Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File:                     BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier:          mpOZNe7sf62mZ/hN221Jmgs3oRiLY0knwKTOvpFe/Dc=
Subject key identifier:   55:37:73:93:27:BF:9F:DA:E7:95:A2:38:20:2E:92:08:BD:45:BB:FF
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer:       /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial:       01A13DEEC33D5203E66B5B4637DD46506833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number:          17A7
Signing time:             Thu 15 Oct 2026 05:00:20 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:20 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:20 +0000
Files and hashes:         1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: rpYBr2w7hE1q4yday8XH+hvm4MDs1agzWG+65J6ljnI=)
                          2: ix-lKt8dTJwnHq6nkys_hd5cRUc.roa (hash: zvXc+sCex2FDV7KAvNJ5yPJGwAH9w5j+hanOObjkpEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ee:c3:3d:52:03:e6:6b:5b:46:37:dd:46:50:68:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
        Validity
            Not Before: Oct 15 05:00:20 2026 GMT
            Not After : Oct 16 05:00:20 2026 GMT
        Subject: CN=5537739327bf9fdae795a238202e9208bd45bbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:d4:cd:ce:74:88:a0:b0:e8:9a:6b:76:ba:
                    3b:7f:61:c8:80:56:b1:e9:2d:13:27:37:ac:91:90:
                    d3:cc:d0:62:69:89:42:e5:90:0f:5e:63:f8:99:0c:
                    64:89:37:75:7d:a2:22:d4:10:76:25:be:34:7a:21:
                    0e:92:c5:18:01:79:c1:df:4a:99:30:a6:ff:0b:9d:
                    8f:3b:4f:f9:e4:82:ad:86:0a:1f:89:ae:f1:85:be:
                    ca:6b:4e:c9:26:1e:a4:c2:c5:ba:1b:6f:8b:d1:cc:
                    7f:49:2c:9f:0a:68:d0:72:de:23:f2:7d:a1:5e:d0:
                    14:f6:a1:35:9d:97:87:de:f8:16:a1:a6:64:5c:cc:
                    8c:bb:7c:11:bd:66:75:ad:20:e9:a7:c5:87:ee:6a:
                    8a:3d:ab:4f:8f:30:81:54:9a:e2:27:33:aa:67:10:
                    f6:98:25:53:2e:37:9b:4f:84:b4:68:06:ef:f3:46:
                    f8:94:54:f6:ca:ed:57:7b:a9:38:74:24:16:87:f5:
                    41:f5:0b:0b:cd:11:20:f9:4b:6e:7c:25:9d:b8:b7:
                    3d:e4:a1:79:cf:03:96:ee:2c:ce:f1:39:a0:de:49:
                    b5:79:7e:7b:85:6e:e8:f2:fc:82:fa:f5:03:32:57:
                    fc:dc:67:f7:1b:25:a3:20:44:96:3a:6f:e7:48:83:
                    23:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:37:73:93:27:BF:9F:DA:E7:95:A2:38:20:2E:92:08:BD:45:BB:FF
            X509v3 Authority Key Identifier:
                keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:67:1f:e2:f2:4c:77:b6:3e:b8:47:cc:f0:1d:15:78:cb:82:
         0b:98:30:2f:0e:97:5d:9e:ed:d3:5c:fe:88:e1:c2:b3:11:1d:
         7e:b1:61:77:9b:7a:8c:46:b1:bd:07:ef:a0:3f:71:56:56:59:
         cf:c0:28:27:4a:2e:b1:8c:21:71:c0:ca:43:35:7c:af:a6:16:
         da:08:da:77:0e:59:0b:64:83:68:bb:57:6f:c7:00:4e:d2:03:
         db:c2:44:6c:03:f1:82:c3:d1:82:0b:f0:13:d9:d1:68:11:9b:
         7c:12:1d:7e:84:af:0e:d3:1b:0b:a8:4a:cc:2d:49:37:37:9d:
         84:25:3f:1f:4c:0a:68:60:65:4b:04:e5:68:08:e8:e4:a8:67:
         7f:c3:46:bf:5c:cb:7e:6a:43:9d:61:67:b1:8c:fb:6c:15:25:
         d3:e4:fe:4b:bd:39:4e:9f:d1:52:c3:ca:2b:ab:d9:ac:d9:b3:
         e5:ba:f0:04:66:bd:bc:06:9d:05:a8:96:5d:a6:4d:8c:93:24:
         99:34:7a:b4:62:5a:0a:10:7b:bf:6a:bb:91:bd:69:18:48:fc:
         73:3d:60:04:05:e7:5c:e9:70:15:2f:5d:7f:59:b8:31:0b:da:
         27:37:5e:34:12:c3:49:ec:33:e1:ab:08:bf:4a:d2:e6:e3:41:
         c8:8a:f8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:24 2026 by rpki-client