Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File:                     Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier:          1LAB5j5OscOrH0erSIcclV+4NkIbTAsN331RksVJ60E=
Subject key identifier:   F9:1C:F1:54:6C:7B:1B:D3:9C:E9:5B:39:4B:19:3D:BE:9C:10:37:90
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer:       /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial:       01A13DEF58B61025CE0964EBC76F7A4E8DBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 05:00:58 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:58 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:58 +0000
Files and hashes:         1: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: 7PPZXJfawTmdMhQd/8DhRn378UV/dbspYTn8szkLHJw=)
                          2: RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa (hash: bTJPrA6ymzwXdRMFik+l8zaHSMgQpaxNnOp2N0dHINQ=)
                          3: bLQis5XKFb9ePmaCn3Xde03b5ww.roa (hash: 7sPEt/kWbqDqCi2RTlX06DSMHs8kABLOqQ1zmeVq5Wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ef:58:b6:10:25:ce:09:64:eb:c7:6f:7a:4e:8d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
        Validity
            Not Before: Oct 15 05:00:58 2026 GMT
            Not After : Oct 16 05:00:58 2026 GMT
        Subject: CN=f91cf1546c7b1bd39ce95b394b193dbe9c103790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:7c:83:53:b2:17:a3:bd:c8:8d:f2:5f:4a:
                    7b:3b:48:65:53:ee:83:d7:3f:f7:27:1e:4c:69:2c:
                    88:e8:63:27:e6:db:5e:f5:a3:d0:3f:f2:25:6d:6b:
                    96:3e:5a:36:6a:8a:16:9e:c1:6d:86:84:7a:6a:c3:
                    cd:04:fa:60:d4:24:0d:ef:18:3f:2b:bb:a5:21:0d:
                    f8:2d:02:0f:77:61:9d:7d:a4:f2:af:44:4a:c4:8a:
                    62:2b:51:03:bb:1f:4d:b6:7f:5a:9d:6b:ef:da:20:
                    2a:4d:2a:73:a3:9a:76:1c:1e:05:bb:31:a2:5b:d1:
                    2c:1a:1e:28:64:c2:df:8c:d0:e5:6d:d1:9b:0f:c4:
                    7a:6d:b0:10:99:c0:04:e7:f6:62:78:fe:d3:ab:17:
                    a7:52:a9:39:ef:57:11:62:06:5c:e8:c7:37:64:48:
                    49:85:bc:e0:10:b7:b6:84:72:c6:2a:1a:55:0f:b5:
                    00:2d:d2:71:4f:0b:ce:ad:a9:3c:24:82:8e:bc:a1:
                    c5:b9:81:30:71:b8:cf:94:cd:97:2d:d9:04:b6:79:
                    83:3b:e9:03:e6:f4:44:06:1b:73:fd:e7:30:55:a7:
                    9b:b7:83:08:12:1c:9c:5f:e7:1e:b2:0e:91:87:3f:
                    08:41:d1:b2:01:f1:81:3e:cd:15:5e:fc:7e:ed:3a:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1C:F1:54:6C:7B:1B:D3:9C:E9:5B:39:4B:19:3D:BE:9C:10:37:90
            X509v3 Authority Key Identifier:
                keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:f0:61:9a:4d:fc:a1:6e:52:31:4e:5b:77:b9:81:08:54:
         ef:87:cb:00:e8:8d:de:55:ca:fa:d5:dd:a2:25:bc:df:13:a6:
         90:55:88:c7:52:cf:61:3a:f4:8e:9f:4f:52:9b:32:a2:e6:1a:
         82:ce:aa:96:90:44:27:7d:aa:45:77:da:d1:72:89:89:6b:b6:
         50:fb:4d:90:d1:fc:be:89:a9:9c:86:80:83:bd:47:28:d9:34:
         d6:04:1e:76:b1:9e:6d:b9:34:5a:27:ce:71:1b:0e:3a:da:22:
         e4:3d:72:69:ef:4e:d8:13:33:48:10:98:29:1d:3c:3d:33:41:
         4c:af:d3:aa:7c:7e:db:76:d8:0f:f1:4e:27:25:ba:a7:c1:a2:
         54:16:c8:85:14:ef:9d:bd:2a:83:61:4e:0f:f0:1f:7d:e8:fd:
         fa:a4:8a:1b:53:2e:41:9b:dc:ba:d5:78:ce:f8:17:44:0b:15:
         6d:b3:01:97:0a:f6:ba:b2:c9:88:7c:60:ee:42:e3:b9:b4:4b:
         b1:2e:c7:4d:ca:8a:42:16:64:3b:5a:93:93:15:fd:3f:fe:0a:
         18:e7:63:77:b8:c9:fb:9d:a0:67:b9:f1:6b:38:3d:d7:7b:8d:
         a3:a5:da:84:bf:bc:56:dc:a2:5e:1d:45:43:4b:33:53:21:fc:
         1c:fa:43:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:04 2026 by rpki-client