Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
File:                     BgecQppxRvH5qgSb20LKlRRLdNo.mft (raw, json)
Hash identifier:          2cW9UNwJ+JUCTk4oPNYsWOU8/fP7vRcMPYM+8Jz8yZ0=
Subject key identifier:   30:A4:7A:5F:89:1F:A3:A5:3B:EF:5A:88:41:FE:D2:B4:8D:AB:CE:4A
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       01A0D75F8C1E59FE0F670033361FDD42D296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
Manifest number:          1A7F
Signing time:             Fri 25 Sep 2026 07:02:38 +0000
Manifest this update:     Fri 25 Sep 2026 07:02:38 +0000
Manifest next update:     Sat 26 Sep 2026 07:02:38 +0000
Files and hashes:         1: 29_WowYfqJe9zWky2i9zd1IMKO8.roa (hash: t5yfXmceGMHi1hJ7+A0WmF++eREcNUx+HaoZlDGeCzE=)
                          2: BgecQppxRvH5qgSb20LKlRRLdNo.crl (hash: m7tsLXjiw8vHCYYCPuXXzZiUdVwOEhnK8f/4PRbViyg=)
                          3: CJhVm_eH3bYrt2WK7XOnICKmwB8.roa (hash: o+prHna3ENMxEiyAjzFgmNPv1wWdGR9CaxMHixJBHwA=)
                          4: PygRDMaEgXvgyKAEePuEoN_NztY.roa (hash: W4mQSmac8L1zvb5djZ/uYoHmVInKJKL8/ENtPUuMeGY=)
                          5: SY2RUPr2I46mE_ozmympoAhaX-w.roa (hash: p/god/upKn8qp+kQ4G0jUS1vVblFxTRCzcmR7IGieAw=)
                          6: k1vmFVnn5CjvX41Mnbd99nD_htg.asa (hash: luIsE9S/Vqc7HG61AULLRKQgLE2wgWBSXTpWVm+n2Mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:5f:8c:1e:59:fe:0f:67:00:33:36:1f:dd:42:d2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Sep 25 07:02:38 2026 GMT
            Not After : Sep 26 07:02:38 2026 GMT
        Subject: CN=30a47a5f891fa3a53bef5a8841fed2b48dabce4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:6b:24:46:23:de:4c:38:14:18:57:1e:4f:
                    db:df:fa:e0:e6:93:1f:f7:1f:de:de:fd:04:6a:d5:
                    fc:ca:9d:a4:ea:1a:76:a3:83:ab:49:a2:fc:4b:23:
                    3b:fe:db:1e:d2:b8:4d:fd:8f:bc:24:0d:76:81:ef:
                    f9:46:ed:6e:38:f7:f9:9f:8f:b2:af:38:50:dd:2e:
                    4d:09:d9:b3:47:e1:04:33:b6:2e:20:a7:2b:c8:61:
                    b6:8b:90:e5:d5:16:2a:4b:86:32:04:7a:53:85:b5:
                    d2:e0:73:cc:2a:5b:74:8a:bf:94:74:ba:e3:52:6e:
                    81:c6:cc:66:25:c8:27:b7:90:1e:25:b1:57:df:39:
                    37:cc:be:b3:bb:88:a9:ca:41:1e:69:90:98:1e:4b:
                    c8:30:d1:0e:3b:31:2e:71:fa:63:8f:d6:58:fb:de:
                    04:66:6f:a0:0c:cd:8e:58:67:7c:5c:d4:8b:ae:11:
                    ff:22:e7:38:c9:67:e4:5a:92:b9:29:04:6d:cd:cd:
                    d9:e6:d4:5e:e6:7a:75:61:ff:4c:d5:b6:7c:30:89:
                    a4:7d:87:89:1e:00:47:be:96:3b:37:e4:8d:05:17:
                    d6:d1:97:cb:11:dd:46:1b:71:bd:6a:3b:e6:45:56:
                    ec:15:33:f9:a4:cc:86:65:a5:59:95:6e:54:82:64:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A4:7A:5F:89:1F:A3:A5:3B:EF:5A:88:41:FE:D2:B4:8D:AB:CE:4A
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:7b:fc:9f:6e:81:4f:77:de:cf:c7:6a:2f:8e:74:9c:f9:58:
         ea:1c:e7:6e:f9:d4:ac:c7:57:21:a7:af:df:5e:0e:d2:67:69:
         b3:48:05:b1:3b:61:e5:23:21:4a:b3:c1:12:4e:f3:e7:b6:f3:
         8c:bd:c8:24:91:74:90:d0:31:1f:ab:c8:b7:c9:03:f6:5c:1a:
         6b:fd:af:9e:cd:78:c7:0f:4e:11:2d:17:cc:65:2c:63:15:08:
         b0:6e:bb:eb:d2:77:9b:17:69:ce:01:88:b3:76:00:cc:4b:76:
         c1:77:a8:24:8d:6c:03:a9:7c:76:79:3f:47:6d:34:13:4b:a1:
         5f:d9:c8:a2:72:8c:2e:e1:d2:52:0d:7e:10:7f:66:7c:09:c1:
         41:41:5b:42:6f:1c:d3:33:73:17:2a:a5:d3:2f:ed:c8:1a:03:
         0d:75:bb:cb:06:f4:0d:00:66:a3:c7:d8:43:d6:77:0f:72:e4:
         c3:82:d7:49:41:cd:aa:06:8a:00:ff:db:55:b0:88:9e:16:4b:
         0e:2e:f6:05:0b:7d:09:67:5a:0e:b0:46:2f:c1:6a:a1:cd:82:
         e0:4e:4d:d0:d8:00:99:fc:2b:26:06:33:2d:5b:7c:ba:99:3a:
         fd:6e:3c:a3:0c:37:9d:df:80:7e:99:4f:4c:69:5e:cf:00:63:
         28:95:bf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:10:33 2026 by rpki-client