Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft
File:                     BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft (raw, json)
Hash identifier:          VLoLBedUMTiUQcbxMIVboFIFTnQfNVdrGC1eZ4wc7XI=
Subject key identifier:   0E:14:25:9F:0F:8F:7C:F1:42:CE:2D:F7:3D:2D:20:7F:BF:8A:7A:0B
Authority key identifier: 05:96:1F:09:4A:0E:9C:8F:66:82:82:39:FC:C5:28:1D:8D:2F:8C:E3
Certificate issuer:       /CN=05961f094a0e9c8f66828239fcc5281d8d2f8ce3
Certificate serial:       01A15D0D3AC6CB50F16DB92072355357CE0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft
Manifest number:          9D
Signing time:             Wed 21 Oct 2026 06:01:50 +0000
Manifest this update:     Wed 21 Oct 2026 06:01:50 +0000
Manifest next update:     Thu 22 Oct 2026 06:01:50 +0000
Files and hashes:         1: BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl (hash: A6OY4HkYfOgvSK433LZ7rtarl4Fj2ZQ+4mVnykOv4lI=)
                          2: vOFi4vqQ941RKVxLlL--Kjz4M1Y.roa (hash: NTePj0xJxi4d0cbIEQcwBmxgG0qDewsP9PpsmvJHEzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5d:0d:3a:c6:cb:50:f1:6d:b9:20:72:35:53:57:ce:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05961f094a0e9c8f66828239fcc5281d8d2f8ce3
        Validity
            Not Before: Oct 21 06:01:50 2026 GMT
            Not After : Oct 22 06:01:50 2026 GMT
        Subject: CN=0e14259f0f8f7cf142ce2df73d2d207fbf8a7a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:e6:c3:f0:b9:dc:e3:43:d1:7d:d7:1c:ec:
                    51:19:0d:02:fd:e6:f7:fe:44:cd:ce:c0:bc:aa:6e:
                    6e:a9:a7:85:6b:58:ed:a7:cc:49:b7:2f:0e:36:00:
                    3e:a8:98:23:af:0a:c8:a0:37:23:f9:7e:d6:49:d7:
                    da:14:aa:87:02:4b:76:8c:6c:66:8d:84:54:d1:be:
                    8e:6c:c9:85:e8:8d:0c:1f:74:d0:9d:fa:f3:d7:3e:
                    fc:ca:73:a3:2a:5d:cf:86:01:b4:21:81:4b:27:34:
                    a3:ce:f7:c0:49:43:d6:ff:3a:9b:f0:a4:0b:00:ce:
                    f1:cd:36:c0:e4:99:ed:e8:4d:19:f4:03:9f:17:e6:
                    b0:66:75:91:ec:f4:30:b7:dd:e8:53:69:63:8e:e9:
                    70:b9:88:3b:3d:9e:59:7d:b7:94:9f:48:d4:b3:ba:
                    db:05:3c:a4:d8:a4:23:e6:1c:94:80:03:2b:59:d3:
                    ad:a9:68:78:06:41:f0:ac:9f:bb:14:e8:9a:49:ec:
                    9f:f4:17:84:7d:ae:c7:35:ec:de:e3:57:2d:42:e9:
                    c4:3a:a9:87:89:aa:1a:30:6a:bd:ab:25:05:91:51:
                    03:44:05:59:a5:15:d3:e1:bf:f9:74:db:30:b2:37:
                    00:79:b3:eb:fc:1c:74:a8:60:03:f1:9b:59:f8:34:
                    de:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:14:25:9F:0F:8F:7C:F1:42:CE:2D:F7:3D:2D:20:7F:BF:8A:7A:0B
            X509v3 Authority Key Identifier:
