Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
File:                     19BnS9bwzJF1IZoyjIs5aCn2wK8.mft (raw, json)
Hash identifier:          2vfXFsxA9UtL0GQesqtlgOWwG5axttjnLHSJYr14sbM=
Subject key identifier:   48:4F:DC:E1:43:70:BE:FF:F4:12:6A:F3:45:99:D9:2E:2D:DE:4F:A5
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Certificate issuer:       /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial:       01A109CAFD3DA83B9100E2209341F3476F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
Manifest number:          0BCA
Signing time:             Mon 05 Oct 2026 02:01:00 +0000
Manifest this update:     Mon 05 Oct 2026 02:01:00 +0000
Manifest next update:     Tue 06 Oct 2026 02:01:00 +0000
Files and hashes:         1: 19BnS9bwzJF1IZoyjIs5aCn2wK8.crl (hash: CUsZWbaGVSuUweMIAnhpovoWhfX2247r1+zuIzRVnmY=)
                          2: GKUTqwBP_GupgX8i_14DMKSPOFw.roa (hash: tKZerLyqA3hhZTFh/tNFaqmbnlhdZTcyoiS51E8G/N0=)
                          3: kP1iKAvRfxtQ5wSZVHkzs_4tz2A.roa (hash: TCxYw6H5tNRPevpD8j6N6iWYDsSRAM2INgdF57aLPMQ=)
                          4: spxNX0Evy0wKIT1vmaLDnNo-Big.roa (hash: FNbjAc8UBH89MSMLg9FJE7KppzSW+Jbx8vk6L1dDdVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:09:ca:fd:3d:a8:3b:91:00:e2:20:93:41:f3:47:6f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
        Validity
            Not Before: Oct  5 02:01:00 2026 GMT
            Not After : Oct  6 02:01:00 2026 GMT
        Subject: CN=484fdce14370befff4126af34599d92e2dde4fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:33:ae:0f:9c:e4:06:a3:51:56:71:61:85:
                    52:81:c8:36:08:66:91:62:e5:16:15:90:3d:08:ce:
                    2e:07:47:0a:77:1e:fe:69:6f:4d:1e:f0:81:e0:df:
                    18:d8:b9:53:76:ce:d1:7f:0c:36:31:db:b1:f4:c2:
                    6e:fb:3c:13:af:97:be:9e:23:3d:e8:f4:04:37:2e:
                    fd:fe:24:a8:3b:6b:77:b3:75:be:a0:96:50:fe:2e:
                    e7:41:ed:5c:62:6d:b6:c3:4a:c6:6a:5b:84:73:c8:
                    32:c2:68:78:d6:5f:66:0b:c7:49:1b:8f:9c:37:22:
                    9e:83:a8:09:d3:3b:26:82:4e:5b:70:4c:11:70:89:
                    4e:85:82:a2:98:1e:89:0d:5a:f3:2a:29:d0:83:e4:
                    8e:40:e5:8a:d7:38:2f:3e:6a:5f:27:b6:2a:1c:45:
                    7e:58:56:01:0d:8a:dc:34:d2:ab:e6:38:1e:69:ba:
                    ee:80:2e:3a:af:27:f7:f3:14:05:04:aa:1c:84:13:
                    9b:08:a6:7a:8c:f7:fd:d9:41:ec:63:4c:fb:6a:f8:
                    67:9b:f1:63:ab:f9:55:e3:57:31:31:f5:46:2e:dd:
                    38:c8:53:78:0f:69:e5:fe:12:97:6a:90:60:f8:6a:
                    5b:75:86:0e:67:c2:8b:0a:5f:c2:41:46:01:c7:1c:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4F:DC:E1:43:70:BE:FF:F4:12:6A:F3:45:99:D9:2E:2D:DE:4F:A5
            X509v3 Authority Key Identifier:
                keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2b:6a:f0:eb:97:09:44:26:95:26:a4:cd:d1:fb:56:73:6f:
         96:33:16:70:b0:45:f8:46:79:4c:e0:e3:82:bd:3e:95:47:cc:
         78:4c:04:5e:4b:4e:72:92:2c:7e:1c:e3:94:11:3e:11:87:c2:
         88:6b:e9:fe:98:4d:ee:39:01:23:4e:84:00:38:f6:66:aa:cc:
         6c:ce:d1:b7:44:69:e6:21:bb:79:1e:0f:02:88:31:23:1a:3d:
         0f:ac:fd:df:12:f2:5a:22:af:af:f2:62:bd:dc:3a:18:e1:84:
         5a:21:07:7b:d6:08:67:bf:68:17:17:fd:b2:05:8c:10:0e:c7:
         74:a2:89:d7:d7:d5:12:80:73:64:e6:f7:5c:74:b4:f6:ed:f1:
         ac:4e:77:b8:97:51:f3:ea:0d:cf:4a:d2:fb:ff:ab:df:27:3f:
         63:32:52:d8:dc:12:7e:ef:a7:6c:a1:6c:93:ce:71:2d:ee:9f:
         32:1c:7a:3b:03:86:85:77:0e:f2:fc:73:cc:b5:b3:49:78:94:
         4d:c6:37:f7:e4:30:2c:54:d7:81:ba:b9:00:0f:ae:24:eb:51:
         cf:d2:f6:9d:34:08:43:24:1e:d8:05:da:a4:a8:7c:5c:f4:75:
         e5:cc:28:af:08:b6:17:fd:85:c4:a9:5e:f4:bf:a7:0f:39:30:
         33:a3:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 10:08:19 2026 by rpki-client