Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
File:                     By4pytat0iohtWIVEYeEHI9T8uU.mft (raw, json)
Hash identifier:          B9b45j74v5xtjj/+7EK32F2ghd1N+/MqYRITBiUOhZc=
Subject key identifier:   B2:D6:A9:14:54:9E:02:4F:23:AF:C9:8D:99:49:01:92:7B:7A:B4:6F
Authority key identifier: 07:2E:29:CA:D6:AD:D2:2A:21:B5:62:15:11:87:84:1C:8F:53:F2:E5
Certificate issuer:       /CN=072e29cad6add22a21b562151187841c8f53f2e5
Certificate serial:       01A0CF3663B6B7A880E263F052818D02DBE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
Manifest number:          012F
Signing time:             Wed 23 Sep 2026 17:00:43 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:43 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:43 +0000
Files and hashes:         1: By4pytat0iohtWIVEYeEHI9T8uU.crl (hash: YNl0wfgIDornsc0JUD2hgzSmImOslvKOmhnuUSPEV54=)
                          2: NcP6QLbPAGbSnMuOHGBdAIY-8qc.roa (hash: w5wTWXfJi4JyaAkM3S35Sztsv2m7MFD4x5Xkavn1W38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:63:b6:b7:a8:80:e2:63:f0:52:81:8d:02:db:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072e29cad6add22a21b562151187841c8f53f2e5
        Validity
            Not Before: Sep 23 17:00:43 2026 GMT
            Not After : Sep 24 17:00:43 2026 GMT
        Subject: CN=b2d6a914549e024f23afc98d994901927b7ab46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:62:7e:2c:18:b4:59:15:39:6c:ec:89:2a:
                    1e:89:48:b1:c5:4a:36:eb:0b:af:67:1f:4c:54:01:
                    58:2f:52:1b:4c:ce:74:cc:93:f7:8c:1e:da:4a:84:
                    2c:3c:c5:ef:4d:7e:75:3f:ca:86:da:32:91:a6:8d:
                    d8:7a:7d:7c:64:86:35:a9:41:ec:c0:f4:ea:0c:54:
                    66:34:04:a9:50:ef:9b:fa:79:4f:2b:5c:c4:43:9c:
                    a9:bc:97:0c:de:07:7c:8b:03:b7:66:4b:bd:fc:b1:
                    14:f4:8a:14:97:c4:fd:6e:0c:0c:01:b5:4c:72:7d:
                    f9:1c:ff:fe:d8:7d:e5:b7:bd:99:e0:f6:90:b1:90:
                    e2:3e:7b:38:3c:6b:be:0a:83:7e:90:0a:a1:11:81:
                    55:ba:87:4e:f5:df:31:19:20:6c:d6:5f:10:e1:9b:
                    51:24:66:29:5b:fc:03:08:88:61:02:2b:f7:6e:38:
                    26:56:03:a6:6c:cc:62:42:46:79:6f:23:9f:38:58:
                    eb:b6:3e:d7:1b:e4:ca:ed:8b:bd:cc:cc:ab:1d:27:
                    ad:51:c5:7d:24:8a:ae:44:61:11:56:42:60:fa:bf:
                    7d:3e:92:53:33:ad:df:f0:f8:09:1b:80:72:45:ed:
                    b9:e5:7d:d4:ed:83:c1:24:53:5d:c7:99:2c:1f:0c:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D6:A9:14:54:9E:02:4F:23:AF:C9:8D:99:49:01:92:7B:7A:B4:6F
            X509v3 Authority Key Identifier:
                keyid:07:2E:29:CA:D6:AD:D2:2A:21:B5:62:15:11:87:84:1C:8F:53:F2:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d4:14:08:09:f6:22:f4:7e:e3:83:0e:e9:b6:37:cb:4f:c8:
         0d:45:47:8f:09:36:e1:fc:90:a8:3e:59:b0:05:46:49:c2:1c:
         f6:d4:6a:f3:d9:6d:54:9f:54:62:c6:9d:69:52:cd:84:2e:ba:
         bf:d5:01:7d:61:ca:79:82:8c:6e:5a:8e:3e:4f:e0:90:0d:da:
         7e:e5:91:15:4f:ce:39:5e:30:85:07:71:2c:3b:94:65:2c:26:
         bc:22:f2:34:d1:69:8c:52:88:e8:26:5a:b4:e2:55:fe:73:8a:
         1d:34:d9:eb:d7:a0:9a:d6:a2:54:52:71:40:78:4d:3d:6d:43:
         ec:84:5b:99:ec:46:af:ce:db:13:67:bb:8c:e7:01:26:cd:9c:
         e2:89:4e:15:19:5c:83:a4:e1:02:7e:f2:d8:53:8d:1f:94:00:
         18:b5:77:43:26:cb:0b:3b:43:7f:ec:89:cc:5c:c6:e8:38:0c:
         f6:fc:28:ae:8f:e0:8d:90:15:0a:9d:ea:bd:15:67:2f:06:a0:
         b3:71:80:81:c5:3e:07:26:43:21:59:2b:ac:be:0c:91:e3:58:
         5c:e3:fa:c2:50:47:54:90:e5:a7:5d:84:8b:4a:ae:5f:90:f2:
         2c:08:64:cb:08:d2:7e:96:01:30:c9:a6:47:68:d7:39:5f:5e:
         e5:19:b0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:41:53 2026 by rpki-client