Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
File:                     B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json)
Hash identifier:          O315x4LEskZDwcSzAXqrPGevOjUjwhudfK7ZayywuuA=
Subject key identifier:   06:BA:4F:80:BE:8B:7A:93:A9:B6:DB:FF:F8:93:16:6F:2D:7A:55:B4
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Certificate issuer:       /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial:       01A0CFA41E9C9C701DB123428C1B47B02387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
Manifest number:          0487
Signing time:             Wed 23 Sep 2026 19:00:34 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:34 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:34 +0000
Files and hashes:         1: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: PyMq1tEAtI4a4CA4vs0aD4m+1Y+8XIhq+9ov/L9z3V8=)
                          2: TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa (hash: iK5z4qk0gr8bvYoAqNPpIK2aAVNKtW+7/UdSHbw3Lm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:1e:9c:9c:70:1d:b1:23:42:8c:1b:47:b0:23:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
        Validity
            Not Before: Sep 23 19:00:34 2026 GMT
            Not After : Sep 24 19:00:34 2026 GMT
        Subject: CN=06ba4f80be8b7a93a9b6dbfff893166f2d7a55b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:30:34:99:5d:70:fb:2e:7c:e0:9e:7f:92:
                    1d:ab:99:fa:fb:21:7c:0e:2a:69:96:8e:ec:da:c6:
                    83:8c:85:11:ed:05:53:b5:89:0f:4f:d4:3c:52:23:
                    38:36:5a:12:5d:0e:19:86:05:bc:2e:f6:69:41:01:
                    6c:48:89:66:7e:12:e9:60:12:ee:39:00:4f:26:23:
                    b7:dd:69:19:ee:d3:60:88:9c:d4:77:9b:d3:51:e8:
                    e6:51:12:f9:7a:c4:16:5e:3a:fb:6c:1d:43:8e:d8:
                    d1:da:51:b6:5c:87:ea:5f:71:85:e4:22:0b:a2:9b:
                    af:52:a2:b2:27:8e:de:62:c3:5e:42:48:1c:dc:0f:
                    86:9c:0d:da:86:d8:f7:ef:e6:09:40:99:4a:90:99:
                    f4:62:cd:8a:53:f4:27:85:99:2e:84:d6:f1:e9:cd:
                    eb:ff:18:af:9b:dd:f1:b5:49:84:5b:99:eb:4a:b9:
                    7b:f6:d0:2b:bf:a4:89:55:c4:64:23:f1:c7:d3:08:
                    ce:25:db:d1:b4:83:ff:89:b4:95:c0:1c:ed:a1:cc:
                    d3:b9:43:7a:bb:ac:0f:ed:0c:4f:02:ed:a5:b3:33:
                    e1:c8:23:a9:ce:f5:de:ff:36:ff:a6:87:9e:95:2a:
                    3b:8c:3b:c0:46:3c:9a:9b:f0:cb:97:62:97:09:2e:
                    d2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BA:4F:80:BE:8B:7A:93:A9:B6:DB:FF:F8:93:16:6F:2D:7A:55:B4
            X509v3 Authority Key Identifier:
                keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e0:1a:39:b3:08:c2:6f:ce:ba:83:6f:c5:49:da:34:bc:9a:
         57:e2:1b:c1:fc:81:d4:16:41:09:d4:98:f0:af:43:b2:0a:80:
         98:f2:84:53:6b:3a:64:77:e5:79:fb:d1:a3:b6:25:57:44:80:
         7a:fe:73:89:26:e9:37:69:9c:5c:c5:34:f6:c2:11:24:40:dd:
         fc:fb:7b:5e:5d:02:d9:33:e1:81:21:c8:ec:83:7f:ef:17:13:
         39:43:03:0b:df:9e:3c:5f:59:6c:13:eb:2d:1d:d7:a2:31:12:
         d4:0e:3c:6b:e5:aa:45:cf:1f:5b:24:ab:91:1e:ef:e0:82:a4:
         0d:d4:22:73:c7:95:8b:7b:b7:90:20:0d:38:c9:97:3c:32:ef:
         d0:09:63:a2:f2:ec:fb:9e:60:9b:a9:d4:4b:f5:ac:32:1d:91:
         69:4d:b1:6a:c0:9f:53:9d:0f:b5:e0:3c:72:9b:e9:64:ee:9c:
         28:e7:6e:08:68:59:1e:7f:04:7f:56:86:e0:07:97:e2:a0:c8:
         3d:b2:06:03:53:24:4a:f8:ff:b4:8a:d6:da:42:ea:e7:21:a8:
         5c:34:c1:6e:eb:54:11:b8:ee:5f:c6:04:87:22:10:00:38:d0:
         6d:48:d0:5f:82:ec:c8:d5:21:f2:8e:b3:a4:06:b5:ac:4d:de:
         e3:ed:b2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:01:13 2026 by rpki-client