Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          kc8B6zlX/1XiMb1bUAcZAo3ACOLjsQn+/Hhl7q9Ungc=
Subject key identifier:   08:8A:47:72:BC:E8:2F:C9:DA:CF:78:6B:66:E5:90:A9:AC:B3:1B:29
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       01A13D8105FF061C629D593C9A7F3AD84A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          0796
Signing time:             Thu 15 Oct 2026 03:00:28 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:28 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:28 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: gQICfGohGgmgqckaGl5PBDQO4qEW6syn0Ji60qodjIo=)
                          2: hcqZCPDvPSfZpsnstBmJSYUoG0E.roa (hash: 2rsfgP2jZdPy9F0m+kXCLPK5gqhv9//1FnvVgzLaUiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:05:ff:06:1c:62:9d:59:3c:9a:7f:3a:d8:4a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: Oct 15 03:00:28 2026 GMT
            Not After : Oct 16 03:00:28 2026 GMT
        Subject: CN=088a4772bce82fc9dacf786b66e590a9acb31b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:50:ef:7e:57:46:3c:c1:62:12:76:3c:16:
                    5b:fe:b0:e6:f0:35:87:b4:0d:91:8a:43:1a:b3:a0:
                    43:63:49:9b:56:8c:8b:1b:60:bd:03:33:1b:30:db:
                    07:02:4d:34:b4:f3:15:1b:a9:d2:ab:26:41:11:02:
                    44:9b:f0:a5:3f:44:aa:8d:ab:58:d6:80:a4:13:d5:
                    dd:a5:e0:02:e2:77:81:6d:db:fa:eb:a0:aa:80:f1:
                    e6:7e:28:2b:dc:90:b5:a1:88:df:f1:3d:52:c8:fd:
                    4c:9b:98:04:5c:ed:14:bf:ba:97:63:d6:d2:4d:dd:
                    93:88:0e:36:e5:c3:86:f0:0b:37:b1:7f:8e:7a:78:
                    ad:93:ce:fe:c7:d9:04:46:3a:89:a0:e7:0a:8f:15:
                    f6:cc:de:7f:85:7b:4b:0b:73:02:dc:e4:c7:46:ad:
                    c6:7f:e1:73:3e:68:e2:f6:4d:8c:a3:61:0c:23:4a:
                    81:f5:e0:de:aa:29:45:ad:17:6d:55:76:90:41:b7:
                    0d:c4:dd:2b:61:cf:1f:20:4a:84:f7:d3:da:2c:1e:
                    33:1e:f7:e0:1b:3c:01:21:2d:f6:c7:2b:ef:28:9c:
                    4c:b2:4c:8f:c4:d6:69:8d:96:d5:db:d6:90:d2:7d:
                    d4:f0:5f:a4:27:d8:19:8a:56:98:cc:7a:ca:f7:c5:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8A:47:72:BC:E8:2F:C9:DA:CF:78:6B:66:E5:90:A9:AC:B3:1B:29
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:29:9b:e4:c3:13:67:5c:d3:77:e0:a8:a6:b0:84:72:44:
         9a:c7:3b:5a:fc:ff:19:d8:67:6f:68:d6:78:f6:b2:22:3c:00:
         46:33:8e:41:54:df:f0:04:63:7b:db:52:85:08:1e:82:6e:6e:
         f1:b1:46:f1:83:bc:25:d3:fc:7a:10:63:1f:e0:a2:07:81:3e:
         33:0c:b3:d3:7b:25:05:ed:a3:c7:fb:f0:33:23:96:52:57:05:
         05:75:03:36:b0:50:e7:ba:37:69:d9:56:76:02:53:28:49:7b:
         33:f9:44:38:23:ae:89:a3:ee:a6:dc:a8:76:95:d8:a8:83:cb:
         ea:8a:e4:62:6e:6a:34:6e:5c:58:bf:02:89:72:5d:e0:1c:b2:
         26:86:8a:ce:cf:d7:64:58:14:f9:6e:8b:b8:c6:e3:56:4d:69:
         25:a1:93:a2:e2:ab:89:6e:ff:f0:5e:b5:56:b8:40:56:42:3e:
         a5:4f:b6:56:05:c4:c7:73:a5:6b:24:ef:d0:16:46:2e:6f:20:
         81:fd:84:3b:3a:80:1a:f7:d0:32:0b:73:e4:0f:e8:45:16:3c:
         eb:31:c4:89:f9:29:86:21:fe:5e:39:25:66:25:29:60:b6:ee:
         d3:08:e2:87:ca:fc:65:b8:19:99:0a:e0:d8:b1:6b:fd:f9:51:
         4a:93:c2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:15 2026 by rpki-client