Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File:                     BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier:          jIvc87/xJmshVf4/4f4SajW+xxWGtdnb6C+MBwv/J5E=
Subject key identifier:   83:5A:7A:B7:DB:43:03:90:B6:69:0A:34:13:A2:22:AE:84:BB:4F:19
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer:       /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial:       01A1483BDFD7B5A84C7D5A2BDEEF0863E8BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number:          0F60
Signing time:             Sat 17 Oct 2026 05:00:45 +0000
Manifest this update:     Sat 17 Oct 2026 05:00:45 +0000
Manifest next update:     Sun 18 Oct 2026 05:00:45 +0000
Files and hashes:         1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: xjqb6RgkfCxQmHo8zElDGyy/QdMDA0p9IGTzol3JHdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:3b:df:d7:b5:a8:4c:7d:5a:2b:de:ef:08:63:e8:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
        Validity
            Not Before: Oct 17 05:00:45 2026 GMT
            Not After : Oct 18 05:00:45 2026 GMT
        Subject: CN=835a7ab7db430390b6690a3413a222ae84bb4f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:53:83:63:3f:85:1a:d7:61:df:f6:13:3e:
                    f7:05:43:dd:f3:81:92:91:2f:00:bb:66:d2:98:29:
                    85:c9:af:87:f4:fe:70:0b:0d:f2:8c:46:cf:bc:97:
                    78:6e:96:f7:bf:eb:2b:72:3e:00:4b:8d:19:c1:77:
                    89:16:0e:68:e1:fc:a7:47:7b:2d:a1:f2:4e:3f:01:
                    09:17:64:f4:e1:74:ab:92:7e:f9:2e:37:2d:8e:75:
                    79:43:db:16:7b:34:26:02:bf:b0:0d:73:68:a3:18:
                    65:5b:0a:f1:28:2c:96:41:23:db:d4:59:78:96:04:
                    f7:f3:58:bb:b1:d8:dc:be:0d:a5:4c:ed:59:8f:5b:
                    43:0e:8c:76:18:e2:45:68:09:f6:66:3e:e5:c0:de:
                    15:09:ab:b9:6d:10:e8:ec:6d:42:7f:d5:cb:92:d0:
                    ae:e5:1c:a5:ee:06:98:0c:bd:45:b4:91:9a:a0:56:
                    c6:0b:d8:86:41:88:3a:43:2e:58:4e:87:3a:47:92:
                    bc:3d:df:cb:bf:98:1f:28:bc:af:36:4a:31:48:d9:
                    c9:8f:bd:15:ac:eb:9e:d3:59:49:47:9b:1b:96:d5:
                    99:24:1f:bb:dc:64:c1:e8:ab:33:4c:f0:5e:be:7c:
                    eb:4f:32:a3:77:f6:bf:f5:07:bf:9f:a4:3a:93:32:
                    25:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5A:7A:B7:DB:43:03:90:B6:69:0A:34:13:A2:22:AE:84:BB:4F:19
            X509v3 Authority Key Identifier:
                keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2e:30:55:06:c2:47:47:c0:3e:4c:cb:88:05:c7:30:eb:39:
         f4:80:e9:78:77:ad:8b:79:e7:df:e6:a0:f7:b3:7c:d4:bf:76:
         45:3f:1b:87:7d:35:10:12:34:7a:71:76:0f:d2:36:4a:88:a9:
         ae:8b:21:8e:cb:a7:1e:d6:e7:fa:dc:13:0b:73:88:9e:f8:4a:
         8f:45:dd:da:99:d6:7d:87:55:5f:43:39:3a:a1:ee:55:a1:82:
         4d:84:f6:5e:a7:bd:71:22:64:5d:d2:4a:45:4b:07:98:23:7b:
         67:93:e4:24:ba:24:45:8b:ce:0b:54:21:64:2f:e4:38:d0:44:
         0b:5d:f8:fd:01:e0:50:91:11:f8:ad:ea:25:9b:05:3c:0d:4f:
         e7:74:83:4c:ed:63:a5:7d:19:14:d5:a9:9c:10:0d:fb:03:e5:
         f3:f6:bc:a2:eb:27:ae:8c:33:9a:91:8f:aa:57:0b:5d:99:e9:
         c8:a0:bb:d4:6f:e7:d2:71:0e:22:95:5a:86:b3:38:cd:cd:61:
         6d:bc:3c:7a:a2:3c:a2:b4:87:05:30:b0:8a:2c:8b:20:7c:3f:
         13:4a:90:7e:69:ca:8e:1d:7b:b2:10:df:8c:4e:63:1d:9e:cb:
         5a:b3:92:e2:33:99:06:54:b4:32:50:d5:f4:dd:2d:1b:c5:2d:
         21:c0:fa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:39:27 2026 by rpki-client