Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
File:                     btAxXocokhqZ_GNGtM6PELXbhnw.mft (raw, json)
Hash identifier:          xiePBcC4bZjiTKq9CCf6/Z0VibB2vSYhxCnaCCt8Iwc=
Subject key identifier:   B8:E6:6C:69:33:DD:E7:B4:4D:EE:34:B1:C5:D2:90:8F:8F:98:E7:9E
Authority key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
Certificate issuer:       /CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
Certificate serial:       01A175B94448367C52FA8C951DDBA9EA82C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
Manifest number:          1101
Signing time:             Mon 26 Oct 2026 01:00:38 +0000
Manifest this update:     Mon 26 Oct 2026 01:00:38 +0000
Manifest next update:     Tue 27 Oct 2026 01:00:38 +0000
Files and hashes:         1: btAxXocokhqZ_GNGtM6PELXbhnw.crl (hash: IJdEmsAfqjkOmUwQ8kXdCgQn416gWP0co9obPagJScA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:b9:44:48:36:7c:52:fa:8c:95:1d:db:a9:ea:82:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
        Validity
            Not Before: Oct 26 01:00:38 2026 GMT
            Not After : Oct 27 01:00:38 2026 GMT
        Subject: CN=b8e66c6933dde7b44dee34b1c5d2908f8f98e79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7b:08:b6:57:52:8d:31:53:3d:ac:ef:94:4f:
                    7e:bf:72:01:24:a1:74:be:47:18:c1:23:62:d4:01:
                    d0:e8:6a:c3:c3:0b:11:d8:81:42:1e:f6:6f:2b:86:
                    fc:4e:c0:ae:ac:b7:d0:4c:03:73:2c:86:a3:a0:99:
                    47:77:14:5a:aa:e2:66:eb:33:64:26:99:d8:75:70:
                    13:d8:86:f5:34:15:f4:e9:71:26:01:fb:5a:b0:09:
                    0c:2a:20:5f:51:d4:d2:fa:b2:d2:96:48:32:45:92:
                    c3:10:68:27:fe:b0:22:3e:48:0e:46:73:50:76:9a:
                    0e:8c:71:45:02:fc:9d:f6:cf:0e:df:43:e4:e2:72:
                    d6:37:cc:58:43:30:9d:98:ed:e6:49:3e:fa:88:fa:
                    42:9f:60:3e:ac:61:58:22:31:a6:34:5c:3b:13:c6:
                    a7:f0:d2:f5:19:a3:8d:50:64:5c:90:e2:9d:5e:fa:
                    4c:83:8c:a1:d9:2a:6c:6a:c0:4e:da:ef:fa:29:f0:
                    8f:98:8c:37:9b:8e:e1:b4:6d:f7:ee:2d:58:52:8b:
                    e9:74:57:69:98:26:48:52:d5:a1:d2:e8:7b:67:64:
                    e1:52:d3:a0:00:b2:65:f2:aa:a4:69:46:4f:97:2c:
                    1b:75:6c:cc:64:ed:47:9c:5b:eb:ea:42:47:fc:1f:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E6:6C:69:33:DD:E7:B4:4D:EE:34:B1:C5:D2:90:8F:8F:98:E7:9E
            X509v3 Authority Key Identifier:
                keyid:6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b4:77:35:68:89:07:7a:3d:61:7c:c2:9a:4c:8b:66:fd:f0:
         c4:9f:68:32:7e:07:1d:5f:d6:50:6a:b8:cc:85:a7:01:a1:c9:
         40:86:67:a8:2a:62:47:0a:6e:60:18:75:02:b5:98:fe:91:cb:
         48:a0:66:4e:ca:28:e0:4b:4a:81:d8:dc:28:7f:5d:c8:aa:9e:
         1a:d3:e0:22:8f:61:61:13:2f:81:0b:75:23:68:c2:da:51:45:
         23:10:9e:e7:b9:9e:9d:f1:af:85:13:c7:05:6d:f8:6d:1c:7b:
         58:e6:22:b5:65:c6:37:34:f3:2a:52:e0:37:53:fd:62:a9:99:
         bf:ad:8e:a1:5f:c9:ef:80:92:13:e1:ee:c0:ff:dc:7a:08:52:
         71:85:f5:19:be:d4:35:4e:d0:90:8b:02:ba:db:cb:bd:76:e2:
         9b:ef:0b:87:14:65:df:e1:da:1d:70:63:43:5e:af:c0:7f:4d:
         19:bf:f3:d8:30:91:e5:ed:15:7a:27:84:f1:2f:2d:4f:cd:70:
         b9:27:20:3f:bb:61:ad:1b:e1:aa:cb:11:a3:4f:d0:4d:2d:bd:
         b0:86:89:3d:26:04:df:c6:fe:56:14:a8:dd:89:7c:2e:16:37:
         07:58:1d:26:d3:2e:e7:a0:e0:de:d5:42:7d:92:7a:df:b5:04:
         e4:af:a4:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1uURINnxS+oyVHdup6oLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZDAzMTVlODcyODkyMWE5OWZjNjM0NmI0Y2U4ZjEwYjVk
Yjg2N2MwHhcNMjYxMDI2MDEwMDM4WhcNMjYxMDI3MDEwMDM4WjAzMTEwLwYDVQQD
EyhiOGU2NmM2OTMzZGRlN2I0NGRlZTM0YjFjNWQyOTA4ZjhmOThlNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXsItldSjTFTPazvlE9+v3IBJKF0
vkcYwSNi1AHQ6GrDwwsR2IFCHvZvK4b8TsCurLfQTANzLIajoJlHdxRaquJm6zNk
JpnYdXAT2Ib1NBX06XEmAftasAkMKiBfUdTS+rLSlkgyRZLDEGgn/rAiPkgORnNQ
dpoOjHFFAvyd9s8O30Pk4nLWN8xYQzCdmO3mST76iPpCn2A+rGFYIjGmNFw7E8an
8NL1GaONUGRckOKdXvpMg4yh2SpsasBO2u/6KfCPmIw3m47htG337i1YUovpdFdp
mCZIUtWh0uh7Z2ThUtOgALJl8qqkaUZPlywbdWzMZO1HnFvr6kJH/B+wLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjmbGkz3ee0Te40scXSkI+PmOeeMB8GA1UdIwQY
MBaAFG7QMV6HKJIamfxjRrTOjxC124Z8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYt
NWIzMzdhYzJlZjc5LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYtNWIzMzdhYzJlZjc5
LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLR3NWiJ
B3o9YXzCmkyLZv3wxJ9oMn4HHV/WUGq4zIWnAaHJQIZnqCpiRwpuYBh1ArWY/pHL
SKBmTsoo4EtKgdjcKH9dyKqeGtPgIo9hYRMvgQt1I2jC2lFFIxCe57menfGvhRPH
BW34bRx7WOYitWXGNzTzKlLgN1P9YqmZv62OoV/J74CSE+HuwP/ceghScYX1Gb7U
NU7QkIsCutvLvXbim+8LhxRl3+HaHXBjQ16vwH9NGb/z2DCR5e0VeieE8S8tT81w
uScgP7thrRvhqssRo0/QTS29sIaJPSYE38b+VhSo3Yl8LhY3B1gdJtMu56Dg3tVC
fZJ637UE5K+kNg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:58:07 2026 by rpki-client