Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
File:                     BozI9XorPCKZsfSCtn4V2d5DrTw.mft (raw, json)
Hash identifier:          x6lMqgogXRjE1mVLpGKQpGvLRtBHFfLpdvS1GhnBubM=
Subject key identifier:   80:C1:09:AA:50:4A:C0:94:B3:F0:00:AB:4A:71:02:B6:5B:A6:5B:8B
Authority key identifier: 06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
Certificate issuer:       /CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Certificate serial:       01A13F70A497F711EE001071AE65395DD5BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
Manifest number:          181B
Signing time:             Thu 15 Oct 2026 12:01:48 +0000
Manifest this update:     Thu 15 Oct 2026 12:01:48 +0000
Manifest next update:     Fri 16 Oct 2026 12:01:48 +0000
Files and hashes:         1: 1-2P8OWE-nT9yglepyYQAlaB5NfE.roa (hash: hXJitTuZsInHr+UtjyUxAZf5csxkpDvw7CF/W7Cve9U=)
                          2: BozI9XorPCKZsfSCtn4V2d5DrTw.crl (hash: E9saZ1+hTAvDP/RWlHj/pCf14ddd6jciRp2033+y3Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:a4:97:f7:11:ee:00:10:71:ae:65:39:5d:d5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
        Validity
            Not Before: Oct 15 12:01:48 2026 GMT
            Not After : Oct 16 12:01:48 2026 GMT
        Subject: CN=80c109aa504ac094b3f000ab4a7102b65ba65b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:c9:ba:66:bd:4f:c8:61:31:d2:a5:cf:af:
                    66:af:6e:e4:f3:45:2f:09:32:64:dc:d4:be:b1:85:
                    27:e5:38:73:9c:6a:21:e2:d9:0d:d7:24:11:c6:e3:
                    21:b5:2d:81:64:08:c8:31:67:34:6e:1c:0b:e7:16:
                    ff:8a:ff:c1:bf:a5:b4:ba:e1:a7:c3:db:1d:5c:f9:
                    71:b5:ef:51:a1:3c:3f:42:e1:66:c5:6c:e5:dc:1d:
                    60:89:ca:93:8f:b5:a8:96:a6:c2:f6:6c:92:56:4d:
                    83:a6:67:84:a9:72:6c:18:e2:44:bd:c4:41:5b:f5:
                    1e:b5:b1:52:1d:22:0c:a3:b6:06:92:a5:f4:d8:f7:
                    29:84:2a:2d:e3:5b:a7:6b:ec:3b:fe:9b:f0:f8:d2:
                    75:40:cb:7a:39:ef:4e:a8:7d:d8:b7:34:cf:1e:be:
                    00:02:5c:3e:82:db:a4:60:08:1e:ef:92:f2:8f:e9:
                    f5:4e:2e:36:b8:f5:db:69:37:4c:bf:29:99:84:e9:
                    c7:51:2c:ed:81:2f:70:cf:f4:72:09:84:7c:bf:1e:
                    f4:8e:6e:74:13:ab:5a:7f:e3:e9:1a:4d:33:8c:eb:
                    31:2c:f9:ee:77:d4:1f:68:99:75:1e:f8:0c:25:6d:
                    bb:ec:39:37:18:9f:a4:90:c7:86:a2:b0:e3:b4:00:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C1:09:AA:50:4A:C0:94:B3:F0:00:AB:4A:71:02:B6:5B:A6:5B:8B
            X509v3 Authority Key Identifier:
                keyid:06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:67:2d:bb:a9:fe:2c:57:1e:5c:5f:0e:8c:01:db:c4:d7:06:
         00:ce:fd:be:a0:79:8f:d1:58:df:c2:05:4f:b3:5a:88:c6:47:
         69:3f:a9:d1:42:ec:46:3f:95:e5:f9:17:e1:1c:d7:10:7c:39:
         5e:55:72:45:d1:8f:11:22:a2:a6:c9:e5:08:e3:b6:24:1c:31:
         59:a8:f0:39:26:43:75:6c:85:76:0c:0e:4b:8b:5e:f8:73:16:
         b8:01:5e:30:fa:0c:ac:57:30:38:92:06:83:3c:f4:99:86:44:
         af:7f:e1:aa:a1:81:ac:f8:a6:4f:b9:7c:0d:ef:a3:9e:df:01:
         c8:99:e5:5d:44:f6:e2:06:64:30:4a:63:a4:8d:d1:b4:c3:0e:
         2e:82:38:38:52:40:94:5c:73:b1:5a:87:39:fd:8c:35:40:d6:
         ed:f8:69:b7:f4:6f:3e:5f:5a:c1:14:5e:23:02:1e:51:12:d9:
         c9:34:a7:e6:e2:6f:e3:47:f9:09:ab:2c:27:7a:1d:99:db:4a:
         aa:82:12:95:20:c1:65:05:11:c4:f0:ed:42:53:da:c2:69:ed:
         10:14:51:b2:43:aa:1a:c6:33:52:4d:76:d9:42:f6:c4:1c:1c:
         3f:8b:bc:b3:24:ba:63:a4:4c:c4:35:0f:2d:db:81:80:bd:9a:
         f6:a2:c1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:43 2026 by rpki-client