Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File:                     bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier:          jiavsfiCoZ/Ko90RkTQrWI0qsLcOsmLZ0GiS+RLUWM8=
Subject key identifier:   CE:CE:25:DA:01:44:25:5B:19:F1:4F:CC:EE:33:07:F4:D1:1F:84:66
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer:       /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial:       01A17DA9FA9CC41F28ECA077C5C301410C43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number:          1548
Signing time:             Tue 27 Oct 2026 14:00:54 +0000
Manifest this update:     Tue 27 Oct 2026 14:00:54 +0000
Manifest next update:     Wed 28 Oct 2026 14:00:54 +0000
Files and hashes:         1: JzE_OsxfOaUSWAVMBle70Ab3_sM.asa (hash: Nu7heKykSQAKLNJHt3NcRGxSsIukvpF2Tyq3+nkgCBI=)
                          2: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: GkwByCX210H85AKzYzSjrYMFlSnauPL63Q7RYh43YR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:a9:fa:9c:c4:1f:28:ec:a0:77:c5:c3:01:41:0c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
        Validity
            Not Before: Oct 27 14:00:54 2026 GMT
            Not After : Oct 28 14:00:54 2026 GMT
        Subject: CN=cece25da0144255b19f14fccee3307f4d11f8466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d8:57:d0:44:66:ff:c1:7f:3b:66:0f:de:a8:
                    95:0e:bb:8f:0c:a5:c9:a9:fd:4d:78:39:f4:ce:33:
                    3b:7c:0e:2e:9e:23:37:f8:98:fd:70:16:96:49:5a:
                    74:6b:e3:2b:75:ea:49:e3:63:55:0a:50:c0:34:b5:
                    45:12:8a:42:cd:68:29:f9:c5:a4:6b:b5:d9:4c:1d:
                    62:a9:cd:2d:aa:13:a8:23:ae:e1:e5:2a:7b:3a:4c:
                    03:d4:72:dd:0d:d8:49:c3:c5:dc:02:e7:75:4c:6e:
                    14:29:f0:c8:2b:37:0a:0d:e9:5c:62:91:63:d3:9a:
                    36:44:e7:fe:82:f5:38:95:b6:43:11:10:87:8a:c7:
                    65:21:c9:58:15:e9:44:53:b6:bd:9c:69:84:35:e7:
                    ea:d2:fc:cf:41:0e:40:19:1d:f5:3b:58:31:4a:cc:
                    f4:38:cb:b0:4d:82:eb:22:4e:c2:8b:43:02:f2:24:
                    77:a7:7f:0c:3f:d3:43:d8:86:a5:40:4f:e5:bf:a1:
                    88:3e:0e:b9:e9:83:5b:28:07:2f:c2:57:f5:28:81:
                    55:82:e6:2d:3d:e4:e7:10:06:f6:83:cb:b6:10:9f:
                    e1:6d:53:b0:9d:c8:27:17:a3:44:e4:92:1c:84:d9:
                    60:0a:79:d4:c3:97:7e:3b:58:c7:c8:aa:c8:aa:e6:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CE:25:DA:01:44:25:5B:19:F1:4F:CC:EE:33:07:F4:D1:1F:84:66
            X509v3 Authority Key Identifier:
                keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:31:83:c3:4b:de:63:57:95:21:0b:91:17:88:60:ce:51:b4:
         23:36:84:6b:f4:28:84:3a:ef:d1:87:66:6d:f3:bc:c0:27:6c:
         e9:5e:7a:9e:2a:66:6d:4e:8c:01:43:3e:f5:ed:2d:8e:be:2b:
         ca:65:b7:72:a2:74:06:88:83:f8:55:fc:9d:23:71:05:9e:65:
         80:fc:a5:4f:5c:a8:c6:9b:9a:57:6f:9f:97:97:aa:23:51:fe:
         f0:6c:8b:93:b4:2c:d2:95:32:ff:6a:75:fe:10:4a:51:11:78:
         5b:20:20:d1:d7:5d:9b:4d:c9:19:fe:1f:df:65:f3:03:4f:73:
         a1:4b:2e:99:19:32:34:2a:5e:65:bd:c2:ba:8b:2a:40:72:bf:
         72:9c:9b:86:08:4a:e7:f4:67:3e:b3:35:99:19:38:66:25:3b:
         a2:50:cc:91:f0:84:4f:4a:33:bb:0e:69:cc:cc:38:90:b9:df:
         d1:92:b1:bb:66:6c:c3:c0:1b:83:e2:a0:23:19:e4:3c:5a:d6:
         8d:35:a0:90:d5:c1:ad:9a:ee:89:9f:47:04:f9:11:d1:ae:c4:
         5b:e0:cf:b4:5c:75:da:61:bc:b5:00:7e:0c:3b:36:e4:48:3f:
         21:ad:9f:b9:f7:1b:69:12:3b:50:40:f7:97:7b:8e:35:44:21:
         6d:da:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:49:56 2026 by rpki-client