Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
File:                     BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json)
Hash identifier:          CYBfs7t4bIzoWomxOfmN0+xQtshC2phT/pj8F1aRP8s=
Subject key identifier:   5D:F8:1E:62:3B:07:B3:1B:53:44:A0:F6:21:73:15:06:93:84:5D:F2
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Certificate issuer:       /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial:       01A13ECBCC9A9F489DE09B28CC2B94B50A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
Manifest number:          0D7D
Signing time:             Thu 15 Oct 2026 09:01:45 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:45 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:45 +0000
Files and hashes:         1: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: +g/oP8D3rZVm2BYcA9rHHgS0KoMhOiPZAwU8ca/Ispk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:cc:9a:9f:48:9d:e0:9b:28:cc:2b:94:b5:0a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
        Validity
            Not Before: Oct 15 09:01:45 2026 GMT
            Not After : Oct 16 09:01:45 2026 GMT
        Subject: CN=5df81e623b07b31b5344a0f62173150693845df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:c1:9d:e4:40:55:7a:03:36:31:1d:fd:87:
                    a5:cb:b1:64:32:65:13:36:68:9b:66:74:cd:4b:82:
                    c3:e3:fc:65:fd:8a:88:64:4d:0c:82:41:db:74:85:
                    45:ef:09:57:fe:c0:29:62:ae:7d:00:9d:6d:06:b3:
                    99:9d:ba:44:b3:55:f9:1d:2c:55:38:53:04:1a:22:
                    98:9a:04:cb:18:4e:9c:f1:1e:e7:94:5e:41:07:fa:
                    c5:de:39:52:1a:12:72:92:6a:14:14:42:70:b5:ff:
                    0a:a4:d1:12:14:0e:1a:10:54:fd:44:c4:f8:88:e0:
                    19:de:81:9f:8b:57:37:c9:b3:f4:77:09:91:fe:fe:
                    05:e0:c4:32:e1:6c:1b:e1:6b:bc:a2:d4:fe:88:07:
                    f8:ad:bf:36:13:e5:85:b6:e2:a5:dc:23:c1:b0:ff:
                    61:34:21:e9:72:b2:e9:5d:f1:50:34:30:0e:90:6d:
                    eb:ad:13:44:a4:57:90:5f:09:e1:9a:b5:ea:a6:de:
                    f7:d3:80:a0:2b:38:6a:d2:ad:6c:39:2e:59:4f:5e:
                    db:2c:4c:9a:f9:d1:72:04:f7:73:90:04:b8:2c:11:
                    73:77:47:4c:1a:e0:b7:09:0d:8f:fb:a3:ca:5b:6d:
                    1c:7a:97:c2:0b:08:ef:89:e8:cc:e0:98:4d:f9:6d:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F8:1E:62:3B:07:B3:1B:53:44:A0:F6:21:73:15:06:93:84:5D:F2
            X509v3 Authority Key Identifier:
                keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:6e:f8:a9:42:13:fc:70:a5:9f:ad:2e:5b:70:05:d7:b7:
         ef:83:d4:60:25:c5:f0:4e:79:85:b7:63:4b:a9:fa:38:4b:76:
         58:5e:41:81:fb:3f:27:88:ef:81:18:ec:85:aa:b6:9d:df:7f:
         7a:48:65:e8:a9:69:b8:a1:be:95:ba:21:82:42:00:9c:3f:77:
         94:6a:a6:0e:21:04:a2:87:06:b0:fd:c8:db:45:74:03:99:25:
         cc:d3:41:83:7b:2c:0a:4c:a9:55:b2:27:99:17:83:4c:69:ac:
         43:09:57:73:f2:50:1d:ff:5b:b0:8e:4c:cf:c5:3e:85:a0:bd:
         22:31:63:8c:e5:68:e3:00:35:9d:65:8c:c8:db:81:83:8c:59:
         ca:ce:6b:46:fe:8a:57:01:86:7b:2b:46:94:10:bd:f6:92:4b:
         65:6f:fa:02:f5:d6:09:aa:7f:90:f0:54:c4:da:d0:3c:53:f4:
         31:8e:d3:0f:98:45:32:6b:c8:f2:4d:30:b3:57:b6:4e:7d:35:
         36:9f:41:8d:85:26:9c:38:e3:e3:58:fc:e7:5f:1b:6f:d0:78:
         2f:de:8e:24:17:ce:e0:4a:d0:ca:ff:89:1a:03:54:f1:c4:6c:
         3e:00:2a:d1:83:9e:d4:bb:b2:88:05:1a:9a:db:0c:b1:6a:29:
         cb:dc:d6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:24:06 2026 by rpki-client