Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File:                     BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier:          iQSEeT+hUXz7iv2Z2Wh7i9kNQjxAvQDcnFiVJydiou0=
Subject key identifier:   CB:F3:3A:D8:0C:E2:9D:CD:8E:4D:6E:8A:CB:16:26:1F:9B:B7:B7:38
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer:       /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial:       01A148734B03EE2D49525A696028CC9B4B99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number:          1789
Signing time:             Sat 17 Oct 2026 06:01:17 +0000
Manifest this update:     Sat 17 Oct 2026 06:01:17 +0000
Manifest next update:     Sun 18 Oct 2026 06:01:17 +0000
Files and hashes:         1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: iTbKUl8KEG4lcsY3Je//fuWmsUWMrTYDVxT6jseRcgk=)
                          2: ue1Yig8TYgxiOV1FxPhvIsY035g.roa (hash: 3msZkfxcU6jcS509BBjupbbAc7uKaBkwJ1wFsWgzHXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:73:4b:03:ee:2d:49:52:5a:69:60:28:cc:9b:4b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
        Validity
            Not Before: Oct 17 06:01:17 2026 GMT
            Not After : Oct 18 06:01:17 2026 GMT
        Subject: CN=cbf33ad80ce29dcd8e4d6e8acb16261f9bb7b738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:23:1b:60:07:12:d3:33:a0:38:e9:ca:52:
                    95:11:ac:08:33:28:38:1d:02:6f:89:8b:46:26:d5:
                    b8:f6:22:9c:d7:5c:1a:76:0b:1a:9d:7b:02:80:49:
                    70:a1:8e:5a:d2:51:a3:aa:14:5a:30:05:42:be:f2:
                    20:f1:28:2a:b5:95:ea:e0:cb:e5:be:69:c9:25:84:
                    fa:3a:b0:e4:2d:80:17:cd:0a:63:a4:89:fa:b9:02:
                    f4:d7:73:9b:39:49:36:7f:f4:73:89:23:09:13:82:
                    6b:cf:f1:0f:68:59:29:d2:ef:e4:47:ff:51:0f:9a:
                    be:b0:97:36:3b:bd:51:5f:60:d6:58:25:79:32:fa:
                    7f:b6:bf:5c:47:e1:6f:00:15:99:0a:6d:ae:e3:e7:
                    c4:43:7e:7d:e6:ca:29:f8:be:b4:e9:7d:ba:47:0d:
                    3b:bb:39:ab:f4:d5:18:d6:3b:c1:74:38:c7:90:dd:
                    aa:60:13:a9:18:b0:8f:60:93:eb:95:ac:49:91:c9:
                    d5:12:cf:41:46:6e:89:0e:2d:d3:2c:03:57:cf:57:
                    2c:3a:a6:a8:01:91:8c:94:6d:77:29:a5:71:f9:57:
                    22:d4:99:e6:2d:8f:3b:c4:d1:69:e7:1d:2a:de:50:
                    9a:19:33:26:79:e2:4a:99:09:f4:d1:c0:0a:d9:2a:
                    83:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F3:3A:D8:0C:E2:9D:CD:8E:4D:6E:8A:CB:16:26:1F:9B:B7:B7:38
            X509v3 Authority Key Identifier:
                keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:8f:bb:4a:09:af:94:97:e4:f3:6d:9c:2e:8c:89:1d:ae:
         fc:c7:0d:0e:ce:87:a0:c7:ff:29:61:75:e0:4c:54:59:eb:c1:
         20:a8:f4:3f:13:58:dc:f8:d4:6d:f4:b6:f1:e5:d3:61:12:c6:
         dd:88:83:3b:7f:fd:a9:cd:e3:bd:2a:f1:a3:18:ea:10:51:21:
         90:89:13:87:05:8f:2c:80:a8:3f:7d:34:d8:52:d8:39:c7:e3:
         c4:90:af:ec:86:ab:23:2f:33:48:90:75:68:38:91:de:e8:1e:
         a8:a4:b1:99:6a:18:fd:5a:36:8a:23:f2:58:51:07:95:0c:f5:
         65:7c:24:ab:8f:89:14:2a:ce:c5:63:9f:e9:ba:e6:15:41:6e:
         d5:f3:70:c7:62:d5:5d:b4:93:7e:a9:cf:64:0b:06:90:51:4d:
         b7:d3:85:b9:c6:78:cc:0b:69:02:86:49:c7:3c:1e:eb:5e:e0:
         32:a3:20:e5:04:6d:f1:72:d4:ef:dd:81:11:64:de:9c:e8:81:
         05:27:af:e1:3e:26:25:2d:56:69:d1:53:11:87:71:24:05:bd:
         ad:85:81:37:6e:c4:f6:72:7b:a0:06:6f:8d:39:11:96:86:79:
         1e:bb:3c:54:e4:71:2e:04:50:27:c7:81:b3:f1:8e:28:a2:c8:
         c8:4d:47:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:40:45 2026 by rpki-client