Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File:                     bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier:          XHvbJX4zRy78LYtE0h3o720vMZuUJhamhOXFr6t0X8Q=
Subject key identifier:   B3:FF:48:56:DA:63:F5:BA:9A:57:BD:D6:FE:6B:CD:97:2B:66:C9:5B
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer:       /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial:       01A1073887577074D820A59ACC811F181A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number:          06E3
Signing time:             Sun 04 Oct 2026 14:01:47 +0000
Manifest this update:     Sun 04 Oct 2026 14:01:47 +0000
Manifest next update:     Mon 05 Oct 2026 14:01:47 +0000
Files and hashes:         1: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: pNJc2UmKVvV9cT0cc+e1rg33iL1spDy+NKUfyhwaD40=)
                          2: zLQM5UGUZQZaDaXLLIq2Cs9lTG4.roa (hash: lEMGpphC2f316K3X8TeGMMDyruycSyCxjomy+Oc5l4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:38:87:57:70:74:d8:20:a5:9a:cc:81:1f:18:1a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
        Validity
            Not Before: Oct  4 14:01:47 2026 GMT
            Not After : Oct  5 14:01:47 2026 GMT
        Subject: CN=b3ff4856da63f5ba9a57bdd6fe6bcd972b66c95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:32:08:f7:b7:e4:93:a6:05:bc:d9:3d:32:
                    96:5d:be:90:f7:cb:1d:7d:b6:27:1d:7a:e8:f0:ea:
                    36:2f:65:0c:8e:80:e8:2e:a0:03:ea:9a:41:2b:56:
                    8f:52:47:8a:1a:ef:bb:0e:87:d6:2a:f0:97:db:20:
                    10:85:53:38:22:8e:70:b4:da:37:90:27:c0:0f:b9:
                    b3:1f:ab:55:01:7b:3a:d4:fa:ba:74:91:95:93:66:
                    d2:cd:b3:8c:bf:0e:e8:05:dd:a6:16:2a:4c:ab:fa:
                    9d:d4:86:11:ab:d7:2e:2e:bb:ef:e7:9d:97:c8:10:
                    2a:60:f0:92:6b:da:bc:87:e1:fc:11:b7:08:de:ea:
                    c4:eb:ce:85:ee:b2:e4:79:07:d6:f6:4b:35:f5:4a:
                    c6:5d:5c:fd:a0:9f:fa:9f:48:33:5e:02:39:20:40:
                    09:a5:f9:d5:db:ce:e3:27:58:0b:72:79:16:79:32:
                    b4:62:a8:3a:33:5b:e0:f3:b2:55:10:18:07:2a:8f:
                    9b:18:f5:fb:30:9f:aa:b6:f5:72:f6:ce:55:e9:07:
                    ad:a9:d0:f2:a7:6a:cc:8a:44:41:da:6d:32:0a:3b:
                    88:83:53:14:86:09:38:dc:b5:73:c0:f6:93:c1:01:
                    d8:71:7a:87:39:ba:59:3d:8c:15:a1:a9:d1:d9:78:
                    c8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FF:48:56:DA:63:F5:BA:9A:57:BD:D6:FE:6B:CD:97:2B:66:C9:5B
            X509v3 Authority Key Identifier:
                keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:32:ee:7b:eb:47:be:93:bb:1a:f4:42:c8:87:f3:b9:63:43:
         32:30:f8:69:46:e5:e6:0c:c9:b3:ef:76:72:ff:2a:1b:1b:9a:
         1f:87:16:f1:25:67:8b:7f:bc:8f:51:54:a5:51:00:69:c4:29:
         e3:9a:c1:a2:6d:5b:a2:17:5a:a4:ca:45:98:af:85:b9:1c:d3:
         f6:85:84:f3:f0:38:da:0d:88:db:53:0b:45:4c:e2:4e:ae:92:
         9f:17:84:49:3a:eb:df:d0:24:91:0b:0c:4e:39:f8:17:25:5d:
         10:c1:6b:4e:db:bd:89:7f:e0:d4:ad:3d:18:46:2e:14:f9:96:
         32:3d:0e:84:6b:82:8f:8b:8c:e5:8c:01:b4:7a:f8:b9:2e:46:
         c1:dc:26:99:44:43:ae:51:93:7c:ef:72:da:fa:1a:05:92:4b:
         46:bf:14:b3:d1:7e:dd:5f:00:a9:f8:8e:0f:60:f5:80:1f:3e:
         40:93:eb:48:ec:47:38:04:0b:72:f8:01:96:be:0c:d5:0a:ef:
         bc:75:d2:92:3f:d4:6c:5f:11:2e:8a:79:74:5c:8b:84:91:fa:
         f6:f9:00:ab:87:a5:45:01:ca:ad:26:47:13:c6:a4:5a:b9:4f:
         41:0b:62:d5:dd:da:35:da:43:65:a4:cb:0d:8f:df:b6:77:f8:
         cf:0b:ec:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:57 2026 by rpki-client