Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File:                     BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier:          WfSalO2/MAYmkvidMEN20MK+/xAX/IGiRV7LQ7Siw0w=
Subject key identifier:   2E:51:55:E2:56:42:EE:5D:07:AE:06:8F:CC:39:C8:F3:BF:4C:75:15
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer:       /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial:       01A0CAEBCC6A6B39686C1C70A8270ED0029D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 21:00:45 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:45 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:45 +0000
Files and hashes:         1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: R/p69HrqlCha3oga6RrJR/9IULjteTcNlv/7Rv4odgw=)
                          2: IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa (hash: gkV9ez5h044OMkSTspKV9neDGkCTAKH1+BcOktle2ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:cc:6a:6b:39:68:6c:1c:70:a8:27:0e:d0:02:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
        Validity
            Not Before: Sep 22 21:00:45 2026 GMT
            Not After : Sep 23 21:00:45 2026 GMT
        Subject: CN=2e5155e25642ee5d07ae068fcc39c8f3bf4c7515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:8f:4a:f5:38:e3:92:88:4c:ef:5c:0d:ed:
                    32:2f:cb:f7:59:9e:4e:0a:b4:90:12:a4:47:33:ea:
                    bc:40:40:66:1c:5f:6d:55:26:de:76:04:96:ba:72:
                    eb:47:a1:f9:58:62:92:ba:c2:fd:a5:9b:96:37:73:
                    9f:09:05:46:a5:51:d6:05:b3:0d:49:a8:cb:59:03:
                    03:bd:bc:d3:96:ad:5e:21:40:34:9b:d7:a2:b0:f4:
                    32:63:bc:0f:0c:0d:7d:95:e3:2d:73:5d:f8:f7:87:
                    de:81:d5:eb:64:36:cb:93:42:c8:87:c4:70:ee:ca:
                    4b:1f:38:4b:99:6a:08:a1:63:af:22:1e:ab:c6:69:
                    3e:97:dc:8d:4b:e0:e6:a8:2e:72:39:e6:f4:b2:e1:
                    32:91:44:fe:c9:e5:42:6b:d8:d2:76:a7:15:f5:64:
                    da:29:34:ee:da:f7:22:54:0b:b0:5c:f3:53:1c:68:
                    a0:bf:b3:dc:98:c3:01:f9:5d:f4:44:c6:6c:92:f5:
                    9e:16:8b:56:e9:6f:82:d3:a3:7b:76:c6:66:cd:0a:
                    a0:c2:db:81:89:e2:34:a6:78:26:12:41:1b:53:61:
                    3c:3a:63:72:f4:28:bf:a1:3c:73:5e:7e:39:b2:ef:
                    0c:cd:51:08:64:26:5d:f7:2e:43:e4:b4:5e:41:9f:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:51:55:E2:56:42:EE:5D:07:AE:06:8F:CC:39:C8:F3:BF:4C:75:15
            X509v3 Authority Key Identifier:
                keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:27:fa:c8:cf:89:3f:b3:b0:51:b8:0b:c4:24:82:79:24:1e:
         71:d1:de:67:18:00:b9:37:3e:1e:72:5a:e8:c8:ac:62:ae:b8:
         55:6d:27:44:a7:88:91:39:b9:3b:33:59:cc:ff:c9:32:17:71:
         13:b4:c9:e0:6d:fc:d4:c2:ee:65:c9:c5:37:95:e2:c4:3a:68:
         3e:b9:c0:19:21:3c:d5:24:4c:fd:64:b8:5f:23:cb:48:3e:21:
         83:bf:a7:d1:24:df:be:ff:ea:f1:d6:80:28:a6:7b:cc:66:d2:
         51:7d:25:15:e3:eb:73:f1:7e:62:a6:11:bc:08:9a:94:69:30:
         db:a2:6a:45:3d:ff:40:a6:c9:d2:4e:56:42:21:6e:98:25:7e:
         0e:89:80:b7:8b:42:16:a8:b0:d6:22:84:83:be:f2:32:eb:ec:
         74:6d:0a:67:5b:1e:fb:70:b6:18:09:a7:f0:92:6e:de:38:f4:
         96:1c:19:f2:c1:64:c7:7c:db:f8:b7:f3:1d:e1:8a:8f:53:bb:
         43:33:d2:f1:76:fa:8e:6c:dc:a0:98:60:a3:c3:c3:c2:33:62:
         97:d7:3e:6f:c4:90:8d:af:c4:d2:8c:3a:83:d1:fd:b1:e4:86:
         09:b6:fb:7c:0a:3f:db:49:05:ef:f8:8a:3c:e9:57:fa:d6:66:
         cd:ce:14:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:30 2026 by rpki-client