53:4a:b2:53:21:4e:9e:65:84:
                    f4:4c:97:90:1d:dc:31:91:71:2b:88:0a:96:86:33:
                    1d:60:11:b1:56:54:24:f5:3b:d3:62:32:3a:c1:d0:
                    86:be:a3:7b:5f:62:38:07:d4:e8:42:fe:3c:74:93:
                    fb:0d:1d:4c:03:e7:9f:33:8f:f6:d9:cf:03:77:b6:
                    fa:1b:77:08:e6:d7:a7:c5:68:0d:b8:9b:d0:4e:e5:
                    09:33:72:5c:64:5e:a4:a8:f4:66:5b:3b:50:c3:76:
                    e3:4a:80:10:f6:c2:ad:56:f2:09:71:5f:8a:81:09:
                    89:bb:d8:58:99:f6:e8:35:de:da:eb:61:47:92:41:
                    94:dd:66:cf:4b:71:73:d0:25:a5:34:4a:3c:ee:04:
                    14:ae:c0:da:40:3b:0b:0b:30:5a:a0:c4:38:a6:05:
                    6f:95:40:1b:38:b8:c6:35:5f:43:c6:3c:bd:cd:1b:
                    29:fc:0e:18:b7:81:06:ad:a8:b2:46:a4:89:1c:de:
                    78:a2:80:f3:6b:a1:c3:e5:6e:ae:6c:54:5b:e2:a4:
                    83:7e:3e:25:00:49:2e:a8:b0:b7:af:4c:ad:fd:99:
                    0b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CF:CB:4B:AB:FE:17:A4:56:9B:4E:8C:1B:DE:A0:D9:FF:8C:F6:D4
            X509v3 Authority Key Identifier:
                keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:39:04:c2:61:f6:59:6a:ad:7b:d7:c5:84:cd:fb:d7:8c:61:
         64:08:c7:5b:83:68:dd:bd:a2:91:fc:d2:69:24:ef:58:77:62:
         8d:c3:d8:56:c9:4a:92:ee:f2:b9:3b:6e:ff:cb:f0:60:87:cc:
         1a:37:75:9e:b4:64:66:1c:9a:db:3d:54:96:e8:92:5c:7b:da:
         9b:73:04:9e:26:76:cf:70:86:55:50:d5:c6:82:ec:c2:b5:b2:
         af:f4:5d:28:a2:ea:94:4b:eb:93:d8:a4:bc:82:6c:ec:f2:d0:
         97:42:bd:4f:79:bf:a4:8f:c5:57:81:34:fe:6f:a6:c3:9c:66:
         06:a3:25:87:b0:b2:d1:5c:73:ee:7b:4a:60:67:79:8d:a7:c0:
         f9:93:86:90:b9:34:52:75:9b:47:22:d5:1b:8a:5c:58:b0:fc:
         93:61:d2:83:d1:45:12:43:fe:22:77:db:5e:20:17:b8:42:ed:
         98:12:57:0e:bd:a9:35:b4:bd:5d:f9:72:ff:37:78:4b:ec:04:
         2e:8c:60:c3:41:e8:b8:8c:c7:4b:ae:d5:11:ab:df:25:42:91:
         28:7a:09:b2:cc:a0:5d:e0:08:c4:52:ba:45:e5:16:6a:30:05:
         9f:eb:0e:29:3a:64:33:39:7f:6e:cf:60:7d:9c:e0:b8:e8:06:
         22:e4:7f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:44:06 2026 by rpki-client