Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File:                     Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier:          SXcdXpwvQJ49FGG9hEOnJMdRfAN+pGeZtxEVhvTJfE8=
Subject key identifier:   4D:1E:C7:0D:04:F6:E8:08:F9:60:C8:84:D5:9E:9B:1A:01:A5:61:B1
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer:       /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial:       01A0C96BB2CBC92B2E0F08586F0FB80E9308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 14:01:13 +0000
Manifest this update:     Tue 22 Sep 2026 14:01:13 +0000
Manifest next update:     Wed 23 Sep 2026 14:01:13 +0000
Files and hashes:         1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: 5XLlqBJoFcF0XojuCbnuCIOsCHztKUOAu3/9EoUPNIw=)
                          2: tEe3a-zQmY1uh_qVtaABlyzAWds.roa (hash: HWUG6mrvt6f6sZlEJOtZpDSCgFXcJ6JwrGDgcXpGBfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:6b:b2:cb:c9:2b:2e:0f:08:58:6f:0f:b8:0e:93:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
        Validity
            Not Before: Sep 22 14:01:13 2026 GMT
            Not After : Sep 23 14:01:13 2026 GMT
        Subject: CN=4d1ec70d04f6e808f960c884d59e9b1a01a561b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:8a:af:38:12:a5:b7:f2:f6:1e:36:81:20:
                    e5:e3:18:35:aa:6d:5b:b5:6a:bd:83:26:92:a1:03:
                    e7:88:ff:4d:c1:91:99:69:7e:83:61:74:59:8b:4d:
                    58:f8:be:cc:33:23:1b:98:41:8a:86:47:87:26:f2:
                    25:50:e5:a7:01:bd:72:df:85:4b:f5:26:5e:c4:06:
                    26:95:27:0a:e9:bf:49:a9:7f:f8:bc:8c:51:95:49:
                    f9:b9:17:44:ac:de:11:28:0f:77:db:f7:fb:c8:b2:
                    42:9c:c4:4d:4d:77:5a:e3:b4:41:e1:44:88:9a:56:
                    f2:88:f9:62:8b:86:6e:de:71:fd:aa:3a:15:77:70:
                    dc:29:0d:c4:f0:de:2f:a4:5d:7a:bf:e0:01:a9:66:
                    1b:77:85:04:15:fe:99:dd:fd:8f:1e:28:6f:b4:ad:
                    63:d1:09:9f:5b:9b:15:38:9d:5f:1c:f7:b4:0c:40:
                    65:e9:bc:f8:c5:6f:cf:22:90:5f:b3:fd:c8:c0:f9:
                    87:b0:ec:9f:90:05:44:ec:d5:79:9a:53:f3:88:f8:
                    6f:cd:9a:e4:b2:d9:0e:07:78:e1:ce:bd:11:24:48:
                    49:ec:3c:cb:8e:f5:7f:ae:b5:54:54:eb:65:f3:69:
                    aa:db:3d:b0:59:ba:25:5c:94:ae:fa:95:05:ef:e1:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1E:C7:0D:04:F6:E8:08:F9:60:C8:84:D5:9E:9B:1A:01:A5:61:B1
            X509v3 Authority Key Identifier:
                keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b7:f4:9c:83:89:47:0f:cb:22:ff:f5:39:93:f8:58:3c:8a:
         a2:5d:3d:c2:a2:56:2f:68:a6:85:56:56:d3:d8:a1:d0:c2:07:
         98:19:b1:9c:55:a2:37:07:b7:21:d7:7d:1e:5b:5b:7d:85:e7:
         f1:8c:ce:ad:a0:2b:51:7b:6f:4a:73:95:4a:9a:23:74:bb:9b:
         b0:36:81:b0:a1:ba:f5:4e:b9:25:5f:b3:c5:35:f3:fe:b0:cf:
         f6:05:b6:27:f9:6d:24:9a:c7:0d:a5:0b:f3:70:07:cc:da:26:
         3c:fc:2f:2d:d2:54:1e:03:f1:c9:3b:ee:26:24:21:3a:2d:70:
         b8:25:b2:42:ed:90:8e:94:9d:3b:0c:21:73:91:94:1c:95:c4:
         05:02:c0:29:88:c5:e5:af:78:53:f9:12:0a:ea:64:32:03:db:
         9a:6a:d6:f5:a0:2e:f1:c9:91:23:f7:8e:fe:1b:7a:50:39:2c:
         fd:31:64:12:d3:77:45:c0:e0:cb:a6:f5:0d:99:19:8f:01:d2:
         aa:f2:79:d1:0b:a0:0c:8c:d7:b4:44:36:d5:72:77:c8:32:27:
         28:63:0a:3d:4a:72:ac:33:8d:0e:87:7c:2b:4b:c1:9a:0d:74:
         f7:9e:88:aa:22:10:fa:6e:82:2d:c2:06:5f:19:60:b1:83:04:
         d2:73:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:27:34 2026 by rpki-client