Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
File:                     bsoi085FOsDAPKm2whQHcU63hCU.mft (raw, json)
Hash identifier:          viMgIBD4MDpRKumVOyE1v7WZ6mMIihBOwT5pd5gpcvs=
Subject key identifier:   D8:B0:14:3D:37:65:B4:A7:8C:E1:AE:80:C6:00:D8:05:E2:0D:23:11
Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
Certificate issuer:       /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Certificate serial:       01A17EF4343E45D66DDC8F3761ABAAAC699E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
Manifest number:          037F
Signing time:             Tue 27 Oct 2026 20:01:35 +0000
Manifest this update:     Tue 27 Oct 2026 20:01:35 +0000
Manifest next update:     Wed 28 Oct 2026 20:01:35 +0000
Files and hashes:         1: bsoi085FOsDAPKm2whQHcU63hCU.crl (hash: /EdGHwacLC4ulfgWAe+35Qz83LdM863Hf+ZnjYhi9Ig=)
                          2: kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa (hash: LGB+6qc6f2IFP3yURAz7uhoUKkg6z1TzwYrDl1Ny9tA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 20:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:f4:34:3e:45:d6:6d:dc:8f:37:61:ab:aa:ac:69:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
        Validity
            Not Before: Oct 27 20:01:35 2026 GMT
            Not After : Oct 28 20:01:35 2026 GMT
        Subject: CN=d8b0143d3765b4a78ce1ae80c600d805e20d2311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:dd:0b:65:5c:b9:81:af:96:fb:0b:e2:0a:
                    28:f7:a9:03:5d:1d:75:d8:88:0d:73:78:d6:84:8e:
                    16:2d:77:7d:f0:d6:68:b5:44:0b:e4:80:d6:13:da:
                    2c:a0:96:6a:e2:49:12:e6:a1:89:18:bf:d1:8b:b2:
                    f4:9e:24:b6:dd:10:80:4d:30:86:43:6f:18:51:eb:
                    19:a6:4a:25:54:d1:6c:50:27:5d:13:68:b0:cc:52:
                    fe:39:28:1a:b2:f4:51:f0:a0:ad:5e:2f:f8:95:f7:
                    8a:78:e9:4b:45:97:64:5a:09:fa:87:6b:2c:8a:54:
                    e6:e3:9d:47:98:fb:d8:d3:ce:03:2a:e3:9a:f9:9a:
                    13:8c:ef:52:9c:62:bf:73:b1:bb:de:0f:0c:c2:38:
                    68:0a:c6:e8:f0:24:f6:f3:43:a4:04:1c:77:46:f5:
                    f3:94:35:0d:05:3a:f2:04:65:3c:e3:38:d9:40:18:
                    21:ee:05:17:c3:69:b6:c3:5a:96:19:9b:d4:42:9f:
                    e6:04:51:bf:c4:13:a5:7e:c1:37:d3:f6:10:0b:fe:
                    a8:9b:62:7e:fa:89:e8:ad:11:7d:23:e3:3a:64:a0:
                    eb:6d:3e:88:8a:7e:e7:71:5b:8e:ce:3c:c6:66:6f:
                    35:f0:8b:48:b2:2e:b1:0e:7e:b1:67:5f:bb:88:0e:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B0:14:3D:37:65:B4:A7:8C:E1:AE:80:C6:00:D8:05:E2:0D:23:11
            X509v3 Authority Key Identifier:
                keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ee:a1:1d:c9:32:9e:34:21:98:ff:3c:6b:be:55:e8:1f:ad:
         f8:9d:eb:eb:ff:e2:ec:0c:17:69:f5:98:4a:8f:c6:60:bb:ac:
         fe:8c:40:83:e7:bb:40:43:a2:70:a6:42:ff:8a:e2:51:bb:b3:
         39:ee:4b:21:20:ea:31:1a:87:b6:98:84:64:c8:20:87:2b:be:
         39:d5:fb:1c:9c:8d:fa:79:cf:94:51:b2:a6:6b:f6:01:1e:74:
         36:cb:6a:b5:0a:4b:b2:9d:80:fc:c2:8d:c5:cd:1c:db:f3:36:
         62:54:40:ed:c9:75:12:eb:06:d0:ce:40:f2:f7:9f:7b:70:4a:
         61:84:db:08:0e:d5:f8:28:b7:d6:a3:04:dc:c4:5e:3c:97:62:
         a2:e2:1d:19:aa:0a:4f:cf:3a:94:02:2c:8d:60:54:fd:96:76:
         32:69:a3:c9:9d:98:df:42:f3:7a:47:9a:06:ce:53:4d:ed:5c:
         66:0b:fe:40:34:fe:1e:cf:ec:b1:ca:c4:56:5e:f2:3a:ce:a3:
         11:44:df:9d:25:12:89:d4:c8:45:65:93:25:ed:f1:5f:9d:0d:
         23:26:4a:1f:41:05:27:0d:c0:da:b2:d5:51:75:69:77:72:67:
         6d:4a:2c:e6:c7:a3:0d:4b:e4:0e:ee:f8:8a:aa:92:49:fc:9c:
         58:ce:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:46:13 2026 by rpki-client