Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File:                     AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier:          jsaJ03csXOS8NN2Hjk4wXB0lD38OUuEOJROj/oPShEI=
Subject key identifier:   BF:D7:A2:FF:7E:87:C7:6D:96:C2:A8:80:DA:D6:D2:84:8C:C7:1D:80
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer:       /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial:       01A0D19211F49558ED11644BD104C39F56B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number:          1972
Signing time:             Thu 24 Sep 2026 04:00:05 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:05 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:05 +0000
Files and hashes:         1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: VX+DFn/UHMTYS4X19L0KZQmTcpayX2075ncRO2lcH/Q=)
                          2: OkVoScbKIL9TXKvP438rB5FRYb0.roa (hash: 45VM0zyf0tTbWI+Pen84q/pMakzdNZmUXMwDebqNLz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:11:f4:95:58:ed:11:64:4b:d1:04:c3:9f:56:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
        Validity
            Not Before: Sep 24 04:00:05 2026 GMT
            Not After : Sep 25 04:00:05 2026 GMT
        Subject: CN=bfd7a2ff7e87c76d96c2a880dad6d2848cc71d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:45:f8:e1:34:20:d1:18:fa:e1:82:af:09:
                    61:08:50:0d:1f:24:e4:97:ea:b8:4b:32:35:48:9b:
                    bb:6a:46:16:22:f7:73:ed:24:ec:ed:e1:19:fc:fd:
                    3d:29:56:91:03:ee:9a:26:85:b0:c2:c1:fa:15:fe:
                    82:62:7c:67:23:6d:6c:50:07:3f:8b:d3:e4:26:6d:
                    b2:61:a7:7d:18:60:de:11:98:24:f5:8b:19:66:65:
                    83:71:19:47:5b:90:2e:54:f4:84:54:2a:80:3a:40:
                    73:66:62:88:75:45:63:74:85:89:5b:cc:0e:27:e6:
                    fe:30:cb:78:5b:f0:54:24:8a:03:c3:d4:40:7c:d0:
                    ac:b4:bf:e6:fc:86:c5:f7:c0:30:64:c0:6f:b6:23:
                    f1:42:f2:26:88:fd:ce:57:9c:44:5c:29:a4:aa:be:
                    86:67:1d:5d:16:02:0a:13:43:fd:e3:6c:20:bf:1f:
                    79:18:0d:52:6d:f4:b2:10:ed:da:3c:e1:31:ef:8b:
                    46:a3:32:4e:38:95:14:6d:54:31:4d:21:25:a0:ff:
                    36:96:e2:a8:4f:f8:bd:ec:54:33:73:46:c3:cf:02:
                    c9:f5:8c:4e:c2:62:9a:c5:63:95:4c:df:5f:a7:61:
                    34:4a:fa:fd:7b:20:24:b3:41:61:2b:67:cb:77:6c:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D7:A2:FF:7E:87:C7:6D:96:C2:A8:80:DA:D6:D2:84:8C:C7:1D:80
            X509v3 Authority Key Identifier:
                keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:62:d6:70:a7:fc:d3:ec:7d:c0:07:12:18:a8:d5:b6:4b:4a:
         16:ac:f7:92:0e:2b:43:4d:80:74:8a:e8:02:a7:3d:78:cd:61:
         ea:09:a1:11:ac:52:c5:77:b1:75:25:71:ed:7a:b5:e1:b4:19:
         8f:32:63:ee:1c:b5:11:31:d2:ab:da:dd:ae:8c:20:e9:b6:f9:
         6a:1a:93:7b:8b:61:b3:5c:47:1f:2b:82:ba:20:4e:a2:b7:1a:
         f5:dc:ec:c1:fb:c9:37:78:96:a5:6d:45:27:50:2d:7a:18:c2:
         9a:59:54:6d:8b:e4:fd:bf:8a:ba:0f:06:dc:d0:c2:74:d4:da:
         b9:64:8c:59:84:70:93:78:67:6c:2a:41:32:0e:aa:87:5f:3f:
         09:72:95:91:c2:e9:f4:a3:46:d5:9f:ed:13:eb:84:cb:ce:33:
         b5:2a:5c:d8:d4:2e:48:e8:a0:b2:31:0f:3f:ad:b9:47:9f:f3:
         e7:eb:c5:f6:7e:df:a5:c7:26:5d:46:1a:a3:98:8e:27:1f:40:
         05:93:29:c6:10:11:f4:d0:c9:b8:ae:f0:9b:13:b2:36:fd:02:
         9a:02:0f:67:74:72:28:e0:c7:19:3a:d7:04:87:e4:b0:43:c0:
         31:9d:9d:f3:d4:c5:b5:00:42:42:9e:3e:39:47:08:aa:08:3d:
         33:d2:ec:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkhH0lVjtEWRL0QTDn1a2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTU4NTA5ZTFjMGVjMTYwZGUyZTA3NDE3NzIxM2RlMzA2
MTVkNmYwHhcNMjYwOTI0MDQwMDA1WhcNMjYwOTI1MDQwMDA1WjAzMTEwLwYDVQQD
EyhiZmQ3YTJmZjdlODdjNzZkOTZjMmE4ODBkYWQ2ZDI4NDhjYzcxZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxVF+OE0INEY+uGCrwlhCFANHyTk
l+q4SzI1SJu7akYWIvdz7STs7eEZ/P09KVaRA+6aJoWwwsH6Ff6CYnxnI21sUAc/
i9PkJm2yYad9GGDeEZgk9YsZZmWDcRlHW5AuVPSEVCqAOkBzZmKIdUVjdIWJW8wO
J+b+MMt4W/BUJIoDw9RAfNCstL/m/IbF98AwZMBvtiPxQvImiP3OV5xEXCmkqr6G
Zx1dFgIKE0P942wgvx95GA1SbfSyEO3aPOEx74tGozJOOJUUbVQxTSEloP82luKo
T/i97FQzc0bDzwLJ9YxOwmKaxWOVTN9fp2E0Svr9eyAks0FhK2fLd2xb1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/Xov9+h8dtlsKogNrW0oSMxx2AMB8GA1UdIwQY
MBaAFAJVhQnhwOwWDeLgdBdyE94wYV1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODYwYmYtMWEyNy00ZjBmLWJkOTEt
N2FlNjkxMWNhMTI2LzEvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9hODYwYmYtMWEyNy00ZjBmLWJkOTEtN2FlNjkxMWNhMTI2
LzEvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGLWcKf8
0+x9wAcSGKjVtktKFqz3kg4rQ02AdIroAqc9eM1h6gmhEaxSxXexdSVx7Xq14bQZ
jzJj7hy1ETHSq9rdrowg6bb5ahqTe4ths1xHHyuCuiBOorca9dzswfvJN3iWpW1F
J1AtehjCmllUbYvk/b+Kug8G3NDCdNTauWSMWYRwk3hnbCpBMg6qh18/CXKVkcLp
9KNG1Z/tE+uEy84ztSpc2NQuSOigsjEPP625R5/z5+vF9n7fpccmXUYao5iOJx9A
BZMpxhAR9NDJuK7wmxOyNv0CmgIPZ3RyKODHGTrXBIfksEPAMZ2d89TFtQBCQp4+
OUcIqgg9M9LsXQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:05:53 2026 by rpki-client