Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
File:                     B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json)
Hash identifier:          O3gvrlKagQeV1di/hFbIw3/fpcplKFCnGk7VzX7nTX4=
Subject key identifier:   94:85:60:5A:22:37:59:4D:87:8F:A1:82:AE:F3:67:67:D4:6F:4B:55
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Certificate issuer:       /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial:       01A11AF50DECA095BCB50758B9E76EAAB8A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
Manifest number:          04AE
Signing time:             Thu 08 Oct 2026 10:00:29 +0000
Manifest this update:     Thu 08 Oct 2026 10:00:29 +0000
Manifest next update:     Fri 09 Oct 2026 10:00:29 +0000
Files and hashes:         1: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: xrJu0h+mXcDQVum7OKeBYp0NOhEyqMq7fTMVVAbLokM=)
                          2: TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa (hash: iK5z4qk0gr8bvYoAqNPpIK2aAVNKtW+7/UdSHbw3Lm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:f5:0d:ec:a0:95:bc:b5:07:58:b9:e7:6e:aa:b8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
        Validity
            Not Before: Oct  8 10:00:29 2026 GMT
            Not After : Oct  9 10:00:29 2026 GMT
        Subject: CN=9485605a2237594d878fa182aef36767d46f4b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:64:5e:02:34:10:0c:8d:94:05:11:a8:86:
                    f2:27:0f:df:9e:1d:8b:6b:e5:52:05:f9:e2:a6:0e:
                    14:20:ca:ab:37:3d:e1:a5:75:01:fe:75:ba:05:3a:
                    3e:bc:3b:a2:5e:77:1b:a9:9b:da:34:21:5f:14:02:
                    a0:6b:ee:a9:33:df:43:ce:67:9a:73:45:0e:16:81:
                    5f:41:6d:33:ef:d2:05:1d:46:96:f2:3f:72:dd:82:
                    19:75:9d:d8:bd:b3:88:6b:05:eb:3d:03:df:f6:f8:
                    75:14:50:9e:10:a9:0d:79:9a:c6:fe:bd:3c:e9:6d:
                    b1:84:1e:b1:dd:8d:d9:34:32:56:3e:3a:d7:35:20:
                    dd:35:05:de:d4:b0:9b:a6:75:bc:3b:b2:24:ac:39:
                    19:b2:ca:70:fa:7b:de:bb:ad:32:8f:3f:83:a4:e0:
                    c9:53:4a:c7:d1:85:c7:f2:59:22:67:2e:be:3c:e7:
                    89:f2:f9:7e:7f:17:b6:4a:d2:9c:c5:ab:e5:34:c6:
                    b3:f9:d7:01:8e:ac:e5:aa:ef:36:52:e3:34:df:0a:
                    c0:45:bc:db:e0:65:08:cd:cc:8b:6c:b0:26:b0:b1:
                    13:72:ae:f1:49:9e:dd:a0:a4:2f:d3:13:17:9a:55:
                    21:45:dd:ec:96:49:e6:51:6d:31:26:01:47:39:03:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:85:60:5A:22:37:59:4D:87:8F:A1:82:AE:F3:67:67:D4:6F:4B:55
            X509v3 Authority Key Identifier:
                keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:87:be:d3:2a:61:a8:77:c0:1a:24:80:d1:50:05:a7:76:e3:
         fa:34:fa:14:03:1e:ab:76:da:d1:b4:92:fd:57:a7:8a:8a:2e:
         8b:8a:b4:1c:97:b1:28:0a:ad:1c:75:f3:4e:6d:34:c0:04:cd:
         8b:14:a4:86:5a:ed:59:64:dd:14:c3:e3:25:04:04:da:e2:fa:
         e2:a0:1f:26:9f:df:06:3a:1a:42:2e:46:71:ce:c2:f2:a5:2d:
         53:4a:1c:8f:68:5e:7d:fd:a9:3f:6d:2a:ed:1f:e1:7d:d8:9e:
         2a:2e:b7:23:42:ca:45:69:7d:0f:63:25:fd:9a:de:a6:b4:fb:
         83:55:43:83:fe:9c:4c:90:80:f0:6f:72:a1:08:75:da:63:29:
         2b:72:94:3c:31:6e:02:df:d7:30:36:41:58:c4:a6:a4:a5:64:
         b0:c8:6c:06:6f:0f:09:ce:53:a1:79:f0:d9:77:c4:73:79:54:
         45:66:fe:e6:b1:4b:38:53:d2:a1:a9:ab:51:e6:cb:36:dc:02:
         af:0c:cd:3a:63:11:1d:1d:40:f9:f0:17:90:38:71:7f:43:19:
         11:f4:c9:58:8e:a7:a7:ee:f9:47:6d:4e:ce:68:86:c4:1d:30:
         77:04:4b:1d:68:48:a3:e8:07:c2:d9:6f:2f:a6:f9:8e:62:a7:
         3e:73:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:07:13 2026 by rpki-client