Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
File:                     RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json)
Hash identifier:          QKB9YlOKB2711kAih5mxwiefJmopGR4ch5hZs48/JcM=
Subject key identifier:   61:34:82:DC:51:28:BD:72:C1:9C:84:A2:64:E1:38:E2:4E:80:89:2E
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Certificate issuer:       /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial:       01A17EBD25FD5EE9182FAFE7398503A64286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
Manifest number:          15BE
Signing time:             Tue 27 Oct 2026 19:01:27 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:27 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:27 +0000
Files and hashes:         1: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: BFdgSGDwBQC+TUPlL5aQcCEecZO2X/fPWi7IGFDhn2c=)
                          2: qnkXJAeK4u2qmH3emYFeHbqxAfE.roa (hash: 2+W8mIlXbiBFTBNeKHsjpm7VkP0Dt7GHPChKCDwNq2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 19:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bd:25:fd:5e:e9:18:2f:af:e7:39:85:03:a6:42:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
        Validity
            Not Before: Oct 27 19:01:27 2026 GMT
            Not After : Oct 28 19:01:27 2026 GMT
        Subject: CN=613482dc5128bd72c19c84a264e138e24e80892e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:30:91:7f:bb:f3:9a:78:29:cf:63:70:3b:
                    0c:2e:3b:04:3d:48:a2:25:f6:6b:b6:f3:2c:ef:d5:
                    f9:31:67:af:73:f0:6a:74:72:d0:e5:f9:27:66:f7:
                    06:5f:62:aa:c6:36:26:fc:d4:c5:11:ae:38:cb:91:
                    c7:13:f4:c5:95:0a:63:33:09:27:8c:f6:8f:be:54:
                    51:a8:50:93:4d:39:57:94:54:96:55:55:a4:2b:cb:
                    c6:71:a7:9e:da:fc:25:22:c0:74:fd:20:e6:8b:a9:
                    ca:a6:47:49:36:cf:71:f7:9e:3c:3e:7e:ad:c7:82:
                    5c:66:10:32:9a:73:a9:16:5c:de:1d:bf:43:86:a9:
                    94:8d:ff:9a:90:c4:42:09:a1:bd:ac:b8:d1:7e:a0:
                    f4:e6:e7:92:0a:d5:0f:2a:26:70:5e:b9:f3:66:d7:
                    5c:fe:b9:e7:eb:77:54:56:3b:17:e1:fc:d4:f0:7d:
                    b6:40:68:43:ae:81:0f:42:a3:de:cb:b0:25:cc:2a:
                    e2:db:10:6b:93:a9:03:e9:2e:a0:dc:fb:14:f2:04:
                    40:82:7b:da:78:c3:b7:30:04:1e:db:d5:74:07:26:
                    fc:d4:a8:bb:b0:5d:5e:78:af:59:ee:f1:c1:d3:fa:
                    5f:6e:c3:98:80:a5:5d:16:52:7c:01:f4:3d:20:78:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:34:82:DC:51:28:BD:72:C1:9C:84:A2:64:E1:38:E2:4E:80:89:2E
            X509v3 Authority Key Identifier:
                keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ff:32:3d:51:91:35:27:00:a7:ef:1f:23:a8:9c:88:21:41:
         32:4c:66:32:f7:39:c9:7e:22:12:0c:78:78:d1:3c:50:0b:ff:
         af:4c:8e:7e:25:46:1b:b4:e9:47:fa:0b:74:a0:72:8b:e0:1e:
         93:4f:0c:bc:c2:3e:98:55:94:15:33:cd:bf:52:bd:11:c6:1a:
         fe:f4:fb:cc:b8:ea:3f:73:e8:d1:f7:87:53:a0:9e:cd:c6:33:
         68:c6:f1:25:6e:2f:59:31:2a:fd:29:5e:26:f3:5a:64:b2:b5:
         2b:81:37:5a:42:b2:d8:c0:95:fc:b1:ad:11:f7:86:57:8a:c8:
         f5:17:ea:ab:c0:a3:08:78:3b:85:ef:88:55:a1:d8:11:8a:31:
         58:d6:35:ff:f6:d6:ef:9e:f7:36:c8:f6:67:7e:60:dd:13:b4:
         30:82:74:20:a3:aa:ea:21:af:2c:1f:cc:9a:7d:6e:77:59:63:
         e9:82:5f:85:a9:c2:5c:97:99:3c:b6:f0:12:a3:77:81:5c:e1:
         75:dc:4a:a7:ee:5e:ad:0b:c3:56:ad:70:2f:53:a1:2c:03:d6:
         e4:3f:7d:62:b6:d3:5c:e8:2e:b9:73:c3:49:21:ed:f7:8f:09:
         73:55:ff:45:73:a4:ff:02:13:8a:47:87:01:4f:04:32:7d:f3:
         0f:23:4b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 01:03:20 2026 by rpki-client