Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
File:                     BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json)
Hash identifier:          eHfwhSUuug8PhkdxSMtiiXyeC09n0JksAkdgHyiTzp0=
Subject key identifier:   87:D7:BF:E7:43:79:62:E1:6B:A5:1C:D2:92:91:F1:B5:44:6A:E7:84
Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
Certificate issuer:       /CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Certificate serial:       01A13DB83FD8FD47D4B7E89D728498C16932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
Manifest number:          1775
Signing time:             Thu 15 Oct 2026 04:00:47 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:47 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:47 +0000
Files and hashes:         1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: X7EQM6HssL3jl5CNY8kexBD5YUQ4AwLFiSCltwdM0fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:3f:d8:fd:47:d4:b7:e8:9d:72:84:98:c1:69:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4
        Validity
            Not Before: Oct 15 04:00:47 2026 GMT
            Not After : Oct 16 04:00:47 2026 GMT
        Subject: CN=87d7bfe7437962e16ba51cd29291f1b5446ae784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:3c:04:a6:2e:20:79:4f:75:9f:79:4a:10:
                    4e:21:b3:03:b0:d9:12:ae:b9:fd:90:68:f6:da:52:
                    c7:ba:b3:9d:0a:f6:94:e1:6e:18:d9:bf:f3:da:4a:
                    b1:7c:24:c6:1b:d0:93:fd:d5:42:de:0f:bf:e2:90:
                    4a:88:b6:11:03:cc:66:ff:a6:1b:12:fb:a6:34:3b:
                    0d:ae:95:ca:0e:10:fd:a6:8d:b9:73:71:c4:4a:24:
                    5b:93:8e:91:2c:40:5a:b5:e4:03:7e:8e:0a:1a:cc:
                    f5:11:e3:ed:7c:48:93:0c:71:0e:a3:92:9a:9b:81:
                    9f:eb:e6:b5:5e:04:3f:6c:de:cf:31:fc:4a:e1:a4:
                    d5:62:11:44:63:5e:04:6a:de:be:23:67:bd:be:69:
                    bf:02:eb:2c:a3:8c:9c:89:41:81:39:9a:8d:ae:b7:
                    19:9d:3b:53:e2:4b:83:3a:ed:6e:30:55:42:d3:a8:
                    78:1e:1f:49:52:0f:ed:69:20:c5:4b:17:3e:a4:82:
                    0b:73:ff:2a:f6:bc:20:6b:b4:1b:25:08:39:7a:b7:
                    64:34:fd:a5:f6:c4:b8:93:c2:ab:c8:63:62:34:1d:
                    07:90:64:ed:b5:1d:74:e1:a5:17:b9:6e:55:fc:86:
                    c3:08:64:f1:01:75:d6:90:f9:c7:d9:86:97:49:04:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D7:BF:E7:43:79:62:E1:6B:A5:1C:D2:92:91:F1:B5:44:6A:E7:84
            X509v3 Authority Key Identifier:
                keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:a3:65:3d:e3:bb:73:fe:cf:a9:e4:b0:ef:15:8a:d8:bf:c3:
         fd:2c:54:fc:e7:f6:6b:e3:0d:0e:da:19:17:03:9e:0c:83:a3:
         81:6b:5d:52:97:64:ad:3b:f1:c3:62:71:de:3f:0e:18:a0:81:
         8e:b7:96:f8:a2:b1:81:95:14:47:87:00:c2:52:62:26:2a:65:
         8f:09:1f:0f:ad:f8:27:f4:fa:c7:12:10:a7:c5:bb:29:a8:af:
         79:6f:ee:cb:a5:95:d6:81:1b:11:6b:40:0f:b1:1f:50:eb:c5:
         1f:99:3e:e3:d0:8c:dd:56:5e:f4:c1:fb:5b:5f:32:0e:e2:a5:
         e5:77:a4:68:a9:93:82:c6:fb:19:f8:65:4b:9b:b8:4a:8a:b9:
         0f:85:63:24:43:3a:65:bb:9d:a2:66:4d:06:98:dc:f1:1c:1e:
         ff:4b:ca:11:01:cc:ce:50:b8:bd:5a:5e:b0:e4:d8:b5:bc:01:
         05:73:b9:49:bc:46:ec:20:98:c8:12:6a:fd:f2:e0:d4:12:65:
         27:86:1b:7c:9b:4c:9b:fb:04:83:65:cb:75:20:d2:0e:f7:27:
         52:fd:bd:9e:49:d5:d0:27:eb:5f:43:e4:92:0f:d8:09:5b:5c:
         a8:4f:f8:80:5f:61:e2:23:d8:87:35:21:a6:92:77:7d:9f:0e:
         01:51:22:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uD/Y/UfUt+idcoSYwWkyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NmJhMjA5YzUwYzAyYTg1OGI1NDMwOGM4MmFlNWJmMzAy
ZWZhYTQwHhcNMjYxMDE1MDQwMDQ3WhcNMjYxMDE2MDQwMDQ3WjAzMTEwLwYDVQQD
Eyg4N2Q3YmZlNzQzNzk2MmUxNmJhNTFjZDI5MjkxZjFiNTQ0NmFlNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVE8BKYuIHlPdZ95ShBOIbMDsNkS
rrn9kGj22lLHurOdCvaU4W4Y2b/z2kqxfCTGG9CT/dVC3g+/4pBKiLYRA8xm/6Yb
EvumNDsNrpXKDhD9po25c3HESiRbk46RLEBateQDfo4KGsz1EePtfEiTDHEOo5Ka
m4Gf6+a1XgQ/bN7PMfxK4aTVYhFEY14Eat6+I2e9vmm/Ausso4yciUGBOZqNrrcZ
nTtT4kuDOu1uMFVC06h4Hh9JUg/taSDFSxc+pIILc/8q9rwga7QbJQg5erdkNP2l
9sS4k8KryGNiNB0HkGTttR104aUXuW5V/IbDCGTxAXXWkPnH2YaXSQSpIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfXv+dDeWLha6Uc0pKR8bVEaueEMB8GA1UdIwQY
MBaAFAZrognFDAKoWLVDCMgq5b8wLvqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMTUxYjgtZDhmMS00MTAyLTkzNmYt
OTNmZmVjNWMzYzgxLzEvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zMTUxYjgtZDhmMS00MTAyLTkzNmYtOTNmZmVjNWMzYzgx
LzEvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw6NlPeO7
c/7PqeSw7xWK2L/D/SxU/Of2a+MNDtoZFwOeDIOjgWtdUpdkrTvxw2Jx3j8OGKCB
jreW+KKxgZUUR4cAwlJiJipljwkfD634J/T6xxIQp8W7KaiveW/uy6WV1oEbEWtA
D7EfUOvFH5k+49CM3VZe9MH7W18yDuKl5XekaKmTgsb7GfhlS5u4Soq5D4VjJEM6
ZbudomZNBpjc8Rwe/0vKEQHMzlC4vVpesOTYtbwBBXO5SbxG7CCYyBJq/fLg1BJl
J4YbfJtMm/sEg2XLdSDSDvcnUv29nknV0CfrX0Pkkg/YCVtcqE/4gF9h4iPYhzUh
ppJ3fZ8OAVEiDw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:23:02 2026 by rpki-client