Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
File:                     By-BXnwWB9C9Ozmfupo1P-xUQxU.mft (raw, json)
Hash identifier:          ncnd9960G74O8m8fO4lWo144PtJvW0SSlZKUVQV2F1Q=
Subject key identifier:   11:49:08:3E:62:4A:71:B6:C3:2B:8C:79:AF:FB:EA:8A:A0:95:A7:37
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Certificate issuer:       /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial:       01A160E9470FCEF0D42798FAE5CD181D23AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
Manifest number:          02B9
Signing time:             Thu 22 Oct 2026 00:01:03 +0000
Manifest this update:     Thu 22 Oct 2026 00:01:03 +0000
Manifest next update:     Fri 23 Oct 2026 00:01:03 +0000
Files and hashes:         1: 50y8wGZItELb-KAO-Xri2PFoY5c.roa (hash: vsbFlFjDo1dOM6Prh7pc5ZSnF15uQakMrtx3HqlIavU=)
                          2: By-BXnwWB9C9Ozmfupo1P-xUQxU.crl (hash: +9/5uIRQfC8gtaahMomRPp8t0vCCcXVZWIvdOC22k78=)
                          3: JrvHwhtmk5HkFhO2EcSPUssi-HQ.roa (hash: n1cOi5A6p7PmyAfumce6tXETVHmm/Nez1OT08WgShXc=)
                          4: MnaK4RFMKFqvcy9LYy8dOLSmUhE.roa (hash: JFebODicpWznSO2Mn/DWAEOUW3TbJ4875G8KS9D1Pkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:60:e9:47:0f:ce:f0:d4:27:98:fa:e5:cd:18:1d:23:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
        Validity
            Not Before: Oct 22 00:01:03 2026 GMT
            Not After : Oct 23 00:01:03 2026 GMT
        Subject: CN=1149083e624a71b6c32b8c79affbea8aa095a737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f8:5f:93:c7:34:9e:1e:43:31:cb:cc:42:87:
                    a7:70:75:dd:c8:d0:2f:8f:1f:ee:02:31:6d:98:eb:
                    31:c6:f1:c4:85:45:82:4e:ef:b3:ac:17:95:46:f3:
                    1d:ba:ff:f1:ef:92:90:d6:d0:f9:85:dc:22:73:5f:
                    9c:eb:ae:7c:de:54:0b:6b:30:2d:af:83:ff:5f:17:
                    ff:ad:05:d0:31:1b:c7:e5:9c:dd:ec:b6:b6:5c:36:
                    2f:6c:16:10:39:6f:8a:83:b6:e6:48:1f:cd:9b:7c:
                    b7:66:f6:f7:2a:4e:da:9f:e4:1f:1c:24:70:76:0c:
                    20:fe:4c:fa:f6:a0:b8:a1:8c:e4:b1:72:f9:77:05:
                    54:ea:4f:72:b4:04:49:da:d5:eb:6f:11:54:3a:a7:
                    b5:9e:0d:3b:4b:12:fa:aa:98:d6:81:8c:26:20:2a:
                    1e:f2:c2:93:04:40:56:f3:00:95:01:68:30:05:41:
                    df:f1:1b:82:8b:f3:99:3b:0d:9d:69:14:5b:06:17:
                    6e:f0:a8:89:44:95:c9:f6:4e:4f:cd:11:b2:c4:c2:
                    ca:67:1f:9e:8f:28:27:74:fb:64:bf:a8:dd:88:92:
                    d9:c4:04:0c:4f:f6:c7:ba:37:41:d1:17:ef:29:a7:
                    3c:f9:d3:13:c1:20:a6:31:8c:89:44:98:a2:28:49:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:49:08:3E:62:4A:71:B6:C3:2B:8C:79:AF:FB:EA:8A:A0:95:A7:37
            X509v3 Authority Key Identifier:
                keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1d:c2:0c:30:18:5a:e6:2b:ac:12:60:7f:88:11:96:2c:24:
         bc:f4:96:a3:0e:59:1c:5a:84:22:86:1d:8b:4b:32:6e:4c:bb:
         9c:fa:67:50:4b:ca:73:08:f6:f9:03:a4:37:45:23:b2:6d:37:
         3f:df:18:25:a4:47:6c:4f:d5:b5:6e:4e:96:95:cc:74:8b:8b:
         e2:14:e3:06:42:51:5b:e8:3e:7c:67:f2:f7:60:70:ec:c1:ef:
         7c:9b:9d:af:dc:a2:a7:1f:8e:f9:28:05:93:f0:35:47:a5:13:
         61:2b:73:03:c4:70:d6:d4:a1:7c:fa:2e:46:c5:cd:1e:09:23:
         ec:f9:38:1f:c6:8b:f0:d3:52:0f:20:56:ad:f6:07:a4:62:86:
         6f:13:35:08:49:30:f8:a2:b7:7d:df:41:d0:93:f3:28:9a:c6:
         ed:9b:61:0e:47:42:0e:f8:2d:58:08:69:5f:8b:d3:5c:09:3e:
         08:d6:6e:ae:91:07:0a:d6:aa:7e:2b:67:31:ef:ac:c1:c3:0f:
         54:64:9d:68:db:6e:12:ee:d4:bd:45:85:ee:91:d3:d4:e3:25:
         b8:ca:f3:6b:4c:b9:d3:99:97:9d:3c:c0:8e:24:8b:96:14:77:
         3a:dd:6a:db:93:1c:55:6f:82:df:bc:9a:9a:4b:07:a2:87:1b:
         53:aa:d8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 12:00:27 2026 by rpki-client