Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File:                     BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier:          06yADfjynEp9WZM2M28EastnVj34Km6vyBRsx1fiV7s=
Subject key identifier:   E6:CD:9F:81:B6:9C:DB:69:22:32:90:A5:57:E8:D1:73:44:24:05:F8
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer:       /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial:       01A0D570D1032ADCAAA5465D47F4ABD8D3A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number:          0F5F
Signing time:             Thu 24 Sep 2026 22:02:15 +0000
Manifest this update:     Thu 24 Sep 2026 22:02:15 +0000
Manifest next update:     Fri 25 Sep 2026 22:02:15 +0000
Files and hashes:         1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: KkGUdJgL04lbDazVQInb2KA1ROMS53IX9Z8T5gKENw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:d1:03:2a:dc:aa:a5:46:5d:47:f4:ab:d8:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
        Validity
            Not Before: Sep 24 22:02:15 2026 GMT
            Not After : Sep 25 22:02:15 2026 GMT
        Subject: CN=e6cd9f81b69cdb69223290a557e8d173442405f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:61:4a:90:29:6c:92:8d:ee:73:dc:c2:38:
                    e5:bc:10:78:86:b8:ad:12:97:f0:5c:ba:1b:96:2d:
                    ed:ad:c8:a0:31:96:f7:1c:72:20:46:98:16:1c:18:
                    d5:f7:89:3c:ed:bc:66:1e:42:21:ce:1c:c9:67:ad:
                    b4:17:bc:c9:b9:5b:76:8b:08:75:65:14:4e:32:60:
                    fb:ce:54:96:ce:51:32:69:d5:46:eb:7d:da:a5:14:
                    5a:8d:89:bf:f4:d4:ff:ba:c6:db:c7:73:7c:61:2a:
                    61:b0:2b:b1:a7:06:fc:c1:51:b5:74:5a:4d:0c:8e:
                    0f:d3:51:19:a9:62:b2:e6:70:e8:c4:c5:6c:e3:4c:
                    58:5b:fa:1c:17:b5:47:aa:d1:f5:21:b6:1b:51:43:
                    f2:bb:b5:26:f7:f7:86:47:53:73:8a:02:71:f4:ad:
                    54:be:af:5b:e7:26:92:28:a8:bf:64:c9:84:f6:ba:
                    ef:c0:5b:2a:08:47:0b:53:16:85:4b:7a:0d:f1:ce:
                    45:45:ba:ab:29:71:5a:fc:6d:af:93:cf:79:31:9e:
                    d1:af:99:7d:19:50:92:b7:b9:68:67:6b:e7:2f:cd:
                    74:f2:e3:ad:df:f2:04:ce:b3:a1:9f:ad:97:a6:ac:
                    b6:af:21:7d:3a:cb:2b:2a:04:de:8d:2e:74:3d:46:
                    8c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CD:9F:81:B6:9C:DB:69:22:32:90:A5:57:E8:D1:73:44:24:05:F8
            X509v3 Authority Key Identifier:
                keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e0:7f:ce:d6:6e:0d:41:8a:2f:64:36:69:fe:93:4b:76:a7:
         7f:62:2b:09:e5:a2:a5:4e:9b:b3:4c:ed:29:f5:7a:67:d2:a2:
         fa:ac:35:40:f2:94:7a:d9:d2:19:06:94:2b:0c:9e:98:b9:9d:
         1f:05:5f:5e:5a:18:8e:69:84:41:af:50:78:c2:60:a9:ac:8d:
         4b:13:1a:98:d7:12:e5:d3:39:48:cb:ff:25:11:14:95:c2:49:
         6c:08:81:a2:20:c7:6c:e0:1b:5f:c3:3b:73:81:66:a4:ee:e8:
         a3:57:79:61:59:5c:2d:75:fb:18:19:ea:9f:9d:12:67:08:a2:
         65:4f:d5:96:c1:09:9b:46:08:ed:85:96:53:60:dd:1d:f6:1f:
         b9:d2:70:c6:0b:7c:d3:bd:bc:a8:0b:28:0a:12:b6:5a:9d:67:
         a0:e7:29:a3:d1:67:21:09:9c:bf:dc:4f:dc:81:4a:cf:7f:67:
         60:2a:20:a1:98:14:ea:a5:47:ec:47:36:1e:28:50:72:ff:29:
         6e:94:0a:54:4d:aa:75:ca:ac:eb:6b:d2:af:6b:25:e2:13:ce:
         25:c2:6c:30:1b:b4:18:a1:5a:67:a4:90:e1:f4:54:1c:cc:82:
         af:71:4b:ea:7f:5f:35:c9:7b:5d:bd:a7:51:34:88:85:9d:c9:
         d2:cb:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:17:39 2026 by rpki-client