Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File:                     BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier:          28XZdU8erTw6nDEZGGsIed7qe1fRF+4lk1k9xVCw5/M=
Subject key identifier:   D8:C5:8B:DF:B5:8A:51:15:E4:02:9A:9F:D8:77:2B:18:94:10:B7:D1
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer:       /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial:       01A13F02E53AC5F1EAF150BB34326743D5A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number:          177F
Signing time:             Thu 15 Oct 2026 10:01:56 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:56 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:56 +0000
Files and hashes:         1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: ba09T3uhwoyUGgKy49IStt3UnvvXatNAnhDiadLndlA=)
                          2: WG28MJ6GfBcScCKqRDEvob91T1k.roa (hash: 6xxB8aNVMWtEKkp4uvdHGR25LDD6UpDdJnexnLea70w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 10:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:e5:3a:c5:f1:ea:f1:50:bb:34:32:67:43:d5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
        Validity
            Not Before: Oct 15 10:01:56 2026 GMT
            Not After : Oct 16 10:01:56 2026 GMT
        Subject: CN=d8c58bdfb58a5115e4029a9fd8772b189410b7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:c3:bc:61:58:1a:46:3d:55:ba:9e:d0:78:
                    dc:89:6a:a5:87:41:e5:f7:6f:8e:ad:73:48:89:43:
                    b5:ca:fc:ad:de:38:79:d0:4f:09:95:2e:1f:cf:aa:
                    92:c1:98:3b:9a:e3:89:88:51:d6:f1:16:e2:98:68:
                    02:c7:dc:83:a0:8e:00:3a:7c:82:8b:0e:c2:78:cc:
                    49:78:a6:13:65:15:83:cf:8a:85:36:89:e0:cd:9d:
                    94:1b:a0:bc:c9:7e:31:63:54:b9:78:66:2e:b4:87:
                    ff:3c:3a:64:c7:15:6e:80:29:f9:12:44:01:c7:2e:
                    20:09:40:83:12:87:04:d9:ae:fd:c2:b1:d7:7a:05:
                    f4:45:66:47:ce:a8:0b:de:00:a0:54:3f:d9:70:88:
                    a4:8a:c2:bd:0b:09:c3:12:c6:e5:18:37:6b:2e:b9:
                    f0:aa:e9:38:28:3d:5c:3d:0e:6b:28:b3:3b:b8:c8:
                    b9:d5:d5:28:88:e1:41:01:92:52:61:26:f2:d6:49:
                    8a:92:66:17:2c:e5:b2:60:4a:f8:0f:1b:cf:11:ed:
                    00:3d:44:d0:a0:13:b5:c4:fd:e7:ff:c1:82:a3:c9:
                    72:f0:df:cd:45:ca:f1:e4:d4:29:b0:68:f3:4a:21:
                    ea:20:a1:6d:c4:ec:06:e8:be:23:de:04:63:1a:f4:
                    e6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C5:8B:DF:B5:8A:51:15:E4:02:9A:9F:D8:77:2B:18:94:10:B7:D1
            X509v3 Authority Key Identifier:
                keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:08:19:7b:e5:f4:8d:5f:e0:7e:e5:64:9d:63:32:71:43:91:
         16:0c:ae:5b:13:b9:de:9f:d9:77:2f:f9:32:aa:43:3a:53:3a:
         00:11:45:51:47:33:41:d8:fe:d5:85:84:4f:60:e4:36:2d:b6:
         31:71:6f:49:1a:24:ea:ad:d7:fe:60:45:56:dc:a0:10:28:d6:
         c0:84:ee:98:68:21:3f:c3:7d:7a:e1:34:5a:54:2e:d6:ae:98:
         06:c9:c5:6b:a8:21:70:31:c1:90:e6:b7:09:2f:17:64:d7:72:
         4d:2f:e0:49:c7:07:a6:db:45:c8:6f:00:10:3e:38:f2:34:71:
         87:49:37:9c:fe:a2:16:11:36:87:69:0f:dd:85:0a:db:7b:d0:
         d7:30:fa:1d:d1:81:cc:1b:31:da:b1:d3:b6:22:0e:61:89:e4:
         87:d7:69:ea:b9:90:96:8b:59:83:b7:12:8b:ef:e2:06:83:fd:
         6b:9f:2d:a1:ec:96:36:ab:79:b2:7c:d5:13:52:85:66:a3:a6:
         1b:3a:28:d6:db:ad:ba:b6:40:3e:07:6e:f4:6e:2a:96:49:b4:
         16:15:91:00:cd:f8:36:8e:1a:02:0b:31:f5:5b:1f:e4:3d:ea:
         9f:36:66:e9:df:81:09:ce:e6:53:2b:7d:b1:bf:e7:86:f6:09:
         da:f8:b9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:53:53 2026 by rpki-client