Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File:                     BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier:          l7jfxN5/m2Sh2OC9DNR1KV60APK/BGBWfiJKm5qzqHk=
Subject key identifier:   92:3F:DA:5D:64:E0:C1:4E:F5:2B:21:2C:9C:95:BA:E4:A8:03:DB:0D
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer:       /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial:       01A0D614EE00B942ECD5F7A18465C2DA1ED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number:          0C0A
Signing time:             Fri 25 Sep 2026 01:01:30 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:30 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:30 +0000
Files and hashes:         1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: GpnBzSVgnj3s4qgjKGKOM3lRVvJ/PfVsW/kdHl3Xnp0=)
                          2: dAYSnCI6TOnZuGWVtQyMgckZ_to.roa (hash: vAjl3dutNzdbF6jrjjB3t91gI8YjrwgJkBW/aTCNo1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:14:ee:00:b9:42:ec:d5:f7:a1:84:65:c2:da:1e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
        Validity
            Not Before: Sep 25 01:01:30 2026 GMT
            Not After : Sep 26 01:01:30 2026 GMT
        Subject: CN=923fda5d64e0c14ef52b212c9c95bae4a803db0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:3c:d0:63:5f:78:8e:a2:98:92:c7:6d:e3:
                    1e:28:7d:32:76:11:6e:fe:82:2c:ea:dd:b1:78:fe:
                    04:c4:89:84:c8:36:39:cc:31:69:1c:d1:51:95:4f:
                    26:87:4b:88:25:ae:36:df:20:f5:68:16:63:21:02:
                    b9:11:ae:80:8a:6a:33:cd:52:33:d8:ed:ed:c3:17:
                    3f:e1:11:4a:26:2c:a7:b5:6f:3f:fb:73:41:41:3b:
                    89:cc:31:d8:39:3c:ac:da:ec:68:da:22:e4:27:3a:
                    52:02:f2:b0:cc:14:35:8b:dd:95:06:1e:8d:cc:79:
                    83:b9:2d:17:77:ee:02:bd:8d:9f:0c:c2:e4:3b:2a:
                    0f:e5:05:17:46:4b:a2:6e:02:28:e5:fb:26:e6:94:
                    fd:23:c7:0f:65:34:95:6e:a2:49:d6:e6:18:3e:b2:
                    a4:56:ba:b4:92:71:28:5c:bb:bc:4f:99:2d:9d:a9:
                    a9:0a:93:39:e4:f8:24:fc:d1:43:75:bd:49:90:e2:
                    17:4d:e2:41:86:f0:5e:2b:2a:4c:db:21:5d:dc:bc:
                    08:03:91:7d:dd:79:76:f5:03:15:2d:f9:ed:79:1e:
                    89:5f:9e:e6:45:17:fa:bf:38:e7:a4:9c:48:c5:d5:
                    82:e5:eb:88:bb:94:b5:d6:76:71:8b:b2:28:6d:0d:
                    7c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3F:DA:5D:64:E0:C1:4E:F5:2B:21:2C:9C:95:BA:E4:A8:03:DB:0D
            X509v3 Authority Key Identifier:
                keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ca:03:f5:7d:46:dc:f3:d1:51:8d:51:cd:d9:49:83:14:e7:
         22:0c:b0:39:64:83:a4:ee:62:a3:63:29:45:a3:a9:c4:58:64:
         82:43:d3:b2:b8:5e:18:66:d6:55:c7:ad:51:31:41:a7:74:50:
         8a:79:3f:9e:a4:c1:b3:4b:2d:5e:7b:54:aa:a2:42:a1:c5:51:
         de:8a:5c:a0:4a:e7:7e:a4:4e:7c:e5:dc:01:e2:36:59:21:8c:
         86:a0:22:7e:cc:7d:d8:b5:c0:ab:7b:2e:db:33:e8:8a:06:5e:
         95:be:e9:93:7e:4c:57:4b:91:bf:dc:df:f2:39:71:fb:73:72:
         45:6f:07:f9:19:38:8f:57:1a:59:c2:5d:21:b4:ea:f9:9b:97:
         5f:5a:7d:39:d4:b8:7b:aa:c1:d1:58:cd:e6:e6:42:67:fb:24:
         0c:29:c6:8b:5d:09:d5:cc:cf:fe:20:7d:18:c1:16:37:47:fb:
         4b:f4:80:ef:fa:4d:99:7b:f8:95:e2:5b:47:0d:1b:0d:b1:6f:
         47:1d:a4:f8:23:63:b4:79:5a:02:96:43:6c:dd:34:28:5c:42:
         e9:4b:25:2b:52:ac:67:73:f6:61:dc:b9:a6:de:ac:eb:d6:9e:
         26:91:99:de:de:21:b1:62:b9:ea:0a:25:e3:f2:1d:3e:9f:02:
         f1:da:5f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:39:54 2026 by rpki-client