Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File:                     BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier:          frFSjzLWZE/vPJ44/LrEINVOxfab62wWyPmCTHFUWcM=
Subject key identifier:   D2:23:7D:0F:2B:19:C4:7D:53:1B:85:86:6E:DB:E1:E2:7C:66:72:68
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer:       /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial:       01A13FA6FB2E0D394BF39445383F2ACEBF16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number:          1955
Signing time:             Thu 15 Oct 2026 13:01:10 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:10 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:10 +0000
Files and hashes:         1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: cNgr4p4JQVOO3X7KFoZbuq+7CNDxxCCxl4pOeCZ+sbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a6:fb:2e:0d:39:4b:f3:94:45:38:3f:2a:ce:bf:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
        Validity
            Not Before: Oct 15 13:01:10 2026 GMT
            Not After : Oct 16 13:01:10 2026 GMT
        Subject: CN=d2237d0f2b19c47d531b85866edbe1e27c667268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:bb:e6:e4:c8:b1:25:38:bc:a6:f5:0b:d6:
                    e3:00:99:9b:d3:1f:30:93:fc:24:18:d7:da:4a:bf:
                    08:cd:3d:b5:c7:c9:cb:c3:b1:70:64:ca:fd:b7:6a:
                    79:c7:14:09:7f:3c:0b:92:e1:5c:50:11:d9:a0:5e:
                    a6:e3:44:87:ba:21:be:00:61:c0:5d:4f:79:6b:9f:
                    57:6f:2c:1e:6d:f3:92:12:53:06:ae:07:6c:e7:46:
                    67:7d:52:93:8f:f4:9b:bb:e9:27:53:81:00:a7:36:
                    1d:a5:11:7c:d3:74:c6:08:21:43:4a:b3:9d:7d:4d:
                    3e:71:80:66:75:7e:88:ea:ef:33:46:f8:77:36:b6:
                    25:b0:5a:fa:d9:3a:ce:a4:a1:64:17:02:2b:4a:62:
                    fa:55:e9:9e:62:91:bc:d5:6f:80:bd:da:20:fc:5f:
                    56:2e:d6:6a:4e:a2:67:87:cb:80:bf:e0:06:35:28:
                    96:49:2c:18:36:82:a6:fc:43:6e:4e:da:bb:28:ff:
                    70:10:53:fc:4f:7e:66:f3:76:ff:8e:11:4d:00:62:
                    cf:92:82:f7:13:db:56:75:b4:25:f3:f7:40:4d:f0:
                    ab:f5:46:77:a3:f2:f1:30:f0:90:89:8d:e8:9c:fe:
                    bf:8f:47:3d:05:41:3a:47:29:cf:18:f6:b2:51:76:
                    de:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:23:7D:0F:2B:19:C4:7D:53:1B:85:86:6E:DB:E1:E2:7C:66:72:68
            X509v3 Authority Key Identifier:
                keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:46:8b:82:43:da:1c:e6:e6:cf:78:fc:7f:85:fa:9c:58:ff:
         72:06:0a:73:48:38:c9:f5:0a:2f:4e:a9:72:f5:77:10:27:cb:
         76:4f:9e:8b:b7:71:2e:3f:23:ea:54:0d:49:a0:02:fd:35:70:
         d6:8f:17:02:23:98:ed:61:ef:ef:86:2c:af:2a:6b:55:fb:e7:
         46:2e:43:95:9c:3d:b4:4d:87:b9:a7:62:61:67:e9:a0:c9:97:
         aa:5e:c5:69:4a:81:1f:55:97:84:1d:d5:85:df:87:57:c9:fd:
         a9:8f:70:c7:43:d1:fc:40:0d:d1:de:06:ce:85:79:08:d2:c5:
         ee:f7:d2:a9:f0:73:15:e4:b3:dd:68:08:2e:b5:c7:ce:03:31:
         57:38:f6:e3:01:bf:1c:e3:05:fe:78:af:86:6a:b4:1a:13:81:
         40:93:22:d2:79:34:98:dc:10:ad:23:e9:07:01:a0:ea:04:ef:
         67:2e:f8:54:7c:a2:7a:4f:93:f4:c9:c6:7d:f1:0a:84:06:c9:
         a4:96:ab:ea:83:19:a7:2a:78:26:13:4a:f7:dc:35:df:a0:87:
         18:ac:3e:d6:03:b6:9c:b7:8c:aa:8e:19:77:a4:cc:aa:65:3a:
         5c:86:20:6f:33:cf:93:34:da:b8:f0:fd:2a:d0:7f:b7:7b:13:
         c5:14:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:08 2026 by rpki-client