Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
File:                     BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json)
Hash identifier:          4KFk80OJG6yfJBqk2tcwIimYOHibzSK1qNCv4PAT1Rc=
Subject key identifier:   1D:1A:AA:B2:B0:83:72:9D:9E:02:88:03:B0:FA:58:6E:F1:8E:89:E4
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Certificate issuer:       /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial:       01A08F7BA24B00B20C709FD0C11B6296374F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
Manifest number:          1485
Signing time:             Fri 11 Sep 2026 08:00:39 +0000
Manifest this update:     Fri 11 Sep 2026 08:00:39 +0000
Manifest next update:     Sat 12 Sep 2026 08:00:39 +0000
Files and hashes:         1: 12VrHFXwaw2Ns5zEn5WgEqmxGdI.roa (hash: 7TlSZ71dkSJQnGqHXDK1wFlvFHPaH/kJlSU72oOTi+U=)
                          2: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: Jup4k0px26SpSTelFdJk2RddP9mJD8HxbHJGsAqt5YQ=)
                          3: DAk9scQvo5DMV_VlSztOmztoUsk.roa (hash: LbZH4yFltHGub7MlaORytCaFKFzBncecl1qi4I5mXh8=)
                          4: KedsxwMx1vS4wxET3Dft1ZVYZdM.roa (hash: absKcImfV1TnjcpSLnLKauDQBXXCFX2CsdZyDNeGTWY=)
                          5: gFPtY840cLMHPIAm8CMRVd0tx6Y.roa (hash: JaE0xay3++fm7hhQzeyY7hTKvCUzMEL4kuE9EKN5pjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8f:7b:a2:4b:00:b2:0c:70:9f:d0:c1:1b:62:96:37:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
        Validity
            Not Before: Sep 11 08:00:39 2026 GMT
            Not After : Sep 12 08:00:39 2026 GMT
        Subject: CN=1d1aaab2b083729d9e028803b0fa586ef18e89e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:55:28:00:cd:c7:a4:e8:01:83:be:87:27:
                    ad:6f:2b:de:e8:7d:4b:74:09:34:10:af:9e:74:18:
                    e8:39:8f:41:1e:2a:05:85:25:29:24:d8:84:59:d9:
                    62:0e:81:2c:43:93:3e:c2:fd:5e:66:98:c1:b9:22:
                    c3:f2:d9:e5:9d:f4:ea:d9:ef:9c:02:26:89:e4:f7:
                    49:48:87:e8:fa:8f:f6:54:e2:5d:e9:0e:be:44:02:
                    d5:c7:bf:62:8e:b8:d6:2e:7e:b2:d6:c7:16:cc:51:
                    92:be:f6:69:eb:7a:d0:ae:c2:49:2e:4c:a1:56:f5:
                    e0:0f:c5:10:6f:0d:4e:ae:df:8b:6d:09:cf:a6:d5:
                    dd:ee:ac:8e:27:f8:b3:66:8f:bf:5c:94:2d:e4:6d:
                    cb:e5:cb:45:60:54:cb:b7:40:45:82:19:bb:e4:3b:
                    85:66:8a:be:fd:e9:a8:d8:db:56:e4:dd:e6:4c:c6:
                    44:d7:ff:5f:6b:c9:10:01:3a:fc:3c:ce:2c:93:d4:
                    58:d8:39:6a:be:5d:96:85:9e:b9:39:b4:b6:0c:13:
                    53:cd:d1:f5:60:f0:77:20:72:33:41:9e:f3:0a:28:
                    64:61:cf:f3:9c:f3:fe:ef:69:46:8e:ed:45:f4:36:
                    36:ff:16:e0:b7:0d:9f:8e:67:50:bd:58:de:a6:7e:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1A:AA:B2:B0:83:72:9D:9E:02:88:03:B0:FA:58:6E:F1:8E:89:E4
            X509v3 Authority Key Identifier:
                keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:92:bd:b8:b4:f5:d5:7b:30:d7:36:5c:eb:3d:ef:00:ab:69:
         0c:a3:1c:39:ae:79:b8:50:7d:7f:88:27:bc:b7:57:ba:95:7b:
         5e:36:98:40:11:60:4a:e1:e9:75:fd:bb:77:44:c4:05:54:7d:
         6d:27:d2:a6:18:ed:6f:d4:b5:6d:8b:94:67:21:f5:ac:65:dd:
         d2:93:2c:58:0f:71:e7:f6:f0:43:51:24:6a:b0:02:24:82:ad:
         b4:3d:40:4c:73:7f:fa:0c:83:af:ee:bb:3c:39:05:d0:9a:8c:
         f7:ea:90:a0:2d:80:7b:83:9b:17:ad:e4:08:d8:8f:af:b0:65:
         ec:40:4a:47:6c:1f:94:6f:7c:78:5e:60:62:ca:16:d9:d8:44:
         cd:ec:55:14:c7:d2:c9:b5:28:9a:00:d4:f3:de:00:61:4c:72:
         e2:06:a2:aa:85:61:07:ef:28:14:28:1b:ea:6d:7d:dc:ea:a5:
         8c:dc:1a:fb:57:7a:70:24:ac:0c:4b:c2:92:50:71:5e:02:f5:
         7f:3f:38:67:92:26:fb:f2:46:2b:08:df:d6:6c:f1:c3:6b:55:
         ac:68:75:a7:85:52:bc:4a:47:b9:d5:fd:dd:0f:22:35:01:03:
         f5:2e:8e:c4:c7:96:89:48:7c:e9:2f:70:7f:c2:94:65:38:ea:
         0b:01:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:05:10 2026 by rpki-client