Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File:                     BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier:          pCKbSvbGaA07wi++Lu9g1VLbCpTXEHvWjtXY/u6W5Rw=
Subject key identifier:   2C:7F:8D:E9:23:9D:0D:E4:A6:2C:2C:25:B8:3D:E0:61:49:DC:CC:2C
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer:       /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial:       01A0CE5AC5915E54ED7290EDB1867A9CA024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number:          1602
Signing time:             Wed 23 Sep 2026 13:00:50 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:50 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:50 +0000
Files and hashes:         1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: JUH0X9zENJ5h/7N1x3vg6AP1CvBeOGEpFBjgbQp+Zt8=)
                          2: ZrpD-HPOpkWnog8ZwPaUN_G8Qz8.roa (hash: cYVKZh1myfenrYhf5mnnHt/sHZoWJT/ER0EDPjoy5XA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:c5:91:5e:54:ed:72:90:ed:b1:86:7a:9c:a0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
        Validity
            Not Before: Sep 23 13:00:50 2026 GMT
            Not After : Sep 24 13:00:50 2026 GMT
        Subject: CN=2c7f8de9239d0de4a62c2c25b83de06149dccc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:2d:bc:01:b5:44:e3:01:cf:fa:b8:3c:4a:
                    f2:df:c2:c4:55:f9:c6:14:b0:05:04:ad:1e:51:dc:
                    8d:ea:ac:89:3c:79:14:54:8d:d5:5a:a6:42:d5:0b:
                    1e:a3:4d:be:4b:d1:2d:4a:8c:79:a3:07:59:35:d4:
                    8a:d8:16:4f:0d:47:f5:89:ed:31:da:4c:1b:24:8c:
                    52:a7:5a:06:d3:93:04:3e:09:cd:5d:23:fa:bc:4f:
                    35:bc:18:cd:80:db:7f:03:cc:4a:bb:f9:b9:bf:7a:
                    9b:9e:03:ab:79:b2:a7:7d:97:97:23:44:33:48:05:
                    f2:47:b1:07:94:e2:68:c4:05:f2:7e:2d:f8:e0:d3:
                    39:09:aa:44:9e:58:25:b7:4e:36:7c:31:c6:1f:76:
                    47:9d:90:11:39:fd:8f:43:7b:53:39:5b:f3:eb:b7:
                    eb:b0:28:ce:ed:1d:3f:c6:11:7f:b2:da:90:d9:07:
                    09:a5:ff:51:5d:40:14:c4:b8:66:7d:19:9f:73:73:
                    79:11:42:45:9c:d2:be:48:49:9a:50:c5:de:1f:fc:
                    23:54:64:d0:20:ec:26:96:58:8a:35:d5:ea:67:fc:
                    f8:f9:17:9b:43:9e:be:31:40:0b:c5:cd:0a:5b:da:
                    62:c9:81:2e:0d:eb:36:ba:a3:fa:e9:28:47:d3:ba:
                    a4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7F:8D:E9:23:9D:0D:E4:A6:2C:2C:25:B8:3D:E0:61:49:DC:CC:2C
            X509v3 Authority Key Identifier:
                keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5f:5e:ed:56:81:e7:5e:c8:65:c9:c0:b7:f2:c0:9f:aa:84:
         bb:c8:d1:8e:ba:7f:29:af:9e:ce:bd:87:6a:d9:17:dc:a7:f9:
         a0:2c:23:80:9c:85:4e:e9:a1:25:5d:fc:82:f0:96:45:fb:ce:
         df:c0:d9:c0:58:38:6e:16:7e:d6:20:98:c0:f4:8e:0d:63:f6:
         b4:ab:37:ec:85:a1:d8:a6:c7:3d:f5:c0:9a:ba:82:03:7a:fc:
         58:ff:e5:e5:ff:3b:6f:97:88:ba:61:87:20:c9:a2:64:b5:31:
         f8:77:41:39:96:78:21:63:f0:b1:dd:9d:c5:5b:af:3e:4f:6e:
         17:8d:ca:9b:c5:da:de:6b:c1:0f:f5:a9:5f:a8:04:81:a4:dd:
         47:fc:f0:5e:8b:77:7b:95:89:d5:5d:3a:96:cd:ca:20:c8:2b:
         85:c7:0e:c7:c3:d9:6e:1d:b1:71:ed:a1:ba:bb:eb:fe:cb:50:
         a8:12:90:9b:18:18:0f:0f:eb:79:b6:d2:91:50:24:2c:07:c7:
         cd:45:11:2c:e1:be:f6:16:d2:ec:6c:52:01:f8:4f:9f:54:bb:
         93:24:cf:88:d6:08:61:2b:49:9e:21:d1:43:d4:36:36:a1:b1:
         db:cf:1f:85:de:24:ee:10:de:32:52:1d:9d:a6:3f:99:a9:c6:
         b7:7a:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:49:12 2026 by rpki-client