Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
File:                     B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft (raw, json)
Hash identifier:          fDfolt5rKbmWlruably1rLs1jVKS1HzWihOayHim3yg=
Subject key identifier:   BC:60:98:F1:4E:D4:75:41:CA:04:20:C1:82:DF:71:4D:75:3C:E9:7A
Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
Certificate issuer:       /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Certificate serial:       01A13F7080F933255A76CD4E929E61A8C474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
Manifest number:          09EE
Signing time:             Thu 15 Oct 2026 12:01:39 +0000
Manifest this update:     Thu 15 Oct 2026 12:01:39 +0000
Manifest next update:     Fri 16 Oct 2026 12:01:39 +0000
Files and hashes:         1: 1-OzicR5kzd1Ow7p9pVk0SBB2HZs.roa (hash: WyH53JIWlzDtSzteiBRYQxZUpstzNJjn2NRysD5+PVY=)
                          2: B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl (hash: io5JUV7NMBSEtB8ugIpVB6KsaH6RJE43vDIGRVutZVI=)
                          3: zL1avC0lj7yCwQAa8kdB-j9BOqc.roa (hash: dt/cheCBQnjNlx2owBRsbLzi25MiYf0n9VeZMVmnugI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:80:f9:33:25:5a:76:cd:4e:92:9e:61:a8:c4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
        Validity
            Not Before: Oct 15 12:01:39 2026 GMT
            Not After : Oct 16 12:01:39 2026 GMT
        Subject: CN=bc6098f14ed47541ca0420c182df714d753ce97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:b7:56:10:11:2c:ec:04:4a:ed:a9:6c:b1:
                    03:0c:1e:df:50:59:e0:49:d0:14:c1:a7:ad:74:9b:
                    55:54:7c:3d:b8:2d:6d:6e:41:ae:44:42:9c:a2:a6:
                    30:03:aa:4a:b3:04:35:7f:90:2d:68:35:93:33:9f:
                    74:0f:af:97:b2:8d:38:94:3d:09:70:b1:df:34:41:
                    ab:ab:7d:8c:fc:95:f5:c0:c2:12:c5:f7:be:91:4a:
                    48:ce:cc:be:cd:f2:c3:33:71:e5:52:93:53:b4:4c:
                    77:38:ad:66:bd:f0:50:98:d2:e2:a7:f6:0a:de:20:
                    cc:1c:30:b4:34:41:77:36:7a:97:a5:47:fd:1f:74:
                    bb:36:b1:c2:54:27:58:7e:8f:b9:09:49:a1:ac:6d:
                    b9:34:f9:51:7f:ed:68:6b:7d:44:5f:4e:22:0c:2f:
                    bc:7b:da:fc:ad:1d:f7:e1:dc:94:83:6c:c2:e8:f4:
                    15:07:53:d1:eb:84:cf:09:e5:4a:f4:57:35:db:c6:
                    d1:25:16:3c:d3:dc:96:d5:36:69:1d:13:ed:34:5e:
                    b6:ab:b4:a7:ec:83:7f:82:54:50:8a:62:0e:9a:0d:
                    7d:f8:32:76:80:0e:78:4d:77:b4:ba:42:5d:87:3d:
                    c0:cb:36:8b:1d:f9:f7:11:35:43:0b:8d:b0:cc:35:
                    93:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:60:98:F1:4E:D4:75:41:CA:04:20:C1:82:DF:71:4D:75:3C:E9:7A
            X509v3 Authority Key Identifier:
                keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:1c:b1:ee:c5:8a:2f:51:bc:0c:ae:45:47:dd:0a:c0:38:
         f9:53:99:82:43:3e:d0:b9:9d:f2:cb:67:a0:2a:ff:e4:24:0c:
         10:b0:38:2a:cc:df:3b:88:d8:b0:f7:ea:20:50:95:5f:f8:48:
         16:3e:13:e9:71:f7:ca:83:c6:47:dd:6d:d6:5f:ea:9d:eb:ce:
         77:2c:7c:cc:45:6f:f3:94:1a:c7:1b:fc:b5:18:68:f4:fe:6e:
         4a:5a:0b:fb:b7:9b:75:3f:aa:9d:86:e0:83:06:b6:e8:5e:97:
         94:23:4e:0b:7c:d8:5d:49:d6:4b:52:db:bb:c8:19:03:25:68:
         f6:f9:3d:85:29:af:e5:94:b2:43:f7:2b:6b:b4:42:f4:20:e8:
         2d:a9:ae:43:1c:52:f7:a7:a7:4a:d1:13:f9:8e:4e:b9:f8:f9:
         67:d3:a2:a0:1d:e6:45:01:ab:df:2c:df:44:78:d1:99:39:6e:
         94:b5:68:5c:7b:79:30:e3:24:7f:56:0e:8f:2d:70:af:9e:d0:
         7f:2e:1c:8f:86:ff:39:46:cf:95:24:c8:fe:75:03:4c:0b:4a:
         ae:a0:07:70:10:a3:bb:12:ec:d8:e9:58:88:ba:be:b3:28:00:
         af:3c:fb:1a:78:a1:9a:1f:f8:4b:be:32:87:9b:c4:66:46:b2:
         8c:1c:0b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:03 2026 by rpki-client