                keyid:05:96:1F:09:4A:0E:9C:8F:66:82:82:39:FC:C5:28:1D:8D:2F:8C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5a:f7:bd:0f:34:75:1b:74:da:c0:60:59:80:5e:eb:7f:92:
         32:9b:6c:70:3c:2c:2b:57:a4:07:fa:51:c2:da:b5:2d:86:28:
         cc:68:7f:2e:fe:b3:e0:78:ea:cb:d4:67:3e:db:d9:9c:68:07:
         42:17:e3:75:6b:e4:cf:6c:72:ff:a9:fd:6f:f1:20:95:08:7a:
         43:7b:b6:04:88:ba:24:fd:e6:07:66:fd:4c:e8:d5:ba:35:3f:
         e7:d9:9e:3b:b7:71:2e:b7:c0:a3:46:9d:32:49:d4:6e:e1:95:
         d9:91:20:60:fc:ae:27:54:0c:bb:a4:68:f2:58:de:26:2e:f9:
         db:28:00:62:f2:5e:8a:d7:72:36:d8:88:09:f7:16:4b:c1:dc:
         0b:74:3f:42:f0:bd:32:1e:ac:42:87:a6:7d:20:5a:0a:91:47:
         50:d4:6b:fd:48:c1:74:c3:3c:17:e2:40:63:99:fd:9c:15:fa:
         60:c1:1d:61:9b:bf:c0:68:fc:46:cd:33:23:4c:ad:19:88:5c:
         fb:5d:7c:87:78:63:51:ac:60:00:e0:f4:df:3c:a8:2b:3a:b3:
         3e:58:7e:90:a4:f4:b6:69:c1:9d:36:37:38:b5:da:aa:a9:30:
         ae:91:0f:fe:8a:36:8c:07:bc:25:8f:a1:b0:0b:48:cc:53:eb:
         0d:b4:af:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFdDTrGy1DxbbkgcjVTV84LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTYxZjA5NGEwZTljOGY2NjgyODIzOWZjYzUyODFkOGQy
ZjhjZTMwHhcNMjYxMDIxMDYwMTUwWhcNMjYxMDIyMDYwMTUwWjAzMTEwLwYDVQQD
EygwZTE0MjU5ZjBmOGY3Y2YxNDJjZTJkZjczZDJkMjA3ZmJmOGE3YTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfbmw/C53OND0X3XHOxRGQ0C/eb3
/kTNzsC8qm5uqaeFa1jtp8xJty8ONgA+qJgjrwrIoDcj+X7WSdfaFKqHAkt2jGxm
jYRU0b6ObMmF6I0MH3TQnfrz1z78ynOjKl3PhgG0IYFLJzSjzvfASUPW/zqb8KQL
AM7xzTbA5Jnt6E0Z9AOfF+awZnWR7PQwt93oU2ljjulwuYg7PZ5ZfbeUn0jUs7rb
BTyk2KQj5hyUgAMrWdOtqWh4BkHwrJ+7FOiaSeyf9BeEfa7HNeze41ctQunEOqmH
iaoaMGq9qyUFkVEDRAVZpRXT4b/5dNswsjcAebPr/Bx0qGAD8ZtZ+DTeswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4UJZ8Pj3zxQs4t9z0tIH+/inoLMB8GA1UdIwQY
MBaAFAWWHwlKDpyPZoKCOfzFKB2NL4zjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpZZkNVb09uSTltZ29JNV9NVW9IWTB2ak9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zNDgzNTUtNWMwOS00OTRjLWI5OGYt
YzM3NmQxZjk1YjAzLzEvQlpZZkNVb09uSTltZ29JNV9NVW9IWTB2ak9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zNDgzNTUtNWMwOS00OTRjLWI5OGYtYzM3NmQxZjk1YjAz
LzEvQlpZZkNVb09uSTltZ29JNV9NVW9IWTB2ak9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFr3vQ80
dRt02sBgWYBe63+SMptscDwsK1ekB/pRwtq1LYYozGh/Lv6z4Hjqy9RnPtvZnGgH
QhfjdWvkz2xy/6n9b/EglQh6Q3u2BIi6JP3mB2b9TOjVujU/59meO7dxLrfAo0ad
MknUbuGV2ZEgYPyuJ1QMu6Ro8ljeJi752ygAYvJeitdyNtiICfcWS8HcC3Q/QvC9
Mh6sQoemfSBaCpFHUNRr/UjBdMM8F+JAY5n9nBX6YMEdYZu/wGj8Rs0zI0ytGYhc
+118h3hjUaxgAOD03zyoKzqzPlh+kKT0tmnBnTY3OLXaqqkwrpEP/oo2jAe8JY+h
sAtIzFPrDbSvJA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 12:06:25 2026 by rpki-client