Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
File:                     BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json)
Hash identifier:          1BBf/IATuDaA6FnhhCY2YZAwDbrdb0KifGHcpuYmaak=
Subject key identifier:   DA:BA:60:BF:94:3E:F9:18:BA:35:B6:D5:1D:66:06:08:32:53:93:64
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Certificate issuer:       /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial:       01A0DB724562E0C251CFF38EB6517786B01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
Manifest number:          15EE
Signing time:             Sat 26 Sep 2026 02:01:34 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:34 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:34 +0000
Files and hashes:         1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: FeOgAOjp4EOZU1iYQnyMXR4r17wTmGbaJ4/4RdJWgzM=)
                          2: aOp5hrahbo0DudvEr6ppbcclIIw.roa (hash: ot52KZc899CUKbyUZFqNVx6u88DCcjOJWawepQpzrNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:45:62:e0:c2:51:cf:f3:8e:b6:51:77:86:b0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
        Validity
            Not Before: Sep 26 02:01:34 2026 GMT
            Not After : Sep 27 02:01:34 2026 GMT
        Subject: CN=daba60bf943ef918ba35b6d51d66060832539364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:1f:ee:e6:58:30:18:dd:74:fa:16:c5:6c:
                    d4:96:89:04:6f:80:90:c7:55:40:9f:92:5c:28:d5:
                    b7:69:c7:85:5c:80:ac:26:66:8f:17:3e:8c:14:fe:
                    8c:8c:d3:e0:cf:8a:43:73:c0:57:21:17:b8:82:79:
                    6b:6a:0d:f6:3d:db:33:f8:6e:ac:9f:34:a1:7b:8f:
                    85:80:d0:4f:d9:6a:5f:b7:19:a4:66:bf:6c:26:c6:
                    9b:f7:70:81:c1:02:65:6f:77:98:5d:e4:43:25:c6:
                    0b:71:2d:e7:a5:d4:60:38:43:31:1f:ae:66:65:33:
                    6f:4e:0d:5a:93:44:d9:ca:fa:96:3a:e6:3d:10:32:
                    29:df:d1:e6:f8:5e:d0:70:03:9b:08:cf:aa:74:1f:
                    10:68:97:27:82:a9:d1:b8:88:79:8c:2b:60:a1:8e:
                    f6:15:0a:33:91:36:3e:c8:6e:af:00:fd:07:27:31:
                    12:90:d6:3c:7d:0d:da:a9:3d:40:6a:17:8e:e7:85:
                    79:62:26:f2:b7:a3:52:66:d8:f3:5f:c9:9e:2c:5f:
                    c8:13:4e:12:3c:7d:b6:40:cb:a3:c1:8d:c6:71:e8:
                    30:b7:d0:0c:8a:ab:e0:d7:a8:fc:b6:d8:69:07:cc:
                    3b:36:b7:68:f3:4b:74:2e:c5:8a:9e:cd:27:e7:85:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BA:60:BF:94:3E:F9:18:BA:35:B6:D5:1D:66:06:08:32:53:93:64
            X509v3 Authority Key Identifier:
                keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:df:12:63:34:24:ea:30:37:1e:b1:8a:a6:7e:ca:ec:23:a5:
         6e:1d:3b:6f:ec:c9:ba:a5:50:1f:96:18:c5:e6:64:48:38:ae:
         a1:2e:24:79:92:87:86:21:bc:21:f9:cb:cd:5c:c3:ac:a6:21:
         d8:6d:0a:5c:5f:fd:aa:3f:78:88:74:b2:68:7d:cf:03:9e:6f:
         2f:49:81:37:3e:14:ea:27:ba:b8:6c:69:27:7a:fd:d1:4b:76:
         17:aa:fa:1d:af:9c:67:1a:38:f0:a3:a0:0e:81:5b:05:6e:e0:
         27:8d:79:a0:26:f8:cc:96:61:87:c1:be:82:d6:76:c6:3e:0d:
         8b:b4:39:1d:98:18:3e:09:ae:80:8c:c0:d5:ed:3a:fc:66:0e:
         73:35:69:16:d7:07:65:d5:7b:ea:72:a6:01:34:a4:28:ce:12:
         8c:e7:8c:e5:5e:51:7d:68:60:23:3d:00:97:16:25:d9:b5:91:
         56:d6:fa:08:a0:20:c0:7e:cc:e6:d5:20:b1:63:a7:a1:f1:45:
         f7:31:01:2b:ea:0c:2f:12:ba:09:de:d5:95:84:52:0b:ca:44:
         34:a2:40:1e:43:bb:07:4e:4c:32:de:5c:e3:ba:68:b3:42:c4:
         3b:07:88:43:c1:12:10:06:9e:47:dc:e4:02:97:95:78:f5:17:
         60:32:71:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:51:30 2026 by rpki-client