Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File:                     BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier:          3AzmIA1Z4vmzwxEu8mmun+aoKEmeawqTX+PuP/eb2qg=
Subject key identifier:   00:2A:BC:65:06:E9:89:5F:14:06:E3:22:26:80:9B:15:21:E0:CC:DD
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer:       /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial:       01A13E5CDF95E216C11181156109E2160892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number:          0C5E
Signing time:             Thu 15 Oct 2026 07:00:36 +0000
Manifest this update:     Thu 15 Oct 2026 07:00:36 +0000
Manifest next update:     Fri 16 Oct 2026 07:00:36 +0000
Files and hashes:         1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: 4WXFaiXgZmlfDADgTjoQ+Cp/HwUTE1bvGS6QbSMSPuI=)
                          2: xNUHHeKL5gyglULSwBpb7Qy-WwI.roa (hash: +glq0PaufWCQhOFjvFVpKvbSAAw+d7Af8r+hPXAyxiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5c:df:95:e2:16:c1:11:81:15:61:09:e2:16:08:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
        Validity
            Not Before: Oct 15 07:00:36 2026 GMT
            Not After : Oct 16 07:00:36 2026 GMT
        Subject: CN=002abc6506e9895f1406e32226809b1521e0ccdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:21:4c:c4:92:9d:90:92:36:6e:d5:5d:bf:23:
                    c2:20:dd:62:62:93:0e:c5:85:8f:87:dd:e7:9e:ae:
                    d6:8c:a4:fc:3a:b3:30:cb:0c:32:00:74:80:c9:e3:
                    cf:f2:1e:70:9b:7c:46:eb:5b:93:41:f3:ab:25:93:
                    ea:43:a7:37:a3:f8:45:16:fc:66:a4:4c:75:34:2a:
                    a9:9b:53:47:d0:91:ee:d9:d3:25:29:17:2c:68:7b:
                    0a:7f:63:bf:9c:f5:9d:e3:36:8a:1c:8c:49:3c:97:
                    7c:4e:e5:35:8b:34:57:b8:c8:98:6f:e3:3a:9d:43:
                    0a:82:66:6c:3f:7e:91:53:cf:07:6e:df:97:5a:b9:
                    2d:ed:8a:f3:63:c2:26:62:e9:51:56:e0:14:9b:27:
                    b5:42:ce:51:de:04:30:0e:06:fe:fd:a9:27:a5:da:
                    b2:f2:d3:3e:d3:00:89:19:e2:08:e1:96:8b:fb:0a:
                    e1:bc:80:74:c9:f4:c9:ee:05:24:57:c0:49:dd:9b:
                    1d:e4:92:ee:e0:11:37:5e:bc:b2:de:97:5d:79:5e:
                    fe:f9:ef:1c:6c:8d:1a:a0:92:95:d4:78:c0:bd:f5:
                    91:63:f3:9c:53:f6:d9:0f:31:47:7f:b3:79:6e:8d:
                    10:1f:f3:84:82:2c:69:dd:b5:00:5f:20:0f:b1:f7:
                    e3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2A:BC:65:06:E9:89:5F:14:06:E3:22:26:80:9B:15:21:E0:CC:DD
            X509v3 Authority Key Identifier:
                keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:54:d7:40:1a:83:80:a6:76:ff:bd:9b:51:5f:a6:66:c8:29:
         1c:5f:da:0f:ab:8a:bb:f5:3f:7a:2b:b5:e8:68:ae:e7:f3:65:
         9d:1e:b4:41:50:0e:ae:86:da:54:34:ea:72:92:fe:11:55:7a:
         f8:15:44:7a:89:8d:22:be:14:18:39:3f:7a:71:d2:7c:3a:4b:
         9d:09:f1:05:10:95:18:46:16:33:58:55:78:40:44:29:a3:8d:
         8f:9f:0b:03:07:85:de:e4:65:eb:d2:54:f4:c1:66:be:9b:95:
         71:0f:78:52:4f:e8:d1:27:c7:0e:f3:26:17:69:eb:29:0f:c4:
         9e:8e:13:63:f3:10:ef:b4:90:41:2d:a7:8e:7b:e1:fa:e6:7a:
         aa:e1:f7:5f:df:93:20:0f:1f:cd:f5:12:22:0d:ec:ec:d2:83:
         f1:d1:61:88:ee:92:4a:35:f5:e6:fa:04:1f:6d:b0:11:c0:59:
         7d:ca:a6:cd:38:68:06:81:de:10:82:3d:96:f2:eb:44:00:cc:
         fb:45:d7:c7:b5:a8:ef:86:d3:8c:ac:03:3e:d2:97:69:db:75:
         41:a3:1b:c0:d5:37:9f:a4:03:34:15:e1:b2:1b:d4:bb:9f:be:
         0c:6e:6e:15:b1:30:4a:39:87:11:66:1d:18:a9:ac:55:a6:2c:
         41:86:9f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:47:30 2026 by rpki-client