Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File:                     bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier:          nEY8dWF/dyEQbyvSVl7+Db1OUhjBfCD9UAfdB07tSGM=
Subject key identifier:   20:F9:BF:5F:C7:93:00:AB:B0:C5:9E:E3:F2:47:1B:C7:46:25:A4:53
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer:       /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial:       01A1280C9E036C3EB6F32D149B87854B88D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number:          1A9C
Signing time:             Sat 10 Oct 2026 23:01:17 +0000
Manifest this update:     Sat 10 Oct 2026 23:01:17 +0000
Manifest next update:     Sun 11 Oct 2026 23:01:17 +0000
Files and hashes:         1: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: UEJRohb4Mr7VIrNodgUKq6b5g6nF6KgxMO6BgYqi/Kw=)
                          2: oetUUkO4cZ8XU4zZUrbGoYOdszE.roa (hash: wn2OyJ+kz4z5ywBpw9YbEq0aRUfcFISzvLJUM7TfkuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:0c:9e:03:6c:3e:b6:f3:2d:14:9b:87:85:4b:88:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
        Validity
            Not Before: Oct 10 23:01:17 2026 GMT
            Not After : Oct 11 23:01:17 2026 GMT
        Subject: CN=20f9bf5fc79300abb0c59ee3f2471bc74625a453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:aa:07:56:ac:a0:b7:b4:56:af:54:ab:3f:
                    f7:79:a6:54:87:81:ea:01:6a:de:62:be:23:28:96:
                    98:be:93:4a:83:1a:51:32:06:f7:88:5a:27:5b:0a:
                    e8:89:a1:cb:ee:a0:c3:f7:f4:0a:1c:27:e4:85:ac:
                    6b:49:50:38:64:06:a0:ce:93:7e:43:15:57:ab:4a:
                    27:d4:24:e2:23:0f:53:9e:47:05:10:dc:e2:9f:f8:
                    7a:a0:d2:d6:de:1e:6f:1d:6f:2a:ec:ef:e6:fc:58:
                    bd:87:ce:99:83:23:99:f0:39:fb:74:13:51:94:b7:
                    84:90:1f:25:60:c8:da:a4:6a:03:22:34:02:32:c0:
                    98:ac:9f:58:62:7e:46:a8:8b:ef:19:ab:0b:58:ed:
                    68:39:99:05:b3:ab:5d:e0:c0:33:34:4a:27:fd:40:
                    c6:51:25:c6:4a:e0:40:e7:4f:80:f2:56:40:97:89:
                    aa:73:fa:8f:09:3f:d7:3e:e5:60:26:e5:92:36:0e:
                    72:5f:ba:9a:2e:f7:f5:43:c3:b8:66:e0:2c:4a:3e:
                    a3:48:ab:3f:84:82:46:41:e5:09:24:f9:9a:a0:ab:
                    fd:f7:27:2c:d7:e9:52:6f:d3:ec:bb:6f:cc:c3:71:
                    79:56:41:9a:7c:46:98:f1:9b:24:f2:c3:1d:08:85:
                    80:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F9:BF:5F:C7:93:00:AB:B0:C5:9E:E3:F2:47:1B:C7:46:25:A4:53
            X509v3 Authority Key Identifier:
                keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e7:e8:4c:2e:02:7a:37:68:39:cf:9b:43:98:f2:96:f6:55:
         60:41:a1:2f:bd:ac:10:e8:7b:e9:48:dc:26:b1:35:d8:16:a8:
         a7:59:1e:25:62:85:13:84:27:12:4e:f8:06:84:f7:3c:af:3d:
         14:df:8c:f5:a5:54:c0:5b:16:81:f7:f5:91:fa:8d:38:b5:51:
         05:ee:86:e1:8b:66:95:ae:8d:9e:d3:e5:88:11:80:dd:5f:cd:
         2e:54:a0:e9:f2:57:63:14:31:da:43:c9:02:b1:42:06:c4:ba:
         d0:58:50:8a:28:08:7e:51:45:bf:37:63:16:81:62:68:be:d9:
         ee:fa:fe:47:2a:d7:c5:1a:44:74:9f:15:83:56:27:45:6b:51:
         61:6a:51:a0:10:ff:dc:cd:2a:85:b5:ec:12:7f:8b:37:a6:a6:
         7c:dd:ec:76:f4:a6:5f:ad:0e:3a:01:9f:98:38:51:82:b5:66:
         40:e2:75:85:93:21:c8:58:8c:78:7f:92:54:ec:94:17:d3:c3:
         20:32:4b:ff:12:30:8c:f1:4f:43:c4:82:92:02:5f:c9:bf:2d:
         46:97:c8:5e:f5:a7:49:a8:9c:e7:65:01:d2:6e:9b:50:06:27:
         67:7e:88:02:24:94:49:25:ba:eb:7c:cb:ec:1c:0d:ae:05:c1:
         6f:27:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:51:51 2026 by rpki-client