Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File:                     BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier:          jnwin9TQVZjgTSJFMmDnROxNX+wTOHvkXpMUk02C1bA=
Subject key identifier:   D6:8E:E2:C1:11:56:A1:9F:D6:BE:AB:F8:A8:95:11:21:99:A4:31:A4
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer:       /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial:       01A0D5704E1C8096019DD2B1F5B47F5C2362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number:          1769
Signing time:             Thu 24 Sep 2026 22:01:41 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:41 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:41 +0000
Files and hashes:         1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: f55T5MHPpnX33N3AMf1i+gOqwRHoaWcgwZqxb6XMo9Y=)
                          2: WooYK0ZFDaGgHVC8DJ-VYW0Dmbw.roa (hash: lZyCoxT1QmpmA3Qk/5sG1h73ylWFJ3LJg+hw5CFIWuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:4e:1c:80:96:01:9d:d2:b1:f5:b4:7f:5c:23:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
        Validity
            Not Before: Sep 24 22:01:41 2026 GMT
            Not After : Sep 25 22:01:41 2026 GMT
        Subject: CN=d68ee2c11156a19fd6beabf8a895112199a431a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ac:75:fe:8e:0f:0f:b1:25:d1:5e:12:c8:68:
                    a9:b0:3a:52:82:2b:bb:1c:08:e9:c6:1b:74:bc:c5:
                    57:96:09:39:56:90:3d:f5:8d:2f:f8:65:13:a6:f6:
                    e1:3f:de:3a:39:7b:99:23:c4:76:e6:d8:73:4b:44:
                    79:ba:b7:38:c9:4a:92:60:12:59:1d:dc:7c:4d:b1:
                    b2:ba:bc:6c:e9:8b:f5:df:45:78:d3:62:a8:5d:7b:
                    07:df:30:ae:0f:eb:ab:25:a3:cf:ca:a0:5b:6f:fe:
                    b5:86:e9:59:a0:5a:a3:10:6a:e8:92:27:f3:4f:af:
                    38:1b:98:b2:bc:72:c0:c4:5f:a9:93:ea:b6:06:0a:
                    2a:22:6a:cb:52:44:1a:e7:0b:19:1e:94:5f:a9:5d:
                    40:6b:4e:bc:e9:ae:ba:8d:c9:08:21:a0:44:07:13:
                    90:0c:be:e3:75:83:8c:cd:b3:cb:e4:79:1a:d3:76:
                    91:2b:2f:08:ea:87:bc:6a:cd:da:be:e1:ac:70:62:
                    6a:4b:d0:0b:63:cb:8a:1f:c7:1c:a8:b7:c9:5b:ac:
                    8e:f7:4c:5f:37:0f:e3:2d:60:27:7e:29:f6:37:3a:
                    ac:87:a7:c1:f4:bc:1b:ad:24:3a:03:8f:35:d4:90:
                    64:6f:8f:3c:72:ad:45:0a:55:b5:9a:35:03:3c:68:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8E:E2:C1:11:56:A1:9F:D6:BE:AB:F8:A8:95:11:21:99:A4:31:A4
            X509v3 Authority Key Identifier:
                keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:57:97:2d:05:71:70:1f:bb:54:90:48:b3:0f:d4:b0:57:a5:
         ca:63:88:81:3f:e4:7e:5d:7a:49:8d:c3:7f:df:54:4f:e3:60:
         d7:49:f6:80:88:d4:d1:eb:8e:5b:e8:e3:39:8f:5b:86:33:8f:
         82:d4:e5:bb:ff:18:d8:f7:79:af:b3:92:3d:10:ec:d1:c3:22:
         6d:f8:28:59:5d:e4:ab:5e:15:b2:75:31:c5:e1:dc:0a:f0:4b:
         c4:21:29:f5:b1:b9:db:6e:5b:28:f4:1d:07:39:c7:c9:41:c0:
         79:d0:cf:24:a8:b7:5b:47:17:14:50:41:e5:f1:8c:23:c5:80:
         e3:5c:60:1c:9b:14:9c:a3:4b:b6:c5:11:4e:ac:b6:f6:7c:6c:
         3f:d3:0b:d6:ee:7d:4f:16:88:47:ce:c2:51:6f:f6:e9:4d:6f:
         42:ad:5d:2f:1e:09:b4:ab:55:fc:68:f7:c3:14:89:68:7d:80:
         a4:76:11:35:f3:83:7a:7d:3f:3c:b6:d1:80:1f:32:34:a7:10:
         94:37:58:07:bf:d1:60:14:25:8f:81:36:e2:d1:74:bd:68:7b:
         b9:b3:8b:ee:5c:34:37:4a:56:0d:a4:64:8c:f2:61:3a:14:72:
         df:26:e8:d2:d4:56:eb:e1:3f:54:11:b1:96:a3:34:1f:c9:f5:
         1e:5d:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:51:28 2026 by rpki-client