Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File:                     BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier:          LT/LCnvOFqcQ5lkJmqJjvFDxWaRPrCW9Pr/URPMcfKE=
Subject key identifier:   AE:FE:19:EF:DC:34:02:75:8E:29:58:89:9D:96:49:16:DD:EB:D7:FC
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer:       /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial:       01A08C7ABECBA34FF2FA5CA410EE869F67E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number:          1A50
Signing time:             Thu 10 Sep 2026 18:00:49 +0000
Manifest this update:     Thu 10 Sep 2026 18:00:49 +0000
Manifest next update:     Fri 11 Sep 2026 18:00:49 +0000
Files and hashes:         1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: 3s3t9BcJ0/j6pOiOs+holpp2Q/KpEfrMEL1dyWYZEww=)
                          2: Qh3-2TMMaClcKooNJ3fndADjiYo.roa (hash: OrsiroKPXNo2SdBOxZVVTepz1ZwF+w/R3aYOwgk/QnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7a:be:cb:a3:4f:f2:fa:5c:a4:10:ee:86:9f:67:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
        Validity
            Not Before: Sep 10 18:00:49 2026 GMT
            Not After : Sep 11 18:00:49 2026 GMT
        Subject: CN=aefe19efdc3402758e2958899d964916ddebd7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:8f:0f:be:69:b8:54:bd:b0:58:58:67:ce:
                    76:bb:ff:46:3a:ee:18:e4:57:f9:e2:11:54:c0:f2:
                    cc:dc:4a:a8:75:1f:c3:f9:2b:45:5f:d4:a5:f7:71:
                    74:c3:bd:61:91:cc:44:73:9d:b7:06:5f:7a:20:ef:
                    59:52:cd:cb:81:41:1e:53:9c:89:b4:16:a8:ad:85:
                    5c:e2:c2:df:14:09:d9:ab:e9:c8:fa:04:a9:e8:37:
                    0e:bc:51:4e:5e:58:c6:fd:a2:ad:ee:21:9b:07:b5:
                    b3:66:d9:33:36:30:8a:16:6f:2e:79:7b:22:50:38:
                    76:d0:b9:af:3a:98:4d:86:75:ad:f4:0d:3d:f6:b1:
                    0d:38:49:d4:23:3e:5d:af:9f:b1:34:20:91:33:47:
                    24:22:3a:b9:92:8c:97:bd:1c:08:2d:e5:5d:1e:25:
                    84:53:10:20:d6:67:fc:58:5f:54:32:06:3c:2d:e6:
                    20:00:2a:4c:26:c5:54:9b:3c:13:1a:58:91:ec:2a:
                    4f:9c:57:99:4c:5a:c3:39:cb:86:63:ea:45:cb:14:
                    80:c3:ad:43:2e:ad:c2:cb:22:1d:7c:f7:3e:28:22:
                    50:c8:87:57:c4:90:1a:0f:10:4c:bf:34:3d:a2:0f:
                    1d:03:bb:b1:21:f0:90:e9:42:01:25:26:cf:b6:8a:
                    ea:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FE:19:EF:DC:34:02:75:8E:29:58:89:9D:96:49:16:DD:EB:D7:FC
            X509v3 Authority Key Identifier:
                keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:41:66:a6:4b:7f:49:71:4e:f7:8c:fb:d7:01:e4:b7:14:78:
         de:c3:eb:c6:35:e2:96:0a:fd:b9:34:22:38:f8:51:0e:83:51:
         b1:93:0d:e4:e5:56:55:ab:01:a3:22:aa:54:59:f9:4d:b5:a9:
         45:5d:eb:7f:1b:4d:5b:6d:7b:97:3d:63:76:7b:c4:d8:c2:ae:
         f7:7e:a4:6c:55:d5:83:b6:f6:69:62:d0:6b:e7:fc:67:48:b9:
         22:4c:c6:81:ab:d0:f8:83:21:b9:28:f8:e0:d4:94:71:15:cb:
         7f:8e:94:82:99:d5:ca:d2:db:88:99:1e:f9:07:13:f0:8c:59:
         66:6d:cd:77:ad:da:bd:b9:25:01:f9:83:f8:53:3c:3b:dd:fb:
         24:30:cc:42:b7:58:ad:ce:00:77:09:5d:a5:42:b4:bc:46:cd:
         10:dc:ea:1c:a4:37:22:1b:c1:61:13:7a:ae:af:6f:bf:ab:48:
         e9:5e:60:8e:3b:81:98:20:cf:4c:4f:4f:08:c6:39:95:04:c0:
         00:d8:06:36:33:4a:b8:c6:ce:bd:d8:1d:57:31:4d:a2:8f:c6:
         cf:35:75:6c:3d:ed:20:17:56:41:d3:9b:17:6e:0e:64:c5:b2:
         c0:e0:b6:39:85:54:ed:3f:7d:d1:b8:e2:94:1d:05:6b:7c:4d:
         ac:b7:8a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:53:50 2026 by rpki-client