Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
File:                     B0Rsf2NCHXPCj4ynf9LUo1chABU.mft (raw, json)
Hash identifier:          3BxPh9/5ijI7txanH4WusbX8/pkLmWDC2bHkWb7sBqw=
Subject key identifier:   6B:E2:9D:53:82:6D:27:65:89:7D:D6:11:E7:66:95:7A:6A:03:A1:90
Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
Certificate issuer:       /CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Certificate serial:       01A0D493FC39DA1034F5782348B9FCB5D4F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
Manifest number:          19FF
Signing time:             Thu 24 Sep 2026 18:01:03 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:03 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:03 +0000
Files and hashes:         1: B0Rsf2NCHXPCj4ynf9LUo1chABU.crl (hash: QoCI+4J/bkP19gEl1B8O5BSHf/XFudxZFihwKhEBI0k=)
                          2: vWaSI97YDOehiwDX9EtCVi1TGr8.roa (hash: qObHiQ/zhXEaIaP9YgXMKfb5GBmcR4gdeH2I3WxGujw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:93:fc:39:da:10:34:f5:78:23:48:b9:fc:b5:d4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015
        Validity
            Not Before: Sep 24 18:01:03 2026 GMT
            Not After : Sep 25 18:01:03 2026 GMT
        Subject: CN=6be29d53826d2765897dd611e766957a6a03a190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:96:40:e3:c6:39:0f:af:99:86:9f:01:5d:41:
                    87:65:eb:74:b1:db:3a:fd:94:7d:1c:42:27:9d:48:
                    90:5b:66:b6:d6:74:64:67:7b:d6:74:2a:1d:68:1c:
                    d8:db:6a:4e:93:aa:22:87:74:6d:cf:ac:e5:bb:59:
                    77:c1:85:23:e1:ea:f8:03:45:44:3b:b5:36:1f:2e:
                    7f:66:81:96:93:d2:0a:d1:39:d7:32:2e:7c:32:0a:
                    ff:12:2f:86:30:64:cd:37:23:88:ec:89:f7:b7:9f:
                    4c:aa:a4:38:ba:0f:c1:31:9f:35:5a:7d:af:e8:06:
                    48:d5:30:cb:42:e4:c1:6f:42:01:e8:92:3c:3e:44:
                    32:d9:58:ea:3b:cb:1a:c0:7b:e5:d9:4e:39:af:c1:
                    6a:e6:41:d5:df:85:7a:8f:5e:45:ae:4c:7c:87:fd:
                    85:bb:30:41:83:e6:da:98:15:0a:d0:f6:d9:db:76:
                    54:f5:a1:3b:a1:b8:3a:33:08:02:09:5f:13:fe:12:
                    cb:56:83:ae:b5:83:53:f5:7f:48:2f:71:1a:4e:e1:
                    e7:f8:2e:ed:b8:27:3b:40:3d:46:a2:f9:52:26:25:
                    1e:05:c1:e6:a9:ca:49:c9:b6:81:aa:1e:ad:e7:12:
                    33:12:ac:da:8c:51:de:4e:97:3f:db:54:e5:39:7e:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:9D:53:82:6D:27:65:89:7D:D6:11:E7:66:95:7A:6A:03:A1:90
            X509v3 Authority Key Identifier:
                keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8d:10:7b:2d:80:cc:8c:18:f7:18:d5:d6:43:6e:44:ce:19:
         8f:df:05:89:3d:a9:75:96:45:6f:e4:d9:ea:c1:6d:b8:33:2a:
         1c:a5:51:db:e2:38:36:b4:41:66:c2:89:8f:b8:b2:c0:5b:f5:
         5a:61:40:ea:33:69:ee:24:f4:4e:4d:63:02:2d:30:20:16:89:
         7b:82:37:81:e4:7b:a1:ba:3b:cc:7a:38:89:b3:5f:26:48:4f:
         b8:20:67:80:b9:36:31:97:b4:45:28:2a:b8:ac:09:d5:a7:53:
         11:6f:3b:c5:ac:cb:f1:91:72:01:72:35:b4:ba:82:9b:3a:14:
         2c:ab:32:6a:c0:40:4a:d2:a9:16:62:4a:28:f6:c6:50:06:02:
         8e:b1:42:f2:e5:9d:2b:43:ca:7e:28:88:03:28:d0:10:ad:cb:
         99:35:70:3a:95:11:9e:4f:19:da:59:e7:d7:d8:db:3c:40:d3:
         40:d1:33:7d:78:97:8a:c0:cf:04:c3:3a:a0:17:20:21:21:28:
         60:cd:b2:fa:ea:3a:e2:e2:24:d7:91:0e:2a:38:13:8b:e4:63:
         a5:93:c2:c6:24:1f:1b:5c:44:58:57:fb:11:38:1e:c9:c2:a7:
         13:04:1e:bc:87:0e:20:49:e8:a6:30:4f:5a:a3:4a:3d:84:1f:
         ed:fa:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:59:45 2026 by rpki-client