Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.mft
File:                     BAxklu2yx-12mBgF6VTXK68tjoI.mft (raw, json)
Hash identifier:          fFhFzKmyc9zFMWU8DXqX2Hs3jVzRHaW7XBXolYr1X7o=
Subject key identifier:   EB:E2:D5:54:70:2D:23:EA:2F:67:E0:91:9F:AA:E9:40:9A:11:6C:FD
Authority key identifier: 04:0C:64:96:ED:B2:C7:ED:76:98:18:05:E9:54:D7:2B:AF:2D:8E:82
Certificate issuer:       /CN=040c6496edb2c7ed76981805e954d72baf2d8e82
Certificate serial:       01A12AD6E959C7251CFC489B3CE3D6013CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.mft
Manifest number:          31
Signing time:             Sun 11 Oct 2026 12:01:29 +0000
Manifest this update:     Sun 11 Oct 2026 12:01:29 +0000
Manifest next update:     Mon 12 Oct 2026 12:01:29 +0000
Files and hashes:         1: 0weFom61y6ukwuaaCPh9keZNymY.roa (hash: yDwilPZpweiSitbY35q+TNB81hVv9Y1/hq17yUBdaBE=)
                          2: 1O_isFkbjRx7LiGPYoSMj9JokOc.roa (hash: 4HVwoJuUqC0gQjGWOCvx3iWAA/+auVoOqpkKqT2DOP8=)
                          3: BAxklu2yx-12mBgF6VTXK68tjoI.crl (hash: znNsbhk/d4KdIHnEwh75musSxwYmQuzEGdYFTHLDnT0=)
                          4: Q3L-LgTqDK7r9fzV5MtomjFHC-M.roa (hash: 4q7SFetay5ZZBxJneCd88Uuz+q4qTer9+zcAOeE6uTQ=)
                          5: YVo4YW8l9CG0wbI3efO23UaQ8bw.roa (hash: yB3HoVytKDU5v9fh0ZTJG3JbErBKhBuuXJyupWQ2A4Y=)
                          6: _Dq9qneL_rkcMxRckbrQRX0SL5Q.roa (hash: GoWLcMwwe+MegfN0fAe8W5uQ8LDpF/I2Qcg4CozX9JI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:d6:e9:59:c7:25:1c:fc:48:9b:3c:e3:d6:01:3c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=040c6496edb2c7ed76981805e954d72baf2d8e82
        Validity
            Not Before: Oct 11 12:01:29 2026 GMT
            Not After : Oct 12 12:01:29 2026 GMT
        Subject: CN=ebe2d554702d23ea2f67e0919faae9409a116cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:27:33:56:ab:f1:55:a8:4c:d2:3c:55:d6:12:
                    e1:e5:ef:bc:7f:13:11:b6:99:33:03:cc:2e:7c:dd:
                    d8:22:51:f4:4e:b6:f3:1e:03:16:6d:95:d3:8d:93:
                    c6:de:6f:c1:71:c7:40:73:ae:3b:91:a1:c2:78:c6:
                    e9:03:55:de:5c:44:d9:2e:ca:19:db:15:27:0d:cf:
                    98:26:ff:02:11:48:75:a0:c9:40:8f:2e:c6:b4:58:
                    e3:c7:04:9d:b6:a5:07:23:37:0e:90:f4:f6:79:2d:
                    c8:15:4c:60:e5:4d:8c:d8:11:9d:56:e0:12:60:43:
                    46:54:0f:39:74:7a:8f:d8:54:fc:27:e1:e6:8f:37:
                    fe:cf:be:ad:05:bf:ce:74:e4:ab:8c:cb:25:94:0f:
                    a3:1c:56:05:f8:cf:4f:e7:f1:02:62:e6:9e:3c:62:
                    d0:15:9c:22:7d:ec:a2:41:94:d9:d4:2a:e6:49:97:
                    54:40:c5:77:a6:be:4c:21:d4:6c:1c:83:a6:ef:67:
                    5b:6a:e1:53:7b:47:3f:1a:7f:bf:ae:7b:dc:e2:8f:
                    0d:6d:11:51:4c:ef:e9:37:ce:3b:e4:62:15:f7:dd:
                    47:bb:94:63:8a:a3:e8:3a:d3:14:6c:6f:85:d5:48:
                    60:da:8d:65:dc:cd:59:ff:aa:93:85:5b:ea:0e:02:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E2:D5:54:70:2D:23:EA:2F:67:E0:91:9F:AA:E9:40:9A:11:6C:FD
            X509v3 Authority Key Identifier:
                keyid:04:0C:64:96:ED:B2:C7:ED:76:98:18:05:E9:54:D7:2B:AF:2D:8E:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b9:c2:9d:b9:77:93:cb:26:af:74:bc:df:76:83:85:17:6a:
         52:a7:fb:6c:c6:f2:12:61:db:5a:f4:5c:03:5c:69:21:a9:9b:
         48:8b:b7:2c:a4:c0:40:01:83:96:c5:02:19:e1:28:3c:66:b3:
         ce:9a:1e:5c:c3:6d:23:8d:37:5b:f5:f9:51:9f:c9:41:b4:29:
         5b:b7:ae:54:b2:3e:fe:0c:13:d0:ad:d8:c5:8c:79:66:b3:a0:
         3f:7a:f8:a7:0c:df:7c:e4:ca:d3:a4:8d:d0:ca:a0:1a:f1:bc:
         16:46:cc:62:0b:af:bc:c0:62:c6:9d:de:d7:12:34:76:2a:6d:
         90:98:de:9b:43:8d:1d:b9:f0:fe:69:17:73:e1:21:38:43:c8:
         88:ef:2f:57:48:55:a9:94:f7:99:81:0e:9f:59:e9:5c:ac:94:
         46:98:ae:bb:40:c3:1f:99:b6:16:d6:da:04:ff:78:0c:d0:7a:
         21:e2:b4:12:fc:f9:18:95:05:a8:d0:6c:6f:83:a1:e9:a0:8d:
         17:f0:a9:a3:45:ac:05:f7:74:21:24:fa:be:07:43:f6:f7:4f:
         b1:79:9b:fd:10:05:b8:4f:15:10:a2:a5:07:3d:2d:e3:fb:13:
         89:9b:b9:f1:bb:27:76:e0:80:75:59:7e:60:19:46:9d:45:d9:
         fb:4f:ed:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:36:42 2026 by rpki-client