Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File:                     B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier:          Q4Z4+q74hIQjeZeWFImvO5XqvxRWfhf5a2JV+eJVOmk=
Subject key identifier:   66:C3:66:C0:3E:46:79:B9:31:6D:14:0B:5B:39:A9:20:62:5F:63:82
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer:       /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial:       01A13D812270AA7B8157911726098C31B005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number:          197B
Signing time:             Thu 15 Oct 2026 03:00:35 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:35 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:35 +0000
Files and hashes:         1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: OuhbUiU3y+VOpMsmZf7IeF8keIGogBwcqdyA3IBUEYA=)
                          2: QRYnwPzgKp-9B5SCFgwsSF3VtLI.roa (hash: g+/BMJPy7LXVieQvJddQ3qFl3eA3wSZtRhRO6IBuRQ0=)
                          3: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (hash: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU=)
                          4: mqgpdMuqiVglKY9miPJxo9C0iTQ.roa (hash: cS8JqXqtjXcEL0kXghoZe2Txkm/P1kISxoeWzSy0MNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:22:70:aa:7b:81:57:91:17:26:09:8c:31:b0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
        Validity
            Not Before: Oct 15 03:00:35 2026 GMT
            Not After : Oct 16 03:00:35 2026 GMT
        Subject: CN=66c366c03e4679b9316d140b5b39a920625f6382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:2a:2c:29:da:94:c3:08:7b:84:21:df:42:
                    f0:09:02:75:9a:02:8f:c1:21:8c:dc:56:08:78:02:
                    eb:00:78:0e:52:1d:aa:14:f1:cc:f5:3e:4b:53:08:
                    fa:54:e7:a6:c3:14:c8:9f:e8:06:9b:63:99:56:75:
                    d6:f4:26:c6:31:71:05:34:a9:29:7a:da:5f:03:77:
                    17:2c:a7:64:34:6a:ff:78:49:be:07:bb:89:4b:e6:
                    c5:8d:9c:6c:9d:1f:b8:48:59:cc:7d:3b:2e:d6:62:
                    f0:39:ac:6a:14:b7:fc:e4:96:a1:15:4f:90:97:2f:
                    e6:b2:8c:61:fc:ab:58:db:8a:87:39:4b:f3:2d:56:
                    5b:f5:76:e9:1e:06:0f:4c:d6:5c:c7:b3:ce:fe:09:
                    bc:de:b9:4e:ba:eb:01:e9:e2:bf:2c:2b:4b:94:f7:
                    b6:dc:0f:98:7f:22:19:69:37:69:88:f2:3b:4f:7f:
                    59:65:5d:c1:89:eb:e1:6b:84:82:b6:ee:82:f6:ca:
                    24:65:e5:df:be:15:4e:48:6f:c7:60:fe:0e:cc:ab:
                    2e:f7:61:12:55:52:c5:78:1d:1d:fb:9e:8f:97:2d:
                    f2:5f:db:1c:c0:1f:22:c5:f0:a0:a4:b8:dd:9e:07:
                    78:86:69:d5:cc:f4:6e:e3:a1:89:b6:3e:71:94:3b:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C3:66:C0:3E:46:79:B9:31:6D:14:0B:5B:39:A9:20:62:5F:63:82
            X509v3 Authority Key Identifier:
                keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d8:5d:1a:ec:11:c0:6b:37:2b:b0:67:ab:14:97:da:79:10:
         5f:16:e3:40:8a:db:a7:51:41:ee:89:5d:60:60:48:91:45:c2:
         a2:57:0a:26:cc:41:97:ac:9d:79:08:01:ba:14:52:8a:60:c8:
         f0:c1:0b:e2:3c:38:f9:3d:d5:d3:bc:96:41:52:d7:3d:4d:c3:
         f5:95:b6:3b:b6:01:5d:39:c7:c1:74:8b:07:e2:3d:ef:3f:6c:
         3d:50:28:b2:5d:c8:f8:e9:71:0b:40:0e:9f:35:ec:19:1d:a6:
         1f:48:58:d6:cc:dd:ff:15:8a:31:bd:bf:82:01:f2:3b:52:c9:
         87:80:a4:fa:71:9f:a4:cb:a3:85:09:d0:a0:5d:52:0b:f0:29:
         84:bd:5f:21:b3:7d:d9:73:d7:f4:c2:c2:21:85:32:43:6f:a0:
         1a:08:6a:94:1c:a3:32:5e:13:5b:44:06:59:9d:ee:77:09:0c:
         8d:7c:d6:e7:88:a3:a6:4b:8f:18:4f:ba:54:82:de:0c:5a:eb:
         0e:60:aa:f9:35:2a:82:87:cb:a2:f6:aa:df:3b:a4:3d:c3:9d:
         b4:96:23:62:db:4f:ae:0f:44:71:e7:f2:6f:29:a4:84:0f:5e:
         e3:04:45:73:82:87:88:fb:c0:02:9c:ba:49:5f:e0:16:a0:5c:
         00:9d:6a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:43 2026 by rpki-client