Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
File:                     BJt80UY9tia6isf5o9hzPbDdgSQ.mft (raw, json)
Hash identifier:          oLe/uqMDoL4s8iwQC9kik7ZP5mJMqbVL2xLnyXjA6CI=
Subject key identifier:   5F:29:54:B6:6F:16:65:BE:60:84:01:EA:5F:1E:36:9D:2C:E1:42:CC
Authority key identifier: 04:9B:7C:D1:46:3D:B6:26:BA:8A:C7:F9:A3:D8:73:3D:B0:DD:81:24
Certificate issuer:       /CN=049b7cd1463db626ba8ac7f9a3d8733db0dd8124
Certificate serial:       01A13C384B295C8A7D3171D9884F6736AE19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
Manifest number:          011D
Signing time:             Wed 14 Oct 2026 21:01:24 +0000
Manifest this update:     Wed 14 Oct 2026 21:01:24 +0000
Manifest next update:     Thu 15 Oct 2026 21:01:24 +0000
Files and hashes:         1: 2P7SaJMcXsPyw8VXwK7lvJ92E84.roa (hash: De3uii83QPlU8l4wx/dhaSH5u2nnOc8fYmv6y+0gSd4=)
                          2: BJt80UY9tia6isf5o9hzPbDdgSQ.crl (hash: WbwCPzeCsh9MIbJlRqYwgkYCid1+uWePppmfwzuqaCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:38:4b:29:5c:8a:7d:31:71:d9:88:4f:67:36:ae:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049b7cd1463db626ba8ac7f9a3d8733db0dd8124
        Validity
            Not Before: Oct 14 21:01:24 2026 GMT
            Not After : Oct 15 21:01:24 2026 GMT
        Subject: CN=5f2954b66f1665be608401ea5f1e369d2ce142cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:6c:fa:05:e2:db:ed:b0:a6:09:92:e8:53:
                    d5:84:f5:d7:20:78:01:e3:6b:e7:8f:2f:8c:59:bb:
                    d3:b2:ba:82:70:c6:3f:c6:c9:3f:e5:7b:63:8f:36:
                    2b:5d:a3:9b:1e:3e:87:4d:92:e5:a9:53:a1:79:b6:
                    99:d8:2a:fc:4a:84:c8:9c:8f:97:70:7c:3d:28:03:
                    88:d0:a7:d7:c2:f6:51:0d:50:d7:d2:5b:2b:4b:02:
                    fc:ed:4b:9e:76:32:13:98:cf:09:76:31:da:c2:b0:
                    28:71:f6:fb:f3:72:cc:6c:e0:76:ce:69:19:b8:77:
                    53:5b:92:63:48:01:ee:af:6b:a4:60:cb:1d:17:4b:
                    62:d0:f6:8f:11:7d:9d:3b:9c:43:a3:75:e9:51:cb:
                    89:28:16:db:1f:55:e7:0b:22:57:dc:d4:59:1a:ce:
                    78:6e:02:33:bd:d7:e0:39:d3:c6:9e:e0:a4:c4:6a:
                    da:96:c0:fe:7e:7f:a8:8b:29:29:5b:b4:1e:55:b9:
                    84:c9:a1:8b:c2:27:6e:4c:a5:53:c0:f3:14:17:ab:
                    8b:60:30:78:c8:fc:d7:57:9c:d9:7f:d4:8a:0e:df:
                    ea:f0:c6:e7:fb:76:f4:34:c1:6c:b8:90:cf:8e:a5:
                    f6:c2:8d:da:53:e4:38:f0:22:9d:fc:1e:e2:76:b2:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:29:54:B6:6F:16:65:BE:60:84:01:EA:5F:1E:36:9D:2C:E1:42:CC
            X509v3 Authority Key Identifier:
                keyid:04:9B:7C:D1:46:3D:B6:26:BA:8A:C7:F9:A3:D8:73:3D:B0:DD:81:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:09:5d:79:78:ea:9c:09:7d:11:b7:81:48:7d:87:20:92:0d:
         ab:32:fc:e7:d5:c1:13:74:31:9c:d4:ee:05:f9:6d:79:55:28:
         e1:08:5c:73:dc:fe:c6:0c:58:3d:6b:a7:e8:cf:73:79:ba:1c:
         9a:82:c2:d8:4e:eb:0c:09:af:e1:2a:72:1a:ff:28:ce:76:8b:
         e2:77:a9:59:25:20:31:5d:5d:77:3a:75:60:5e:ab:89:92:ab:
         fc:b3:f3:71:3a:a6:a2:15:bc:20:d6:81:9d:c8:00:2d:c7:fb:
         d8:1c:0d:f2:8c:01:04:e3:87:02:62:38:cd:4b:56:ec:7b:c8:
         25:16:24:58:d1:ff:09:7d:f4:bf:de:90:75:32:1a:09:05:4d:
         0b:3d:39:50:01:5e:72:2a:ce:64:96:30:79:f1:6c:33:c2:34:
         e9:3d:be:3e:94:4c:a2:d3:19:e1:ca:ca:97:e9:a3:32:31:bb:
         3b:b9:1d:90:f2:1b:f1:f8:8a:b5:92:02:25:35:ca:51:03:d7:
         98:5c:d5:62:7e:a0:25:a4:8d:17:15:53:07:fc:9a:c1:a4:76:
         1e:0b:c9:56:97:02:0d:da:da:23:4b:49:6a:93:63:2a:d1:e9:
         0c:1c:56:3b:0b:aa:30:32:ba:4d:e9:bc:8a:5c:04:1a:40:50:
         d3:f4:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:32:33 2026 by rpki-client