Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
File:                     bdtHI7M7T3LSCoxqi8xkakeAFwU.mft (raw, json)
Hash identifier:          QpFeDmWrXtZZrfe34OSQI8tUop/LGSci0sHh7FMJlus=
Subject key identifier:   4B:9B:5D:29:94:35:29:DA:83:3F:49:BA:DF:70:3A:5D:78:9D:32:8B
Authority key identifier: 6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
Certificate issuer:       /CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Certificate serial:       01A0CC3597A76923017CAAD359A20556DCE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
Manifest number:          0281
Signing time:             Wed 23 Sep 2026 03:00:59 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:59 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:59 +0000
Files and hashes:         1: bdtHI7M7T3LSCoxqi8xkakeAFwU.crl (hash: iCcHR5lSeRk1Mm0VUomhqWjkMXBGXJ4hbnPAZhFEGZE=)
                          2: eHp3RyfgNuQHsHsh65tMdSg96kw.roa (hash: Iz+ORoiDtNl1WNlxhQ85YUq+HSrXSAnu/AXImybgG6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:97:a7:69:23:01:7c:aa:d3:59:a2:05:56:dc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
        Validity
            Not Before: Sep 23 03:00:59 2026 GMT
            Not After : Sep 24 03:00:59 2026 GMT
        Subject: CN=4b9b5d29943529da833f49badf703a5d789d328b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:f2:4e:f9:8e:6b:44:61:1e:6b:99:db:ea:
                    f2:13:b7:69:6f:79:cf:2c:c7:30:ee:64:8e:3f:a3:
                    04:00:32:b4:9b:8c:3a:ca:f5:55:06:6e:47:1e:fc:
                    fe:c9:10:9e:12:32:06:20:93:db:3f:28:79:15:ef:
                    67:8c:84:d3:d9:8d:7e:82:89:94:66:41:f4:0e:38:
                    16:8c:4d:c8:30:d2:b8:6e:5d:be:b5:03:58:c9:8f:
                    9f:02:c2:6b:a3:42:57:72:1a:58:a6:1c:ec:f8:50:
                    01:3f:62:ec:e4:97:62:f2:42:b5:25:82:1f:6e:19:
                    e8:8b:8d:0a:36:f4:4b:55:75:31:65:7e:f9:4c:37:
                    89:a3:c9:85:4a:3e:55:b7:eb:3a:62:b6:31:b1:45:
                    82:02:c5:36:14:e0:e7:2d:ea:96:dd:a4:42:65:e5:
                    3a:35:61:5a:5d:f3:ee:b5:ea:4b:77:08:81:a8:d2:
                    b6:2b:97:af:cd:9f:33:ac:12:2a:2e:fe:2a:ab:cd:
                    18:9d:29:e7:10:1d:17:99:68:df:31:4b:b9:a1:c5:
                    e2:0c:4e:df:c7:2e:c5:f3:cc:1b:37:6f:48:66:5a:
                    0f:a9:a9:c2:66:58:ad:2e:cd:ce:c0:fc:15:ac:a7:
                    71:6c:89:d7:55:c3:16:d5:a4:4a:22:cb:6c:c2:63:
                    fa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9B:5D:29:94:35:29:DA:83:3F:49:BA:DF:70:3A:5D:78:9D:32:8B
            X509v3 Authority Key Identifier:
                keyid:6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:88:76:be:cf:f6:8b:95:25:eb:b4:79:07:c5:09:d8:25:3c:
         61:45:bb:46:e5:83:54:f2:30:59:59:5d:94:e6:50:6d:33:8f:
         57:dc:b2:9a:7b:a7:ed:8e:ff:3b:e4:a0:28:2d:df:8d:53:3a:
         2c:1d:bb:77:9b:f6:f5:6c:6a:f1:b0:8f:67:da:08:73:4d:fb:
         3a:d1:ff:15:b2:8f:d5:98:7f:b5:5c:1a:81:58:a4:f9:70:b5:
         5b:35:21:4b:52:69:7b:33:49:37:57:ec:8d:09:e2:fb:54:28:
         b0:ba:d3:de:7e:f6:cd:ae:35:d1:e6:63:84:d7:fc:d4:b2:65:
         88:3d:01:c7:bc:e4:99:9c:3d:01:0a:ef:c5:8c:9c:88:74:52:
         2e:1f:c3:f1:bc:2a:22:87:2b:2b:3e:8d:2a:7f:4e:82:d5:84:
         e6:86:45:a6:8b:e2:44:86:8c:21:59:f7:db:a8:c0:12:ba:d8:
         bb:60:d9:8a:f0:4f:31:3b:2a:6c:53:89:3d:d1:60:91:5b:5a:
         7a:5c:a5:c7:0a:ee:06:2e:3e:b7:f0:41:19:bc:e0:39:62:79:
         dc:5d:e5:a0:1b:95:6c:dc:70:4b:52:71:f4:6b:52:10:89:87:
         ca:34:3c:24:bc:f9:3a:6a:a6:68:e2:c9:89:6c:14:e3:6d:3b:
         b5:67:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:19:37 2026 by rpki-client