Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File:                     BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier:          eoa/YZYc/q4Rph3rfuvjFIXW7eyNdpG5GX5A8IEB4r4=
Subject key identifier:   C4:23:DD:8F:64:C4:82:36:0E:EA:5D:4F:E8:69:44:08:51:AD:D9:AA
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer:       /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial:       01A0CEFFFE7500394FA9F432026BF97F870E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number:          102E
Signing time:             Wed 23 Sep 2026 16:01:18 +0000
Manifest this update:     Wed 23 Sep 2026 16:01:18 +0000
Manifest next update:     Thu 24 Sep 2026 16:01:18 +0000
Files and hashes:         1: 1-yjFNMzL774gYQbi5a_-Nv7JAUw.asa (hash: F6jcF1KK2xQtEuvO/NNdiMZFVVjqb2EpOMv2+B8ywyU=)
                          2: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: 7HJkXiIv3MPSsTG2Ir0P4oiKBXIyMYnEvlxS0eQtQ+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:fe:75:00:39:4f:a9:f4:32:02:6b:f9:7f:87:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
        Validity
            Not Before: Sep 23 16:01:18 2026 GMT
            Not After : Sep 24 16:01:18 2026 GMT
        Subject: CN=c423dd8f64c482360eea5d4fe869440851add9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:67:17:05:b1:80:d7:65:7f:53:32:a2:4c:
                    56:74:3c:da:17:54:e6:31:cf:4e:b4:84:de:bd:f3:
                    ab:d9:96:12:85:22:b3:6f:56:7c:74:d3:64:72:c0:
                    8e:40:ba:c8:bd:e6:12:8b:c5:1a:17:78:b2:a8:28:
                    43:ae:a1:f3:88:d0:61:c8:ee:85:50:2e:b0:24:b6:
                    5f:55:bb:0b:99:5d:97:9d:c5:45:84:9a:81:e0:57:
                    a8:e4:cc:fe:82:9c:be:1d:86:55:d8:6e:1a:32:c1:
                    09:49:8c:fb:69:6a:a3:ba:77:67:40:84:9e:04:45:
                    e5:5e:95:ff:69:2c:b0:de:ad:4d:c7:6f:05:3a:c7:
                    cd:94:17:cb:c7:39:d5:64:39:aa:e2:74:60:67:85:
                    f0:55:61:f9:8c:4e:f5:bd:3e:ba:bf:1c:ab:29:c4:
                    4b:59:20:7d:59:bc:63:dd:72:07:66:e2:b2:c8:12:
                    22:38:ff:df:b1:cd:59:d3:aa:67:e4:12:0e:d0:30:
                    db:e9:8b:ff:81:8c:72:42:76:53:d1:32:ed:72:b1:
                    51:e5:2d:fa:9c:d0:36:01:65:d7:6f:29:d2:5a:dc:
                    7b:ea:52:94:b5:d4:c8:bf:28:59:d9:38:b9:0d:ca:
                    73:f0:95:5a:1a:d7:94:0b:ce:95:e7:64:b0:87:8d:
                    87:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:23:DD:8F:64:C4:82:36:0E:EA:5D:4F:E8:69:44:08:51:AD:D9:AA
            X509v3 Authority Key Identifier:
                keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:69:9f:20:76:49:35:a0:3d:63:9e:01:9b:bd:76:f3:76:c5:
         c7:22:74:86:9d:68:57:c5:90:14:80:ce:1a:ce:e5:59:51:76:
         12:cd:41:25:d3:52:55:1f:ef:c2:3c:61:6e:e9:41:5c:92:21:
         e1:f6:f9:4a:ba:d8:84:c9:b1:c8:f2:9b:4c:28:07:d0:23:f6:
         bb:5c:40:5b:49:bb:1b:a7:21:a9:65:77:90:dd:4b:25:f5:e9:
         12:2f:55:20:2d:7f:32:20:50:bd:29:c2:d0:aa:ba:26:fe:a2:
         53:8f:2f:80:fe:44:9e:73:d3:f1:3b:14:7b:fe:5b:70:75:22:
         cb:22:bd:b1:d7:ef:0f:fb:ff:91:80:3c:b3:89:ef:95:e9:0c:
         51:33:50:d0:72:ff:91:d6:83:91:3d:cf:6b:94:a5:9f:55:18:
         7a:f2:52:fd:a6:57:af:df:db:c6:86:39:21:9b:b6:e5:d3:7e:
         67:d8:8b:ec:a3:25:ab:e5:cc:6b:02:03:6b:e5:03:f5:6f:9e:
         56:2e:5f:0f:a2:3b:6e:6b:02:eb:da:8c:f5:1e:5a:93:b4:0c:
         b1:ce:4d:e7:14:61:5c:04:4f:b1:b6:1d:de:d6:12:a6:85:5e:
         06:68:f7:52:20:26:8c:9f:c8:11:cc:ed:b0:0b:f8:96:57:5b:
         a0:5e:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:25:33 2026 by rpki-client