Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File:                     BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier:          rvwR15aaEXtSW+TGpi/43UK8vlD/34fTA8D+2uardq4=
Subject key identifier:   5E:E7:91:FF:1D:E2:8B:C5:58:D9:32:02:86:93:F0:B0:3A:8A:4F:DF
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer:       /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial:       01A145A918666359CDBEF48C2A74BA2B2706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number:          08A7
Signing time:             Fri 16 Oct 2026 17:01:12 +0000
Manifest this update:     Fri 16 Oct 2026 17:01:12 +0000
Manifest next update:     Sat 17 Oct 2026 17:01:12 +0000
Files and hashes:         1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: bF9QBqJxAJZpVHJhiIO+7kJTIVrj+kOKqwY6r/kZGmA=)
                          2: WrCSnmO3TptCu12D-7QukIGoskU.roa (hash: SmXLGdZ06cpzybo2WIdSNuF5mOp0yHjCCfLvK0oa2kM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 15:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:45:a9:18:66:63:59:cd:be:f4:8c:2a:74:ba:2b:27:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
        Validity
            Not Before: Oct 16 17:01:12 2026 GMT
            Not After : Oct 17 17:01:12 2026 GMT
        Subject: CN=5ee791ff1de28bc558d932028693f0b03a8a4fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:21:05:73:04:d0:af:66:63:46:1f:3b:df:
                    90:08:66:a7:fc:84:6b:5d:0d:a7:d9:5f:f3:e9:bb:
                    10:8b:8e:f6:69:dd:28:c6:82:8b:06:01:9b:7c:f4:
                    49:ba:f4:83:9a:1e:4a:8b:c2:64:9f:a5:3e:d5:52:
                    8e:58:ed:27:fc:8a:59:40:11:95:ec:42:00:c3:71:
                    a1:73:c4:e7:0f:4c:3a:28:a4:d8:cf:9c:7a:58:39:
                    d6:b0:e9:e2:0e:14:f5:54:dc:84:8e:5a:ef:61:b7:
                    47:5d:f0:43:6e:52:3b:78:63:2c:6c:4b:a1:61:75:
                    5e:95:1b:0a:03:c8:70:92:79:8f:dc:a0:19:9f:af:
                    c4:24:c4:a2:83:95:71:aa:90:6f:13:65:6b:00:67:
                    b5:4a:17:ca:30:dd:fc:6d:0d:5f:45:b3:78:a5:56:
                    b5:ae:0f:58:0c:ec:c8:6a:ed:14:55:5c:70:0e:8c:
                    3e:76:af:c2:52:2c:0f:a2:87:e4:f7:3b:48:b0:85:
                    f3:27:3f:a9:0d:14:78:af:ed:4d:1b:1d:d5:8c:6c:
                    32:df:60:e7:32:25:e0:52:13:ef:14:7d:9c:19:1a:
                    a2:7c:8a:c6:a9:a9:07:c3:5b:92:43:54:bf:15:09:
                    b4:7a:a8:49:99:98:53:03:8e:f9:72:b3:87:3b:07:
                    56:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E7:91:FF:1D:E2:8B:C5:58:D9:32:02:86:93:F0:B0:3A:8A:4F:DF
            X509v3 Authority Key Identifier:
                keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:be:00:cb:9a:c3:02:3b:a3:4d:68:b1:c8:90:2c:a8:1a:
         eb:c2:78:b3:96:c7:f0:3e:30:09:5e:4d:aa:83:ca:4a:7d:7d:
         bf:53:49:40:bc:a7:2f:a3:68:b6:8b:f9:b7:03:db:52:47:92:
         19:86:f4:fb:ce:30:46:53:2b:b7:f9:78:2c:1f:e6:cf:4e:41:
         25:2a:28:3c:da:27:a2:e7:ca:80:da:b3:26:83:16:dd:f3:56:
         8c:b7:6a:70:4b:f0:ee:e9:6f:b6:cf:c5:f4:bc:21:c6:4e:fb:
         b7:14:fe:64:03:84:c2:c7:63:c9:5b:e0:ff:e0:0a:ed:72:85:
         38:52:88:a8:bc:bd:f7:72:5d:7c:f4:c8:ee:4e:cb:49:2d:b3:
         2f:b7:c1:b4:67:6d:d5:8f:de:47:03:e6:a3:d0:ad:e0:d1:7a:
         68:c3:25:c4:b4:5d:c7:7e:d9:92:61:72:ac:17:1c:e8:97:79:
         6e:a6:ab:b4:9e:7d:e6:8d:e0:be:43:64:2d:bb:0d:36:72:75:
         6f:c1:78:d2:fe:27:7f:ee:9d:33:48:ad:d5:1e:0c:78:59:81:
         59:f2:bd:b1:8b:f9:da:41:6c:cc:d4:c2:eb:f9:da:52:08:e5:
         21:c9:03:3a:ec:8b:a0:96:3c:8d:21:bd:17:ff:1b:ca:bc:22:
         d5:62:75:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFFqRhmY1nNvvSMKnS6KycGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzVmYzhjZjAyYjhhNGUzNzJmYTViYzY0MDk0NGZlYmMy
NGYxZmUwHhcNMjYxMDE2MTcwMTEyWhcNMjYxMDE3MTcwMTEyWjAzMTEwLwYDVQQD
Eyg1ZWU3OTFmZjFkZTI4YmM1NThkOTMyMDI4NjkzZjBiMDNhOGE0ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj8hBXME0K9mY0YfO9+QCGan/IRr
XQ2n2V/z6bsQi472ad0oxoKLBgGbfPRJuvSDmh5Ki8Jkn6U+1VKOWO0n/IpZQBGV
7EIAw3Ghc8TnD0w6KKTYz5x6WDnWsOniDhT1VNyEjlrvYbdHXfBDblI7eGMsbEuh
YXVelRsKA8hwknmP3KAZn6/EJMSig5VxqpBvE2VrAGe1ShfKMN38bQ1fRbN4pVa1
rg9YDOzIau0UVVxwDow+dq/CUiwPoofk9ztIsIXzJz+pDRR4r+1NGx3VjGwy32Dn
MiXgUhPvFH2cGRqifIrGqakHw1uSQ1S/FQm0eqhJmZhTA475crOHOwdWMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7nkf8d4ovFWNkyAoaT8LA6ik/fMB8GA1UdIwQY
MBaAFAc1/IzwK4pONy+lvGQJRP68JPH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpYOGpQQXJpazQzTDZXOFpBbEVfcndrOGY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jZjNiOTgtNDk0MS00YmJlLTgyYjMt
NzMxZTkzMzlkNmFjLzEvQnpYOGpQQXJpazQzTDZXOFpBbEVfcndrOGY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jZjNiOTgtNDk0MS00YmJlLTgyYjMtNzMxZTkzMzlkNmFj
LzEvQnpYOGpQQXJpazQzTDZXOFpBbEVfcndrOGY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWq+AMua
wwI7o01osciQLKga68J4s5bH8D4wCV5NqoPKSn19v1NJQLynL6Notov5twPbUkeS
GYb0+84wRlMrt/l4LB/mz05BJSooPNonoufKgNqzJoMW3fNWjLdqcEvw7ulvts/F
9Lwhxk77txT+ZAOEwsdjyVvg/+AK7XKFOFKIqLy993JdfPTI7k7LSS2zL7fBtGdt
1Y/eRwPmo9Ct4NF6aMMlxLRdx37ZkmFyrBcc6Jd5bqartJ595o3gvkNkLbsNNnJ1
b8F40v4nf+6dM0it1R4MeFmBWfK9sYv52kFszNTC6/naUgjlIckDOuyLoJY8jSG9
F/8byrwi1WJ1mw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 01:57:29 2026 by rpki-client