Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
File:                     boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json)
Hash identifier:          e6gbfulA+VhQRZHKGsV1MtFoCfnCvIHQIUUOipeJmAg=
Subject key identifier:   AF:1C:07:59:CC:35:EE:A3:98:9F:2B:A3:5A:49:FD:EC:ED:B0:8A:D4
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Certificate issuer:       /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial:       01A17C6085DE6D2D3C08D98C5B941EF1D719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
Manifest number:          1ACA
Signing time:             Tue 27 Oct 2026 08:01:02 +0000
Manifest this update:     Tue 27 Oct 2026 08:01:02 +0000
Manifest next update:     Wed 28 Oct 2026 08:01:02 +0000
Files and hashes:         1: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: /smwE2ui1Gn/FoGkq6yE+doFimAGKMfvmbki8BRCoPo=)
                          2: xmUoPe_uoUefJbAVDkhT4XlknC8.roa (hash: 8avUZYobEaMzXgdIn1drj3OJ1RhpFzcqCel7ZlxOycE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:60:85:de:6d:2d:3c:08:d9:8c:5b:94:1e:f1:d7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
        Validity
            Not Before: Oct 27 08:01:02 2026 GMT
            Not After : Oct 28 08:01:02 2026 GMT
        Subject: CN=af1c0759cc35eea3989f2ba35a49fdecedb08ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8a:61:90:4c:0c:23:2a:1f:9b:ec:6d:ba:1a:
                    7d:7c:c1:c6:5e:f6:df:33:90:2f:8c:20:ae:8c:31:
                    eb:0e:bc:92:06:a7:8d:4a:8a:03:5a:10:1b:ec:f1:
                    9a:f5:92:a3:f4:92:f8:ef:c7:c4:64:a3:54:84:80:
                    25:97:5f:30:aa:52:77:9e:fc:03:6c:2d:23:13:e1:
                    fd:72:e2:c6:b0:ef:50:99:3b:a3:2a:72:dd:71:9f:
                    f8:d3:50:25:58:f6:3f:a7:09:03:66:25:10:9e:64:
                    c0:aa:bf:f4:5c:64:97:4b:13:35:61:97:3c:55:d2:
                    b3:f6:51:ae:02:09:fc:f2:42:2e:7b:71:5a:fb:ed:
                    07:07:b5:d3:88:c9:94:69:cc:3b:9e:9f:b8:bc:15:
                    a7:48:fe:80:f2:a2:ca:fa:8a:0d:bf:5b:86:7e:91:
                    aa:27:fe:82:b3:18:99:fd:e3:53:60:e6:5c:58:10:
                    fc:10:28:2e:4c:78:6e:bd:f0:de:66:f7:d8:4f:a4:
                    b4:ef:1b:4b:4d:f6:9d:15:ac:55:5a:e3:a5:12:6a:
                    c5:a0:d1:d5:69:06:7b:24:e6:2c:de:e4:17:2f:0f:
                    cf:00:64:f7:58:39:03:b1:8f:50:7a:62:0f:87:8e:
                    9d:19:a9:9e:f2:b5:1a:54:31:85:5a:2a:dc:d0:45:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1C:07:59:CC:35:EE:A3:98:9F:2B:A3:5A:49:FD:EC:ED:B0:8A:D4
            X509v3 Authority Key Identifier:
                keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:77:12:35:f0:e7:98:df:bb:e1:08:df:14:1b:4e:b1:48:f9:
         71:ed:1e:9a:b6:63:c5:2a:84:a4:d8:fd:fd:25:75:a9:34:3b:
         cd:7b:6b:c2:e7:e0:8d:27:ed:57:cc:fc:89:6d:76:d5:58:54:
         5c:7e:f2:f2:17:9a:b5:1b:9f:ad:ca:5f:8e:f4:8d:fb:ea:6c:
         a9:5d:89:5a:39:8b:b4:bb:84:dc:04:72:e9:c4:a7:29:87:d3:
         15:71:4b:f5:46:36:c6:ba:12:ef:5a:e5:bb:4a:e2:9e:8a:cb:
         de:09:9b:79:e8:77:56:60:2d:be:49:32:5b:04:7e:45:e2:46:
         15:0b:21:01:f5:6d:d9:59:10:fc:fa:be:36:9b:df:ef:65:a5:
         00:37:ad:f9:95:cd:da:a2:16:66:6f:7c:65:51:13:f0:e7:38:
         b7:6a:d1:29:fa:a9:5e:de:e5:b0:90:67:89:56:7d:aa:dc:3d:
         73:27:06:be:38:10:5b:c2:50:60:3c:12:31:40:a6:0f:a5:1f:
         09:a5:50:59:16:d0:44:16:f7:65:0c:e7:a3:08:26:28:b2:3e:
         6e:08:4d:ae:34:52:fe:33:18:8e:bf:19:a0:e4:a7:58:5e:76:
         2d:e4:83:9b:be:0a:2e:d3:53:a5:91:08:7b:fd:6b:a7:54:9d:
         86:c1:d1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:34 2026 by rpki-client