Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
File:                     BtCToXdsCFomSP94tM4f5BfFY10.mft (raw, json)
Hash identifier:          52zPQZNdyclnf5uuCTRtYB3RH7So1ze0IrIejYA9eQk=
Subject key identifier:   05:91:37:4F:2A:40:4E:27:25:0D:36:9D:6A:63:2C:A9:76:16:12:89
Authority key identifier: 06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
Certificate issuer:       /CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Certificate serial:       01A1DA9417FE5D98F563EFF3F9931E3A7BE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
Manifest number:          14F1
Signing time:             Sat 14 Nov 2026 15:01:40 +0000
Manifest this update:     Sat 14 Nov 2026 15:01:40 +0000
Manifest next update:     Sun 15 Nov 2026 15:01:40 +0000
Files and hashes:         1: BtCToXdsCFomSP94tM4f5BfFY10.crl (hash: F39zdmIo3zZ3TXWZRx1OFXOhLjKmKdvCSm4TneF1HlY=)
                          2: WYjLSaMGcDVPun0w5caUa6SyhAw.roa (hash: anCxFP8+izWbbd8RY7CAFyWBE9Qml7hPuy8Dd9kuR+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:94:17:fe:5d:98:f5:63:ef:f3:f9:93:1e:3a:7b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
        Validity
            Not Before: Nov 14 15:01:40 2026 GMT
            Not After : Nov 15 15:01:40 2026 GMT
        Subject: CN=0591374f2a404e27250d369d6a632ca976161289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:39:9d:d5:fc:3b:80:30:12:50:0a:f7:b5:
                    a1:d4:14:1d:f8:27:55:bc:46:8c:e5:c3:9a:48:c9:
                    a5:f5:81:f4:84:6a:18:54:65:45:00:a1:29:b2:68:
                    d1:25:dd:f1:a8:65:29:f4:25:41:33:12:0a:13:31:
                    e6:1e:09:42:4b:b3:31:b4:39:91:79:44:0b:38:ff:
                    36:92:fe:d4:46:21:da:15:55:60:51:d6:bf:cd:c2:
                    ea:af:93:be:ed:a5:67:f8:5e:21:68:60:cc:28:e9:
                    6f:29:3c:34:75:75:34:5a:0a:ca:32:51:3b:cf:7d:
                    28:44:96:10:92:58:6a:8f:1f:90:6b:c2:8d:56:f6:
                    2e:df:97:3b:42:d3:d7:fa:c0:6b:14:ac:af:ce:5f:
                    d0:cb:b8:7b:f5:40:ce:c4:b6:72:52:7f:f4:2c:6c:
                    07:39:df:a5:11:60:35:90:be:8f:db:04:17:96:a0:
                    aa:12:4a:bb:b7:88:99:81:8b:ea:5d:11:aa:d3:67:
                    1d:b4:ef:22:27:e9:70:cb:0c:45:9e:58:63:8b:56:
                    87:d6:d5:4d:b5:e0:14:03:c4:8b:13:94:33:a0:9b:
                    80:87:d2:59:a8:3a:ae:72:8a:ba:96:3d:9f:57:f3:
                    26:d4:b4:c9:54:86:1a:23:b6:4f:1b:01:80:d5:58:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:91:37:4F:2A:40:4E:27:25:0D:36:9D:6A:63:2C:A9:76:16:12:89
            X509v3 Authority Key Identifier:
                keyid:06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:11:27:7b:0b:8f:61:fb:af:52:45:03:6e:a7:bc:94:22:79:
         3c:14:ba:43:18:90:f3:c4:aa:9f:6a:8a:ef:39:97:77:ba:18:
         8f:8b:11:97:ac:3a:d9:3f:8b:c4:aa:c7:37:e8:2c:93:09:40:
         6b:3b:3c:06:42:25:e0:9c:45:95:62:22:b3:f7:3c:c1:3b:2b:
         57:57:7d:bc:9d:e5:19:27:6c:ea:08:eb:9c:94:74:f3:18:7b:
         73:31:1a:b0:83:72:1e:e2:5d:bc:f2:98:e0:01:5e:ee:34:7c:
         89:84:b9:5d:9b:5f:bc:3c:d0:14:a1:6b:f7:6e:ff:82:69:8e:
         85:4a:75:f2:6a:a6:1b:88:bb:9c:f6:68:fa:26:c2:3c:83:b3:
         98:ef:1f:f7:6d:5a:4e:48:32:17:a7:37:db:ee:bf:3e:68:0f:
         ef:5f:3d:d7:78:e2:02:cb:a3:82:dd:4d:ca:ad:6b:4c:ee:62:
         89:54:46:68:79:a2:82:9b:be:45:b7:24:10:48:8e:12:4e:c4:
         de:e6:aa:a0:d3:97:13:cc:13:17:a4:37:3b:62:84:77:df:94:
         cb:7f:4a:35:e7:0e:af:a1:aa:ac:f2:f9:9e:ee:e4:c7:2f:1e:
         34:3c:49:b9:0b:d0:2d:be:f7:0c:58:db:2c:95:0a:84:e2:b0:
         f3:a6:16:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:01 2026 by rpki-client