Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
File:                     Ben594wsu8X6CLm4nwoR0rC6Rzw.mft (raw, json)
Hash identifier:          vcjY9HMMsJqoU45p3s3Gcw3x4DGnVpYo0r59Y5BGRw8=
Subject key identifier:   1B:C9:6E:D3:B7:86:C4:2F:AB:F4:AF:5F:B5:CD:76:06:5A:80:B5:D3
Authority key identifier: 05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C
Certificate issuer:       /CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
Certificate serial:       01A1352341C133245364AAD273EE41E30FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
Manifest number:          0428
Signing time:             Tue 13 Oct 2026 12:01:05 +0000
Manifest this update:     Tue 13 Oct 2026 12:01:05 +0000
Manifest next update:     Wed 14 Oct 2026 12:01:05 +0000
Files and hashes:         1: Ben594wsu8X6CLm4nwoR0rC6Rzw.crl (hash: JkweSptiwyiyzrmm7+SjXx40PH3sgoBtnfeEJnHntAo=)
                          2: mhgKCJ1nvE6DH7QXTMvKJR_CaeI.roa (hash: oPOgwFYCUJXYrzGTQdio35gdM00ehjCiR2syxxKZ+aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:23:41:c1:33:24:53:64:aa:d2:73:ee:41:e3:0f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
        Validity
            Not Before: Oct 13 12:01:05 2026 GMT
            Not After : Oct 14 12:01:05 2026 GMT
        Subject: CN=1bc96ed3b786c42fabf4af5fb5cd76065a80b5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:e2:26:c1:64:b0:bb:bb:7d:c8:da:7f:5c:
                    72:01:7c:cc:e3:eb:c2:e0:40:8c:23:b3:01:0f:18:
                    f6:e3:ff:c7:f8:79:52:6f:41:f2:09:ef:89:9a:0d:
                    2f:53:95:8c:ed:2a:12:13:f4:08:d0:f5:a9:7c:fc:
                    3b:7d:ab:81:e5:c5:10:40:26:42:38:e5:61:f6:6b:
                    96:eb:3f:e7:26:e5:bd:4b:0c:47:7d:66:2b:4c:9a:
                    64:04:4d:71:65:02:d3:43:c9:7e:d2:89:e1:b7:a2:
                    eb:64:a3:b8:f9:08:94:d4:d2:0c:fe:17:b8:61:fa:
                    ea:b4:27:65:f1:be:94:f9:f4:ed:c9:a5:e6:dd:6e:
                    24:d3:37:fc:38:b2:8e:8c:de:ad:1f:b3:e9:c2:7e:
                    a8:a5:05:ee:4f:70:eb:31:74:3f:cc:0e:27:c4:6b:
                    4f:f8:a7:ad:a7:63:4c:a8:0a:73:72:3a:3f:79:d3:
                    a1:75:bf:eb:ae:96:a9:ad:b6:3f:d1:33:a8:1a:03:
                    7b:60:96:ef:5e:da:4f:ec:7d:69:be:92:79:44:ca:
                    07:17:24:97:9a:67:15:fd:cf:78:4a:82:e7:3c:82:
                    d7:3d:95:ee:ba:f4:2e:c2:09:6d:27:b2:35:5d:55:
                    26:82:8e:eb:ee:c2:90:7f:3c:7c:e4:cc:99:4c:98:
                    7c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C9:6E:D3:B7:86:C4:2F:AB:F4:AF:5F:B5:CD:76:06:5A:80:B5:D3
            X509v3 Authority Key Identifier:
                keyid:05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b9:0a:f5:2a:58:65:32:a0:6e:1e:88:80:30:83:4e:a1:98:
         e0:17:ed:0b:6a:16:53:30:55:2f:c8:8e:d8:60:9d:a1:63:43:
         68:e3:e6:e3:56:ad:92:50:85:55:f8:0b:90:dc:d1:65:97:70:
         ea:26:0a:8e:c1:fd:62:e7:ba:87:d0:c9:cc:c4:d8:97:44:1b:
         bc:31:7f:24:e9:7b:22:07:db:30:45:e5:8a:41:9d:7a:60:04:
         c8:af:f7:91:e8:bc:57:b6:7d:b6:89:d8:9b:04:5d:0c:ee:0e:
         6c:33:ec:fe:4c:8e:9d:00:16:a7:bf:e6:5c:4d:ee:15:79:a5:
         5c:f7:2e:1c:65:fd:e7:da:95:c2:98:45:ca:3f:f6:cc:ea:c0:
         07:c3:f4:41:64:d7:c0:54:a8:64:22:29:7b:5c:c1:5d:52:2b:
         af:7a:1c:fd:a4:fa:28:a0:4a:e4:b2:0e:4b:27:29:48:ae:76:
         0e:98:e9:f6:87:03:f4:b2:da:46:77:3b:69:11:f5:8c:d1:9e:
         81:05:d7:02:a3:93:c2:93:3e:0c:48:24:be:5d:d0:e8:a3:b3:
         55:c1:39:56:85:ec:2d:d6:ea:14:5b:3b:c4:f9:e3:0d:db:51:
         ef:a7:ec:a7:cd:9a:82:d1:17:7e:14:2a:54:23:60:70:2d:45:
         2e:1d:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:38:51 2026 by rpki-client