Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File:                     BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier:          2WJKplnzx/cHhl418sIg5WtcybBAtAG7PccB4XGX6oE=
Subject key identifier:   E7:9C:46:70:32:BF:D8:BD:21:56:6E:6E:27:28:14:52:16:A8:79:2E
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer:       /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial:       01A0D0B68775DCFA970B33006D785EF47AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number:          1A0A
Signing time:             Thu 24 Sep 2026 00:00:18 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:18 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:18 +0000
Files and hashes:         1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: mAwfDHDsjvKxYiUch2URL4hgixlrYn/uv6MtaiDwx7E=)
                          2: inWJjPlJFW21pp4od2z3iY_uZEk.roa (hash: Xd/E3RLJuGMfSPzPkg4w1pBvrrWPKd6B6O8itEqhX1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:87:75:dc:fa:97:0b:33:00:6d:78:5e:f4:7a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
        Validity
            Not Before: Sep 24 00:00:18 2026 GMT
            Not After : Sep 25 00:00:18 2026 GMT
        Subject: CN=e79c467032bfd8bd21566e6e2728145216a8792e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:04:ae:fb:1f:66:7e:0c:7e:c4:1d:8f:8f:
                    83:cb:80:b1:cd:de:0a:36:ad:61:bf:cb:1c:13:0d:
                    4b:89:e6:5c:f8:e3:73:50:a1:e4:f5:a3:38:b4:3a:
                    a7:08:5f:25:58:60:7d:ba:86:04:cb:b4:a4:eb:9d:
                    8b:4c:41:f0:79:d2:a9:ef:1a:87:73:b6:2c:e7:c9:
                    3a:79:ac:3c:c3:83:35:5e:25:1d:77:be:f1:5a:51:
                    6f:6c:94:ff:3e:60:28:d1:fb:09:d5:50:91:e3:d7:
                    89:de:f4:96:e0:ad:ec:56:b6:46:13:91:8e:28:e9:
                    ae:0c:f8:3d:64:37:fb:6e:0f:f3:af:81:ff:df:07:
                    68:cb:6b:0a:0b:7f:b5:fa:86:3a:a8:08:ad:32:e0:
                    a6:af:b7:86:f0:14:18:1b:3e:3d:f8:80:84:f0:de:
                    0c:07:26:d0:6b:65:74:4c:ef:4e:27:10:d3:9a:15:
                    4b:52:73:88:94:31:90:89:3e:fd:d1:89:d8:3a:75:
                    a5:6d:e9:c6:d6:8e:0d:38:97:d5:51:c2:f3:95:75:
                    15:3c:aa:66:63:aa:5f:52:35:12:7a:68:1c:0f:35:
                    d8:fc:9c:b7:bc:be:ab:00:7a:5e:09:dc:9c:46:ec:
                    55:9b:9c:a0:4d:87:06:45:75:81:49:3d:96:16:21:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9C:46:70:32:BF:D8:BD:21:56:6E:6E:27:28:14:52:16:A8:79:2E
            X509v3 Authority Key Identifier:
                keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:0a:36:56:14:49:8b:b3:dc:f7:80:d2:da:34:ab:55:77:
         7f:f2:a0:6a:05:17:4a:7b:0c:2b:15:ca:2c:f0:32:40:20:aa:
         93:00:01:2b:5a:67:48:6f:22:5d:94:dd:7e:a6:7a:60:9e:61:
         55:af:d8:ee:da:88:be:58:b3:dc:c3:6c:b8:f7:80:d1:05:26:
         cc:94:d4:c4:ca:6e:8b:08:2b:5c:f1:3c:10:8e:5a:1a:ca:be:
         5d:15:54:e6:4a:f2:82:19:15:10:ca:74:a4:ce:57:99:57:2b:
         43:f0:40:6d:3f:8d:80:c5:7e:29:23:d3:93:80:79:3f:00:fd:
         2e:39:3a:a4:f6:ed:ad:2a:de:44:dd:6a:7a:14:41:42:0c:db:
         5d:4f:3d:d6:7e:a4:50:d9:4b:72:50:5f:4e:8c:cf:7b:eb:62:
         f0:5a:5b:13:93:79:94:cf:b3:bb:91:29:ed:b7:4a:bf:51:76:
         9e:0d:b7:89:08:c5:5f:8c:fa:a2:ce:f4:bf:21:3f:21:fb:bf:
         60:76:aa:95:d7:c5:61:95:fe:cd:d7:5b:a0:f9:d2:8f:c2:57:
         9b:3e:fe:35:3d:a2:fc:40:c1:48:e7:31:c3:1e:05:b8:31:0f:
         8f:90:c3:33:15:dc:95:29:36:de:0e:43:c4:3f:ff:05:27:34:
         10:47:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:07:50 2026 by rpki-client