Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File:                     BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier:          PE7zvejh8XVyevYG9xG0Ia+xbZW1Sf13RDJvF5iTHMY=
Subject key identifier:   F8:E6:F2:62:AE:4E:E4:5C:88:10:5E:C6:CD:25:5C:25:68:DB:0C:C6
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer:       /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial:       01A0D3EF7235BDE567E1128EBD9691B61552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number:          105D
Signing time:             Thu 24 Sep 2026 15:01:19 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:19 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:19 +0000
Files and hashes:         1: 4lepvlgVUIp6Gpp6-Feg4sp-5-Q.roa (hash: 2h8HXaG+e+vq1FJBhsfEh5PQ+syYPMKgZRdxjB2O/o8=)
                          2: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: wKMF7xXw3Orpt2xSkO6C0wlq7F7O2gheVC+TVF/nLfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:72:35:bd:e5:67:e1:12:8e:bd:96:91:b6:15:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
        Validity
            Not Before: Sep 24 15:01:19 2026 GMT
            Not After : Sep 25 15:01:19 2026 GMT
        Subject: CN=f8e6f262ae4ee45c88105ec6cd255c2568db0cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:10:ee:74:27:9f:78:b8:ce:f8:3f:fa:52:
                    cc:00:86:37:df:49:16:d7:c9:0d:19:83:3c:d1:c1:
                    bb:66:b6:ce:1e:bb:53:16:a7:69:c7:9c:ae:c0:bc:
                    2d:ae:e5:58:2a:1c:ce:29:ec:94:15:a1:ee:92:99:
                    c8:f2:1b:bf:c9:ab:22:60:bd:48:96:cc:a5:20:0f:
                    e2:27:ef:ab:4b:cc:e9:54:e7:76:c1:1c:33:50:12:
                    88:63:d7:3c:a8:c0:a4:fd:37:0f:3e:64:02:b1:78:
                    2b:a9:95:e5:4d:1c:8f:a5:eb:e7:9a:0f:d4:d8:4b:
                    14:9d:70:ce:28:c3:b8:5a:59:25:d8:98:05:a5:5c:
                    e8:4c:ad:ea:df:34:14:1f:b7:6c:8a:bf:91:34:1f:
                    76:bd:95:25:50:13:cc:8d:e4:5a:c7:1e:86:cd:84:
                    27:34:a0:9f:90:67:4b:49:9a:a4:13:93:a4:39:3c:
                    09:3e:f2:84:4f:36:20:90:cc:6f:9b:72:f4:e7:73:
                    2d:97:e6:a4:30:8b:8f:69:f2:b0:9a:60:07:82:d1:
                    4e:7c:71:44:16:ee:ab:f0:ab:1b:28:e1:a7:6a:ab:
                    a7:d3:74:34:ac:9a:36:50:39:5e:7e:10:65:fc:81:
                    f7:56:a6:04:e6:aa:c3:36:96:0c:04:8d:5e:2f:56:
                    a6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E6:F2:62:AE:4E:E4:5C:88:10:5E:C6:CD:25:5C:25:68:DB:0C:C6
            X509v3 Authority Key Identifier:
                keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:62:88:2e:f0:73:35:da:64:ca:5f:18:ee:8a:d2:3a:52:e5:
         06:85:2c:44:22:2f:3e:ae:b6:a3:b8:1c:ae:a2:57:96:68:8a:
         72:c3:3d:10:5e:dc:c5:02:e8:91:3a:00:94:20:99:e1:0d:39:
         9b:c3:e9:1f:63:b7:5f:88:ce:99:07:c9:e6:e2:31:b8:c7:2e:
         d1:63:59:36:4a:25:ba:d7:9f:6e:e1:5e:b6:e7:aa:3a:45:7d:
         a1:2a:7f:21:33:ff:7f:d9:20:af:f6:7d:57:3e:7f:2a:3a:d0:
         64:36:a8:07:3a:5c:a2:77:fe:fe:83:ac:bd:ac:e2:a2:a2:25:
         a7:53:a7:3b:0a:d0:92:24:96:91:43:ec:82:54:af:2e:25:5d:
         ca:83:03:03:67:b3:a4:b2:73:cc:a0:b7:8c:bf:b2:18:35:b9:
         3f:66:ee:2e:23:c8:a5:40:d7:c3:95:42:ac:66:d0:25:a5:a8:
         12:54:15:86:23:dd:0a:2f:3f:4b:04:d2:8d:c9:50:63:17:2f:
         1d:c8:6f:f2:60:ed:34:dd:66:9c:aa:29:64:68:19:b2:f7:46:
         1b:9c:e6:cb:54:67:50:f6:e2:33:61:03:42:83:99:f6:5a:13:
         7c:0d:41:3e:98:b0:3c:cc:6b:65:be:ae:51:5c:c3:7d:97:74:
         a6:6f:4e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:08:02 2026 by rpki-client