Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
File:                     BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft (raw, json)
Hash identifier:          JPmkIuRh780V6p++g5ERMG9+nN75WkL3pc48gFNreco=
Subject key identifier:   92:32:93:2E:FA:FE:74:E1:9E:D7:3D:EF:7A:08:D5:27:48:21:51:36
Authority key identifier: 06:53:FB:3E:56:D3:48:15:DF:AB:4A:47:2C:E4:3E:1F:05:CD:DE:F0
Certificate issuer:       /CN=0653fb3e56d34815dfab4a472ce43e1f05cddef0
Certificate serial:       01A0CB5933B9885C79CC3E5D517C905FEDF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
Manifest number:          0192
Signing time:             Tue 22 Sep 2026 23:00:15 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:15 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:15 +0000
Files and hashes:         1: BlP7PlbTSBXfq0pHLOQ-HwXN3vA.crl (hash: op0hV9vXTzMjbU6ikLw9VG1+Z5ywetnT9J+4o4J4/uo=)
                          2: PQIndNBPhUHcFJTYcUMrCvxz4-c.roa (hash: XR6KIi/5N9W2LcPOtGecqXCju8ze0aaqWYIJi9fNKa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:33:b9:88:5c:79:cc:3e:5d:51:7c:90:5f:ed:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0653fb3e56d34815dfab4a472ce43e1f05cddef0
        Validity
            Not Before: Sep 22 23:00:15 2026 GMT
            Not After : Sep 23 23:00:15 2026 GMT
        Subject: CN=9232932efafe74e19ed73def7a08d52748215136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:44:30:39:61:27:22:fe:1a:3e:32:26:2f:
                    5c:38:18:cb:4e:80:06:05:04:95:af:ef:fc:c7:19:
                    08:a5:1e:c9:81:c9:dd:c4:a1:a2:2e:12:46:33:bc:
                    3a:74:e8:c4:13:dc:c2:82:2c:6a:ad:30:0d:56:95:
                    c4:bc:5c:99:5a:12:5c:e6:ec:6a:82:85:27:ce:44:
                    b5:7c:30:7c:29:f8:f6:50:a1:96:3b:4c:b2:b6:9d:
                    18:48:a3:35:57:d0:5d:4a:f1:e7:b0:42:3b:e3:f5:
                    e1:e0:fc:c0:2c:35:b1:fa:6d:5e:cc:d4:22:2b:12:
                    1e:98:06:1c:0a:51:5c:2a:b6:7e:f1:12:12:3a:d3:
                    14:15:a1:f2:e4:b3:74:c9:e8:8b:86:44:68:ed:63:
                    58:6b:f5:41:42:95:86:f7:e4:05:7e:ec:b6:53:1d:
                    d3:71:fd:05:3c:73:0d:a7:37:be:6a:23:c7:c1:04:
                    f6:f7:12:0b:d6:02:12:d2:12:f9:99:b5:66:17:85:
                    df:6a:e6:61:8a:a5:fd:aa:c3:e6:2e:80:a6:c4:20:
                    2f:4a:d7:e8:40:92:13:39:dd:16:43:cf:15:5e:69:
                    f4:24:97:9a:c4:92:0d:75:ce:f5:01:a8:12:0b:fe:
                    3d:b9:3d:6b:93:6f:82:06:e7:d4:ce:0e:ba:ca:db:
                    05:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:32:93:2E:FA:FE:74:E1:9E:D7:3D:EF:7A:08:D5:27:48:21:51:36
            X509v3 Authority Key Identifier:
                keyid:06:53:FB:3E:56:D3:48:15:DF:AB:4A:47:2C:E4:3E:1F:05:CD:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:13:ff:24:4a:c5:28:b3:5a:ad:21:41:6c:c4:ce:09:3f:0d:
         1f:6f:43:29:56:ab:0e:a9:2b:7e:69:3a:96:ef:ea:39:97:90:
         da:78:a0:f2:6a:0b:2b:72:a1:1a:a5:63:05:b1:68:cc:8b:56:
         73:be:a5:b3:06:bb:b3:ae:7a:cd:b1:60:7b:18:15:94:1d:fd:
         2d:e4:c4:a2:2b:3d:b0:80:2e:b5:87:b4:4f:74:c6:b1:92:9f:
         4d:0a:be:15:4b:63:06:cf:7b:21:69:23:f4:61:cb:45:38:bd:
         8e:f9:11:5c:46:6d:27:66:6d:ec:64:6d:ff:11:b7:d4:61:e8:
         4a:a1:bd:f3:fc:e4:e1:11:61:12:7a:ab:f1:52:03:89:4c:ae:
         9e:5e:98:01:bd:0f:0d:67:cf:c4:4c:43:80:da:ea:7a:f8:cd:
         ec:19:c4:74:2d:68:35:b5:9b:35:6b:a2:6c:fd:63:ca:58:f9:
         0b:a3:3a:68:78:a0:76:de:15:3c:0e:e1:d0:77:a9:5f:e4:f5:
         0c:70:75:88:6c:22:fa:07:4d:77:9c:e6:87:c3:d6:65:e3:a9:
         19:21:f3:da:f5:3c:e5:1d:da:12:df:2f:83:34:a3:34:97:5c:
         05:95:c9:51:da:d1:a5:f5:5b:3d:88:e8:38:63:b7:cd:00:24:
         cd:8e:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:57:46 2026 by rpki-client