Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File:                     BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier:          nFbh4dKKHirYcCqW6aIIoT2IWXgv8/uGzS4gu1c8lDc=
Subject key identifier:   55:07:18:3C:CA:A1:8F:E7:CE:7D:B9:7B:2C:B2:B3:B3:39:26:AB:54
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer:       /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial:       01A083E60D44BE71BB47D014AF18E7B54E07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number:          0D02
Signing time:             Wed 09 Sep 2026 02:01:26 +0000
Manifest this update:     Wed 09 Sep 2026 02:01:26 +0000
Manifest next update:     Thu 10 Sep 2026 02:01:26 +0000
Files and hashes:         1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: QMz7Rl0p7a7X9+acn8kLd+3s6dXNODabJdPTTcwDjDg=)
                          2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=)
                          3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=)
                          4: sYAHM3dA9t7sL8KtPSRxfoaqowk.roa (hash: s0PVxl/MfJ/lQ4s/RbNRindGurEhHhc3J5Bljq8tw4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:83:e6:0d:44:be:71:bb:47:d0:14:af:18:e7:b5:4e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
        Validity
            Not Before: Sep  9 02:01:26 2026 GMT
            Not After : Sep 10 02:01:26 2026 GMT
        Subject: CN=5507183ccaa18fe7ce7db97b2cb2b3b33926ab54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:ed:83:bf:41:72:46:41:9b:a8:6e:ec:6c:
                    06:6b:02:59:f0:f4:5b:ea:6f:5a:7e:21:60:6c:8e:
                    74:d0:08:c9:f0:97:b0:8e:53:24:f4:b4:3a:92:f3:
                    d6:38:11:cd:25:f3:e0:24:6e:c0:db:00:e7:05:47:
                    5c:a5:5a:59:91:0e:4c:27:ec:ba:58:a0:c8:e0:db:
                    a4:56:e1:2f:de:48:0c:13:27:d7:4a:7c:ba:2d:47:
                    68:f6:17:88:e4:1a:5c:12:0b:28:46:98:f6:2f:b1:
                    95:b5:ac:2e:18:e8:7e:c3:5f:eb:95:47:f5:b1:49:
                    64:d3:e7:55:ab:41:c2:c5:fb:62:86:06:d6:65:1e:
                    e7:9c:f0:8a:1d:61:73:0a:38:7f:27:f1:20:1b:1f:
                    46:d8:41:f7:48:cd:71:25:8d:39:26:66:d2:97:20:
                    9f:68:c8:37:45:cf:ac:b1:ae:7a:ad:12:66:f5:bf:
                    c9:23:fe:f4:22:cd:53:bf:dd:65:57:95:33:c2:5f:
                    22:96:80:4b:f7:4c:a6:01:f4:6b:fa:0c:e7:d7:96:
                    c3:cb:a9:ea:85:f3:45:e3:ff:06:7e:19:a8:99:89:
                    05:e3:38:be:2f:e4:e2:98:4c:83:cb:19:1e:22:fa:
                    21:a8:70:16:e6:a4:b0:68:d9:9c:da:bf:03:ab:97:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:07:18:3C:CA:A1:8F:E7:CE:7D:B9:7B:2C:B2:B3:B3:39:26:AB:54
            X509v3 Authority Key Identifier:
                keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:df:31:2d:e9:03:07:a6:d5:29:1e:8d:fb:da:04:31:19:d0:
         5f:f2:6c:03:3c:18:55:b6:6f:32:7d:55:bb:e7:ce:14:72:69:
         3c:9f:8c:8a:26:49:ad:bb:8c:60:fc:09:b0:a1:4e:04:ab:50:
         97:cc:e2:fc:78:ef:a3:e8:45:8e:52:57:4c:31:67:b8:c7:5e:
         4c:92:33:ab:9d:ff:96:fe:ce:8f:bf:a8:22:4b:d6:a8:28:ab:
         cb:17:e5:b5:8a:53:f6:c8:0e:00:da:fe:48:c1:9a:58:a3:f4:
         f5:b8:8c:29:3c:dc:ee:e7:8b:e2:6d:8b:97:d9:92:ca:1d:5a:
         1d:8d:45:62:44:1e:09:22:8e:c2:7c:4c:28:7b:37:f5:d2:0e:
         db:44:d9:ae:09:3a:01:56:8c:c4:d4:b9:10:16:cf:8c:19:52:
         5a:fe:80:3b:75:c9:58:86:27:8d:a7:c4:90:86:a1:82:ad:18:
         e0:cf:08:34:29:00:08:dd:3e:04:be:84:4a:7a:51:46:d0:0e:
         dc:e2:ec:97:ab:3e:6f:6e:23:0a:1d:1c:43:77:ef:11:aa:4a:
         bc:22:8a:3c:2c:8f:83:a7:61:8f:0e:6d:0f:ec:19:a2:a4:91:
         8e:68:a7:be:64:32:06:dd:02:44:9c:ae:c1:13:85:6a:9b:ff:
         19:83:92:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 08:37:50 2026 by rpki-client