Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File:                     BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier:          DfVLoS5d5E36jwTl9QOQPP10a5jR9swjbv1RB9SLonU=
Subject key identifier:   20:2B:5F:38:86:BA:F3:D9:84:6C:EC:A1:16:29:B0:37:A8:53:FF:24
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer:       /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial:       01A0CBC77703D7D90298DA8173B3A226F9FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number:          19FB
Signing time:             Wed 23 Sep 2026 01:00:41 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:41 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:41 +0000
Files and hashes:         1: 6MGzgKRGAEVBJeFLAAA-0hwv8bM.roa (hash: c/OSFg+Ab/thk2V2RHBcooUkY2+y8JbiSIvQdXTA9a8=)
                          2: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: TOo6GVIyTgxjHPt9V7TwtYMMhq/FYipGqaN4jCPCbqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:77:03:d7:d9:02:98:da:81:73:b3:a2:26:f9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
        Validity
            Not Before: Sep 23 01:00:41 2026 GMT
            Not After : Sep 24 01:00:41 2026 GMT
        Subject: CN=202b5f3886baf3d9846ceca11629b037a853ff24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:03:c0:d6:1d:f6:77:0b:eb:3e:aa:6d:56:
                    61:f2:45:a7:8e:18:a8:9e:f1:64:e6:b6:85:d6:90:
                    16:2c:3e:09:c6:9d:80:7c:3d:f5:76:93:d3:03:ea:
                    a3:b8:8c:b7:2d:bb:ea:28:f7:2e:e1:75:eb:f4:2f:
                    50:66:fb:c7:45:47:3b:52:66:1a:e3:cf:da:58:f0:
                    96:4f:44:c3:dc:16:1f:83:cf:23:40:9f:6a:74:e7:
                    ab:ba:44:41:f0:18:a1:60:68:13:17:a2:a4:31:50:
                    98:47:db:b1:05:23:b5:ff:00:e5:85:b8:b7:86:44:
                    87:1d:c5:24:87:04:3d:77:3a:cf:b5:d4:5b:2a:f5:
                    e8:28:75:1f:a9:c5:08:8a:b3:8e:d3:99:35:f9:1d:
                    7e:3c:d9:dd:60:dd:ab:c5:2e:97:3a:ea:d2:fc:48:
                    f0:fd:fe:f5:9f:fb:64:bb:01:4b:c6:42:63:84:6e:
                    b7:f0:7a:c5:a3:e3:21:be:95:f4:64:9b:86:b5:04:
                    1e:c8:59:3b:34:f6:b1:bb:34:ef:e4:7d:f8:29:b1:
                    72:d4:86:6d:38:f5:b4:85:bb:d5:3e:3d:41:14:8e:
                    a3:8a:e9:72:dc:90:f4:9c:20:93:b0:60:fa:5a:2e:
                    0b:8c:d4:13:09:2d:0b:b8:a4:ff:26:39:dd:e9:2c:
                    cc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2B:5F:38:86:BA:F3:D9:84:6C:EC:A1:16:29:B0:37:A8:53:FF:24
            X509v3 Authority Key Identifier:
                keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c9:d0:e3:8b:71:53:91:c6:54:69:07:43:ec:da:47:f2:3f:
         b6:75:34:58:24:7c:05:88:65:ef:9f:df:c1:dc:c6:1c:e4:71:
         f6:e0:62:81:69:f1:18:88:5d:c8:2f:3a:96:23:1f:f0:42:ef:
         11:39:a3:a8:ab:68:51:f4:18:bb:b2:af:7b:2a:13:93:c8:96:
         42:5c:0c:47:6b:33:56:81:ea:73:77:cd:6e:be:7f:58:d1:5b:
         52:7c:09:c4:d3:62:86:40:51:94:ee:56:4c:06:8f:06:ca:ab:
         87:63:ab:f8:78:10:dc:d9:da:0c:a0:16:4e:b7:82:8e:7b:38:
         21:8c:5e:37:f4:13:ca:4f:1d:7e:4e:5f:4e:4e:f0:78:d8:a5:
         28:77:bd:c2:d9:c8:5d:f5:23:47:21:c2:27:99:22:e6:34:18:
         f4:c2:a2:08:dc:fb:9b:bb:c9:84:95:0a:d1:4f:0b:bc:43:9d:
         39:5d:71:e9:7d:24:1d:8d:0c:4b:61:b8:69:c3:b2:2e:c5:f2:
         4e:fa:61:e4:b5:a5:e7:ee:9c:4b:f6:06:f7:96:6b:e8:1c:ad:
         f5:0b:c8:16:b9:87:bb:56:96:d0:2d:73:33:bb:27:aa:57:03:
         21:52:d8:6f:9d:23:7c:b3:12:ee:72:be:59:0c:56:d7:cd:3d:
         97:36:0f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:38:12 2026 by rpki-client