Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File:                     BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier:          zyx8VNoj+rDKFYS1IsTyQyTWYsFYYi4UQNLr7lfKAbI=
Subject key identifier:   6B:B3:62:E3:1E:A3:40:4C:E2:98:3A:4A:93:79:13:DF:C9:BE:1B:F1
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer:       /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial:       01A08B9F51B95C3D81661CE8B1FA7E44E854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number:          14EC
Signing time:             Thu 10 Sep 2026 14:01:09 +0000
Manifest this update:     Thu 10 Sep 2026 14:01:09 +0000
Manifest next update:     Fri 11 Sep 2026 14:01:09 +0000
Files and hashes:         1: 0vww-Z4_zVXHcLMNjJsMQcHXTpc.roa (hash: dOMpJHCv+3Sv1nVkRTJLzmjEZf9LwutR2r+1CGv+lNY=)
                          2: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: 6tuHoSjOBCa6Fey0g4Qv9CZb4/9AmFns0E/ww8t+qTc=)
                          3: SiNcv5rEzJRHrI-5CcZKLsJRvo8.roa (hash: 9lI/4TESgDTXpDMmIm3+fdqNLdl35fFEfVNTkxEHqEI=)
                          4: hO6sJjGenFnuYxmlzduMju3aiho.roa (hash: 8vgjyujnab6/ES53s2lNNZgYv3hfnctmecpj5jiZlkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:51:b9:5c:3d:81:66:1c:e8:b1:fa:7e:44:e8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
        Validity
            Not Before: Sep 10 14:01:09 2026 GMT
            Not After : Sep 11 14:01:09 2026 GMT
        Subject: CN=6bb362e31ea3404ce2983a4a937913dfc9be1bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:e5:88:f0:46:56:9e:9f:87:c5:a9:a9:ef:
                    40:22:60:5e:f9:ba:42:47:97:04:92:00:18:cf:a5:
                    e8:78:07:55:67:d5:b8:89:7a:48:68:ca:62:d3:36:
                    b4:20:0e:f2:6d:f6:01:20:7d:e9:c6:b9:9b:11:00:
                    6e:d9:2a:a1:5a:af:86:b6:06:2b:ad:f6:f6:9a:d4:
                    5a:c9:45:89:1c:b2:b6:d2:aa:3e:93:ba:61:c0:ef:
                    eb:5d:01:b9:c3:fa:a6:ff:f4:aa:c0:48:1a:c0:e9:
                    25:b7:5e:71:a5:8b:94:1c:a3:65:13:28:32:54:45:
                    bc:da:81:04:bb:ff:65:7a:a4:78:ee:a8:b1:15:19:
                    f3:2e:d3:a6:2c:e9:a6:62:10:2f:4f:1a:53:82:af:
                    ff:a4:ca:42:a7:a1:63:5e:e7:e8:20:ff:51:fa:79:
                    a4:6a:2b:39:69:39:ef:4c:90:3f:ca:43:cd:f9:a6:
                    f9:64:6a:f6:4d:0d:70:39:ad:35:0d:ac:f6:96:60:
                    fb:cc:ff:ea:a9:75:e3:38:e3:15:32:04:b7:23:81:
                    3c:7d:d2:2a:c8:88:21:83:b1:f1:28:47:4f:28:9d:
                    a8:4a:bf:09:e4:b4:a8:1c:20:85:ae:d1:33:cc:fd:
                    f9:6e:fb:de:48:f3:02:c8:70:76:36:ac:28:76:50:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B3:62:E3:1E:A3:40:4C:E2:98:3A:4A:93:79:13:DF:C9:BE:1B:F1
            X509v3 Authority Key Identifier:
                keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c8:89:ae:36:c8:e9:a7:40:7e:3e:1f:6e:e1:e7:30:f3:52:
         9b:12:86:f5:a9:94:cf:1f:e4:9a:b4:fa:d0:ae:e6:2b:73:e5:
         5b:bb:31:f8:3b:6a:09:91:4b:40:c5:07:f0:5f:97:2f:73:17:
         43:0b:be:53:bf:5c:9a:5a:07:59:12:56:9e:0d:47:e6:f9:b8:
         0f:a4:b5:3d:02:fa:92:66:31:ab:ba:b3:c3:80:9a:dc:69:d1:
         ec:1a:1f:bd:26:d5:eb:ad:9a:89:39:73:6d:d6:2c:8d:02:ec:
         f2:9b:31:de:9b:69:94:8d:0e:00:65:5e:7b:e4:d2:7d:10:ac:
         cf:04:41:94:29:03:5e:3d:aa:e2:91:c3:4c:a9:4a:bd:bc:cc:
         ef:f8:16:a4:59:16:b6:f2:81:e2:84:4f:0b:2a:00:fe:fe:68:
         c5:a8:92:55:20:ea:27:44:f4:03:85:e8:7e:a8:0f:8d:0c:27:
         49:0d:6e:36:9d:13:5f:04:05:6c:35:3c:1e:bd:ec:0f:d0:c9:
         71:3d:4f:84:f9:88:8c:c0:72:9f:9f:76:d8:2a:00:3d:94:3f:
         49:8c:41:1f:aa:5b:d8:b8:d6:47:bf:54:6d:ac:74:ad:f3:09:
         3c:a6:22:4b:7a:77:d8:6a:da:ce:d7:57:5b:28:d4:61:13:b1:
         c3:3a:61:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:00:12 2026 by rpki-client