Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File:                     BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier:          V8NuyRiNsZAZdKCVIKzMbJdeoYBAce10QBxnIdM4GME=
Subject key identifier:   83:E9:86:BC:26:83:83:13:08:47:37:01:46:A5:9A:F4:3D:71:C5:0B
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer:       /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial:       01A0D12463D53010C6E8C95C0BDD44DB074A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number:          1194
Signing time:             Thu 24 Sep 2026 02:00:17 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:17 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:17 +0000
Files and hashes:         1: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: Du6fxE+vpZFHy2tEYAnrtxD0r1cW77KPSWeMvfLUOsI=)
                          2: VBdgLCJ2-5Nl3qZazFpZsUmQNHc.roa (hash: 1wk7mMyCYgzy4JDr5+775irtexYwlsK/lROPNiZfnOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:63:d5:30:10:c6:e8:c9:5c:0b:dd:44:db:07:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
        Validity
            Not Before: Sep 24 02:00:17 2026 GMT
            Not After : Sep 25 02:00:17 2026 GMT
        Subject: CN=83e986bc268383130847370146a59af43d71c50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:fb:07:b5:76:b9:d8:8f:7f:e6:bf:7b:ba:
                    60:1d:27:f7:23:ce:33:89:1e:93:53:38:28:8f:1d:
                    98:77:6e:3e:ef:d7:ff:8a:6a:09:19:0e:bf:98:c8:
                    cf:b1:70:0a:f5:2a:52:0b:4a:cf:33:45:88:16:0c:
                    ba:01:d0:46:91:5b:e0:5f:7d:9c:a8:a1:2d:19:45:
                    6c:48:84:ca:94:95:c8:9c:38:04:07:97:a3:07:43:
                    88:35:e8:a5:d1:6e:b1:ca:2d:6d:27:94:fe:20:1f:
                    f8:36:d3:6f:f2:a8:9f:1a:a4:d8:b8:e6:65:31:96:
                    72:22:ea:74:68:95:ef:39:6b:83:29:7f:70:51:50:
                    3a:38:9f:c7:02:1b:82:4d:1e:63:5a:ef:b6:d4:22:
                    71:f8:bd:58:6d:b5:12:20:30:f8:d7:03:83:bd:f8:
                    0f:00:ed:84:92:d2:de:0a:fb:5c:0a:bc:8a:38:c8:
                    73:e3:cc:77:20:05:de:05:eb:14:cd:f2:da:dd:3a:
                    8d:c6:7a:fc:b7:35:84:db:b0:bf:f9:dd:b1:4e:26:
                    57:18:7b:e8:9e:7b:f2:ec:ea:05:b0:2b:cc:ed:85:
                    de:f2:2f:b2:7b:ad:67:d4:42:09:a9:8f:d2:11:89:
                    97:27:e9:a9:a1:10:88:5e:e0:41:b7:60:37:ed:5b:
                    be:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E9:86:BC:26:83:83:13:08:47:37:01:46:A5:9A:F4:3D:71:C5:0B
            X509v3 Authority Key Identifier:
                keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:a2:34:47:84:3f:5c:65:81:70:ae:95:54:7b:b0:0a:63:c4:
         79:47:26:61:d6:f8:4c:94:0f:30:5a:54:91:2a:65:98:3b:80:
         dd:3b:3c:dc:0f:e0:ce:b7:65:bf:84:cf:82:0b:58:09:23:ce:
         48:e7:1a:25:43:d9:37:35:be:8c:2b:59:a3:42:17:f5:b2:f3:
         17:93:23:d5:2f:af:c2:5d:58:c0:87:6a:f7:97:b5:dc:8d:27:
         ee:e2:d5:d6:9d:45:1c:ce:00:3f:fe:8e:fa:c7:df:1c:41:03:
         18:f9:60:e5:6c:41:b2:06:9f:be:f9:d4:8f:e7:97:51:55:e2:
         0c:e2:b7:e4:d0:ad:53:20:d5:f7:44:c2:96:7b:27:40:e3:0a:
         21:6c:14:59:c9:a3:a9:9b:55:ef:cd:fc:23:65:b8:af:ac:dd:
         5a:8f:58:21:d9:67:5b:d8:76:78:b2:6d:fe:27:6b:33:15:db:
         90:00:e6:f7:b4:4c:53:c1:29:78:70:ef:ab:08:7a:d5:1f:92:
         c1:dc:67:fd:52:5c:cc:20:d3:7d:ac:c6:6e:03:6a:41:f6:02:
         c2:37:a0:b5:a3:f1:f6:90:e9:95:8c:55:74:79:c6:43:e0:7b:
         91:66:0a:b8:f0:06:6d:bb:b2:79:db:f1:a9:d3:58:d0:76:53:
         29:9a:d7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:46:11 2026 by rpki-client