Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File:                     BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier:          uMujKpKndHqC4FN6JoEORTL8r9dJWl2iEDR0VEJ/HxA=
Subject key identifier:   52:DB:9E:53:CE:04:14:C4:47:AA:DA:0A:EA:1B:FE:39:6A:28:12:85
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer:       /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial:       01A0D1C98EA2E74D2302B5B3B61339820952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number:          176F
Signing time:             Thu 24 Sep 2026 05:00:42 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:42 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:42 +0000
Files and hashes:         1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: vNQn2IqaRjdjq9+6TJwRLLK8/a2iwuN2rzvpYy9wEAs=)
                          2: ix-lKt8dTJwnHq6nkys_hd5cRUc.roa (hash: zvXc+sCex2FDV7KAvNJ5yPJGwAH9w5j+hanOObjkpEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:8e:a2:e7:4d:23:02:b5:b3:b6:13:39:82:09:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
        Validity
            Not Before: Sep 24 05:00:42 2026 GMT
            Not After : Sep 25 05:00:42 2026 GMT
        Subject: CN=52db9e53ce0414c447aada0aea1bfe396a281285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:25:17:b9:c3:79:7f:16:9a:59:ba:50:67:
                    e2:bd:21:8b:4d:5a:e9:47:0d:39:66:b4:05:c9:a9:
                    50:2c:f4:f9:78:4f:f3:3b:1f:be:2e:1b:b4:f1:8e:
                    ba:1d:62:b2:0d:78:d6:f3:39:ef:d4:7c:45:56:6e:
                    e5:0d:c8:27:f3:2b:a7:21:33:57:b8:a4:87:51:b8:
                    58:b9:1a:83:b1:6d:88:d5:f7:35:18:00:ce:4a:bb:
                    23:f4:08:39:65:81:f5:ab:9f:a0:ed:09:0b:cc:e7:
                    04:bd:de:0a:b4:26:b6:12:78:3d:70:91:c5:e4:99:
                    37:a2:39:8d:b9:b6:4e:f4:83:1e:d2:d5:78:70:b2:
                    03:52:e8:05:60:4a:20:d7:57:07:58:66:1c:3a:b8:
                    f2:9f:51:a8:8c:b5:92:90:ac:1b:de:6b:87:7e:12:
                    df:86:5e:50:b0:c6:ff:1e:b5:9e:90:e1:98:fb:dc:
                    83:07:79:15:95:d1:5b:53:57:4c:14:8d:55:d3:ab:
                    90:1d:3d:8c:b8:9d:cd:a1:aa:3a:08:80:e3:42:2d:
                    00:0f:22:62:05:9b:e4:ce:ac:a1:06:9d:8a:94:7e:
                    ca:58:f2:ac:c4:41:95:47:8f:09:1f:3a:d8:f1:91:
                    bc:e2:d5:8b:2c:23:13:1b:fb:7b:97:7b:94:24:ab:
                    57:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DB:9E:53:CE:04:14:C4:47:AA:DA:0A:EA:1B:FE:39:6A:28:12:85
            X509v3 Authority Key Identifier:
                keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:87:18:03:26:ea:12:2b:a6:87:32:4e:75:60:25:77:78:22:
         70:8d:c5:6a:f0:58:cc:95:e9:36:ef:a8:56:9a:15:21:bd:3b:
         9a:1b:c2:4c:4b:ca:5c:34:ed:51:91:67:35:a3:a1:b0:30:a9:
         64:d3:6f:31:7e:22:a8:eb:9a:5d:01:db:ce:93:6c:48:b7:e0:
         f9:65:f2:68:71:31:16:18:c3:e2:06:f1:b2:23:70:8f:23:99:
         9c:f2:94:ab:29:fc:8f:dc:8e:a0:57:c6:11:f9:19:7d:07:23:
         d7:c3:f3:91:8e:96:5c:21:51:2b:b9:e9:f0:25:a3:db:bc:aa:
         49:01:64:8e:e6:86:cb:20:38:7f:5d:71:b5:ce:31:16:ae:cd:
         c9:84:80:03:92:b0:aa:73:6a:4c:32:d6:42:2e:d5:63:58:03:
         83:0f:fc:c4:1e:8b:79:8c:c3:2f:dd:94:61:7b:5c:24:c8:24:
         04:cb:87:83:c2:18:1e:04:dc:f4:f8:f3:a9:ba:1e:e7:d5:6c:
         65:4d:34:2e:fc:6f:95:72:26:40:7c:49:c8:de:6d:a8:99:35:
         0f:55:ea:6c:d0:7e:07:2d:38:86:e6:e2:af:fb:54:bc:e9:28:
         7f:81:ea:90:b4:a5:01:22:e0:73:85:32:ce:f1:ac:2e:5b:b3:
         e5:ae:8e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRyY6i500jArWzthM5gglSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzEyZTg4OTQ5ZDVhNDM1YTMzZTcwNDBjOWZiN2U3YTgy
NDQzOTUwHhcNMjYwOTI0MDUwMDQyWhcNMjYwOTI1MDUwMDQyWjAzMTEwLwYDVQQD
Eyg1MmRiOWU1M2NlMDQxNGM0NDdhYWRhMGFlYTFiZmUzOTZhMjgxMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBAlF7nDeX8Wmlm6UGfivSGLTVrp
Rw05ZrQFyalQLPT5eE/zOx++Lhu08Y66HWKyDXjW8znv1HxFVm7lDcgn8yunITNX
uKSHUbhYuRqDsW2I1fc1GADOSrsj9Ag5ZYH1q5+g7QkLzOcEvd4KtCa2Eng9cJHF
5Jk3ojmNubZO9IMe0tV4cLIDUugFYEog11cHWGYcOrjyn1GojLWSkKwb3muHfhLf
hl5QsMb/HrWekOGY+9yDB3kVldFbU1dMFI1V06uQHT2MuJ3Noao6CIDjQi0ADyJi
BZvkzqyhBp2KlH7KWPKsxEGVR48JHzrY8ZG84tWLLCMTG/t7l3uUJKtXzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLbnlPOBBTER6raCuob/jlqKBKFMB8GA1UdIwQY
MBaAFAVxLoiUnVpDWjPnBAyft+eoJEOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYt
MmMwMTRiNzQwYzNiLzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYtMmMwMTRiNzQwYzNi
LzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvocYAybq
EiumhzJOdWAld3gicI3FavBYzJXpNu+oVpoVIb07mhvCTEvKXDTtUZFnNaOhsDCp
ZNNvMX4iqOuaXQHbzpNsSLfg+WXyaHExFhjD4gbxsiNwjyOZnPKUqyn8j9yOoFfG
EfkZfQcj18PzkY6WXCFRK7np8CWj27yqSQFkjuaGyyA4f11xtc4xFq7NyYSAA5Kw
qnNqTDLWQi7VY1gDgw/8xB6LeYzDL92UYXtcJMgkBMuHg8IYHgTc9Pjzqboe59Vs
ZU00LvxvlXImQHxJyN5tqJk1D1XqbNB+By04hubir/tUvOkof4HqkLSlASLgc4Uy
zvGsLluz5a6Ozg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:17:45 2026 by rpki-client