Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File:                     BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier:          aYLs7Br6qRSruPwtda6LZ0ZnNC3vjxaoCxHVSInup0Y=
Subject key identifier:   8C:9D:2D:D6:12:34:6B:5A:CB:FC:EA:66:A3:9C:D0:B1:B7:E5:43:3D
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer:       /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial:       01A0CBC78D180C2B205D627E922697BFE6BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number:          1919
Signing time:             Wed 23 Sep 2026 01:00:47 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:47 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:47 +0000
Files and hashes:         1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: mGj+T75xvtuXEkrZuPC3EagCqcI61UpnrA9syEVL3Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:8d:18:0c:2b:20:5d:62:7e:92:26:97:bf:e6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
        Validity
            Not Before: Sep 23 01:00:47 2026 GMT
            Not After : Sep 24 01:00:47 2026 GMT
        Subject: CN=8c9d2dd612346b5acbfcea66a39cd0b1b7e5433d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:f3:43:09:33:1c:f9:b8:33:6e:5c:c4:40:
                    7c:5a:2a:92:3e:0f:99:7d:09:d1:71:53:3c:0b:56:
                    8a:45:c5:a7:48:20:da:a6:d2:d2:a9:f4:70:35:40:
                    8e:c3:01:a6:16:25:9d:63:cc:dc:2f:b8:97:cc:b8:
                    4f:a8:be:9d:2d:4f:a5:12:54:0a:0f:3c:56:f3:0c:
                    4c:81:24:26:6a:3c:02:82:ad:08:25:96:d1:3e:f5:
                    c0:ce:42:c9:10:b3:7d:c1:53:1c:8a:fa:5e:42:30:
                    17:e3:0b:44:22:44:83:fa:cb:a9:a4:fb:fa:9e:cd:
                    47:b7:2b:2d:22:fc:29:1b:99:69:02:5f:b5:ae:a3:
                    48:d8:dd:ca:30:ad:b3:77:44:3d:bb:78:96:15:8e:
                    35:a7:3d:23:b6:9f:6a:25:25:9d:bf:c0:3d:e2:12:
                    57:71:a9:bf:57:bc:84:67:30:8f:88:20:4c:1c:59:
                    35:a6:5e:3a:5b:ee:ea:cc:8f:d3:9d:7d:33:33:88:
                    4c:f8:11:23:a6:04:f0:8b:2c:f1:30:31:6f:83:dc:
                    52:c5:ea:c1:27:db:85:87:8c:1c:36:cf:28:a3:47:
                    dc:12:56:4b:da:4e:f1:07:8a:d4:c2:66:e8:61:9b:
                    31:2d:11:84:0f:28:c8:09:31:f8:06:bd:8d:e4:38:
                    ff:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9D:2D:D6:12:34:6B:5A:CB:FC:EA:66:A3:9C:D0:B1:B7:E5:43:3D
            X509v3 Authority Key Identifier:
                keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:54:9c:7e:8e:03:34:b1:2f:1e:a1:73:ac:1f:18:2f:b4:
         22:65:3b:e3:40:9c:0c:41:17:4a:8e:95:be:d1:ec:63:43:c8:
         9d:9e:b2:c0:03:63:ac:90:02:8f:a8:0e:3f:74:dc:b5:fa:2b:
         b0:bc:61:60:8b:58:7c:0a:5e:ef:b9:4a:63:f4:06:1f:ef:34:
         93:94:6f:83:c5:3b:e5:48:c0:30:06:45:aa:d3:6d:d6:dc:44:
         d9:47:9e:45:c5:b1:ea:38:0c:bb:c1:af:ce:85:c2:86:e3:ff:
         ec:d0:ba:67:2f:c4:2e:14:83:8d:99:05:6b:07:8f:c1:28:aa:
         52:74:c6:2e:05:6c:2c:85:d4:54:e4:e7:86:8b:ea:8d:d7:5f:
         b9:db:52:f3:26:f8:ce:b9:91:be:ae:76:72:09:5e:6a:ff:40:
         ec:bc:c2:93:1b:91:f0:6c:50:9c:3e:90:43:36:dc:4b:91:0d:
         09:f3:8f:3f:01:dd:fb:37:32:05:ba:ac:ce:12:98:d9:e9:f7:
         3e:59:02:57:5c:f2:9f:f6:3f:e5:bf:19:57:f9:af:34:d2:4a:
         21:41:0d:67:c6:9a:ac:8d:69:fb:5e:8d:df:7f:bc:f3:6b:8d:
         a5:3f:c9:1d:67:6c:9c:2e:81:83:28:60:26:ec:98:9a:a3:94:
         2f:17:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:06:28 2026 by rpki-client