Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          YpEU19lNXWxEePdtvHjg2gcVK0Tba9erV9gZLesgZ6M=
Subject key identifier:   E1:0F:D2:41:79:35:4E:DE:EE:18:6B:0E:E2:0A:51:0A:9B:BF:35:3F
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       01A17EF40B94F7E3F74D4A52173C915305E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          1AD0
Signing time:             Tue 27 Oct 2026 20:01:25 +0000
Manifest this update:     Tue 27 Oct 2026 20:01:25 +0000
Manifest next update:     Wed 28 Oct 2026 20:01:25 +0000
Files and hashes:         1: 291-znFSQvct2BZwzfK1cwLcwAw.roa (hash: /XCFd3ag+0mbQwm0eGd/JPuEd+El4o/QFrmk6+RphE0=)
                          2: 9MUFr_RsFRsCcEg9M0GmDZmsGGA.roa (hash: EvKHDQxBQtqNQYihgVJcZyfTiv7kA1w7YuXBnwu1TSA=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: UAkW8JLaUatfhFXi5kHxmz9F2T1D44wTft8APMcAG0E=)
                          4: VLzwNJkeBJU6voipR2ycpH_SyW0.roa (hash: WYZWxhBI2BwoiqzCW6Bmxom122HZzf1lwYvT1+rEwEw=)
                          5: iL8SJgTfFm_DO4zngs_BfrPS1jM.roa (hash: BsRqnxPV5ByC/K//Fbo6jM4xfMeMokNBdVnHMfCc3jQ=)
                          6: v6nfH0wLxZxAHbdZRaS-4fG1PGE.roa (hash: cr0KXwFavQXu/IQfCxnN6TBOG1I9t2JoVvFAl5yC74k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:f4:0b:94:f7:e3:f7:4d:4a:52:17:3c:91:53:05:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Oct 27 20:01:25 2026 GMT
            Not After : Oct 28 20:01:25 2026 GMT
        Subject: CN=e10fd24179354edeee186b0ee20a510a9bbf353f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:05:21:09:86:e9:31:6b:43:76:aa:ac:cb:c8:
                    c5:34:4d:fd:d3:ff:b8:c1:fe:a0:9a:c8:b8:ae:f2:
                    15:91:ab:71:e1:47:8f:cc:cf:00:15:15:1d:44:bc:
                    90:1b:e2:f4:18:5f:eb:ef:71:2c:92:43:b4:bb:f1:
                    80:36:b2:ff:b6:ee:64:f8:ca:e2:1f:a8:39:09:34:
                    d8:b1:d7:e2:fd:cd:43:57:9d:1d:45:db:01:8a:0c:
                    96:45:5b:f0:d5:b0:37:1a:04:83:cc:b8:44:62:21:
                    76:29:b7:ea:db:ca:6f:6d:9b:87:03:48:c5:7a:49:
                    66:72:a9:25:73:bb:c9:85:0d:c6:4b:71:bd:4e:cc:
                    d1:5b:a3:0c:b9:4b:c5:00:35:87:04:6a:c9:37:a3:
                    a3:45:82:ff:ad:04:d4:d8:94:0e:a7:9a:90:dc:b4:
                    74:11:31:15:aa:6f:14:1a:0d:75:a1:27:80:f6:1a:
                    6f:86:2f:ba:a1:ab:19:b4:6c:2e:ab:45:e4:ea:e9:
                    12:cc:de:4b:1a:19:e7:f3:a2:71:fa:38:94:a7:6b:
                    f8:f7:fb:99:2b:d7:a4:a2:6a:89:f5:40:aa:35:35:
                    3f:0a:e1:6b:47:17:9e:51:47:8f:4a:ad:65:5b:e0:
                    3b:f2:e6:7b:28:9b:56:91:e7:52:24:c0:27:94:64:
                    31:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0F:D2:41:79:35:4E:DE:EE:18:6B:0E:E2:0A:51:0A:9B:BF:35:3F
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:00:da:fc:e6:7c:21:c5:34:14:06:32:83:85:10:bc:e6:99:
         11:61:6d:40:a7:5d:12:cd:b9:ca:b2:3e:fc:a0:3e:25:70:72:
         2c:68:79:28:44:0d:a8:16:6d:66:89:8e:8b:5b:f2:ef:2a:f8:
         dd:30:a0:57:b1:9b:dc:61:0d:df:a2:40:56:d7:af:02:17:a9:
         12:c4:73:08:5a:a0:03:00:4a:f9:8b:0f:0b:0c:f3:a2:00:1e:
         4e:8e:17:50:74:16:62:6d:09:65:ee:77:47:55:c8:c1:b9:31:
         f8:9e:c6:ce:50:de:df:08:72:2c:8f:6f:ec:02:d9:56:ee:ae:
         67:c6:96:de:7a:a7:6b:47:d1:c7:e4:5c:2a:23:fb:f1:29:16:
         7d:f9:4c:f5:9d:12:ad:f8:f9:c7:cf:ad:f4:6d:48:b4:92:f5:
         8d:96:e1:22:d0:a0:d3:b6:27:3f:3d:50:50:be:06:17:de:64:
         75:77:b8:b5:e2:66:a1:fa:d3:bd:c5:a7:4a:39:3c:06:b1:73:
         64:1f:a5:60:ba:1d:1b:1f:33:1f:2b:44:4f:76:77:f4:88:b5:
         20:c5:df:01:f3:52:00:2c:09:ef:bd:3d:1a:ff:f7:80:e7:2b:
         5a:c9:3b:81:91:68:59:6f:4c:11:92:7a:eb:54:13:65:6f:94:
         b1:72:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:48 2026 by rpki-client