Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File:                     BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier:          2tsLL5zRWJ3WUD0HSnZ8aj96TjDxpGmF19qhg7RllKE=
Subject key identifier:   F3:D5:5F:34:E3:6D:74:08:18:AF:09:40:B7:F9:DB:66:39:6E:01:A6
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer:       /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial:       01A128E86CC06FD7AE6F7B55C1AB53B3BA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number:          105D
Signing time:             Sun 11 Oct 2026 03:01:23 +0000
Manifest this update:     Sun 11 Oct 2026 03:01:23 +0000
Manifest next update:     Mon 12 Oct 2026 03:01:23 +0000
Files and hashes:         1: 146jXKm1mB4IU8Kk9LRMQC_zNOY.asa (hash: 8veQrZoFWsY11ga3ViFvUI7ou0i1F07bbxgfAtHV5BE=)
                          2: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: 74A5sc52Jsg2s8z8nrMAXl6YpwyQUP9Zz2bzieuHpGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:e8:6c:c0:6f:d7:ae:6f:7b:55:c1:ab:53:b3:ba:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
        Validity
            Not Before: Oct 11 03:01:23 2026 GMT
            Not After : Oct 12 03:01:23 2026 GMT
        Subject: CN=f3d55f34e36d740818af0940b7f9db66396e01a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:21:1d:ce:75:98:b0:e6:aa:4f:e4:d0:3e:
                    47:02:53:cf:63:7f:96:b3:b8:22:d1:c2:1a:70:86:
                    f6:b6:be:22:41:ec:47:a9:e1:b0:d4:6e:2e:2b:7f:
                    55:cd:ab:f6:b7:e3:ba:fc:ab:d1:39:7e:5d:19:5a:
                    9f:63:99:88:de:80:3d:31:67:3a:f3:0a:4f:7d:7b:
                    b4:93:ae:9a:b4:16:2f:3c:68:2b:14:7d:18:c7:d8:
                    ff:af:c9:39:39:cc:06:00:17:f2:de:b1:66:cf:b7:
                    65:a7:3f:de:21:cd:35:f8:8f:76:9d:46:95:db:78:
                    71:cd:ce:3b:0a:e6:1a:a2:fc:7d:89:7b:b0:75:ee:
                    12:8d:59:96:d7:b8:75:2d:df:b9:8b:86:1c:44:27:
                    14:20:a9:59:e2:df:86:e5:4f:fa:bd:da:5f:72:1c:
                    3f:e5:da:e1:45:65:98:76:02:27:81:72:8c:e6:6d:
                    e7:4e:8e:ab:03:24:33:b7:1d:2e:a3:a5:6a:12:e1:
                    50:9e:f1:08:a6:95:53:a2:f3:02:59:4e:6a:e3:43:
                    cf:8a:cf:58:55:c2:c5:2e:70:9a:b1:79:47:19:dc:
                    54:ce:c7:20:aa:fd:30:73:94:39:57:5d:42:2c:2d:
                    cc:7e:ff:fc:f6:31:d6:60:ad:9c:00:66:8f:d1:38:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D5:5F:34:E3:6D:74:08:18:AF:09:40:B7:F9:DB:66:39:6E:01:A6
            X509v3 Authority Key Identifier:
                keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:12:43:04:2f:06:8b:b2:e2:70:0d:dc:47:90:49:c3:ea:50:
         04:67:10:7d:98:f2:51:0f:d1:fa:3f:f9:0a:1b:33:e1:ed:f9:
         5f:b2:65:fe:42:3e:01:7d:1b:c8:14:47:f5:ec:e0:ca:c3:84:
         28:c9:a0:b9:1c:98:80:4b:be:b0:39:86:44:1c:33:ad:e5:a9:
         05:f7:c0:26:38:f7:c8:fd:c0:b1:49:61:71:6b:08:d4:bb:2a:
         a4:fa:e7:41:b7:da:73:5d:df:87:c1:4d:e0:32:94:d6:16:78:
         ed:d8:b0:aa:98:ea:91:a9:24:2d:c1:f9:42:19:0a:e7:8d:c2:
         a4:e4:1c:d9:1b:8f:ef:7e:c5:1d:57:0a:dc:78:79:f3:d2:92:
         8e:ec:85:9b:48:ba:4a:81:58:98:c2:76:c5:73:ee:f5:d0:80:
         51:e6:1b:4a:f9:1c:f2:3a:e9:5c:19:7c:3d:4b:64:1a:6b:d4:
         80:a9:d2:7d:bc:9d:5a:3f:ac:f6:ac:c3:ac:62:ad:3b:ed:e5:
         ce:69:de:76:38:7c:65:a4:e7:67:0c:88:3f:15:4a:bf:88:ab:
         89:18:c6:44:fa:85:6b:69:68:94:44:66:8c:9c:e4:7b:f8:a4:
         61:07:66:ad:2a:ed:91:81:f3:45:49:95:4f:91:77:0c:2b:6d:
         4d:60:8f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:35:39 2026 by rpki-client