Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File:                     B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier:          tV08mIkBTHYOFzyTa6HSgEJZ+n2+a5GqcoZkrr3Tdk8=
Subject key identifier:   FB:46:FD:9D:42:39:87:15:B7:43:30:6C:26:3B:92:90:3B:91:50:49
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer:       /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial:       01A0E8C125A99DD011BDA06B81A2409E0FEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number:          1A76
Signing time:             Mon 28 Sep 2026 16:02:47 +0000
Manifest this update:     Mon 28 Sep 2026 16:02:47 +0000
Manifest next update:     Tue 29 Sep 2026 16:02:47 +0000
Files and hashes:         1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: 5rdNjMV8HpXzeJqvDM4YlvWbRDAmktjcSZzYh5HIYvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:c1:25:a9:9d:d0:11:bd:a0:6b:81:a2:40:9e:0f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
        Validity
            Not Before: Sep 28 16:02:47 2026 GMT
            Not After : Sep 29 16:02:47 2026 GMT
        Subject: CN=fb46fd9d42398715b743306c263b92903b915049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:5b:25:c8:50:5a:8d:3b:52:91:01:c7:17:
                    04:20:15:df:c1:a0:c1:f7:cd:4b:c7:43:1c:30:87:
                    3e:d8:4d:bb:72:d3:26:8c:26:5d:ee:39:36:e7:12:
                    56:05:eb:c0:81:07:37:bc:50:21:92:bd:ca:fd:12:
                    31:7f:36:78:dc:ab:bc:49:0d:e8:ab:58:20:0f:7e:
                    7f:ae:6a:1b:fd:4b:86:c6:27:08:9b:75:17:01:2e:
                    63:1d:5b:58:7a:e9:0a:86:13:74:4b:86:95:71:7a:
                    02:aa:ef:c1:27:1f:23:40:be:21:43:fa:a8:24:3d:
                    69:5c:32:30:0d:13:9d:45:33:da:f0:a0:75:90:d0:
                    83:58:fa:48:21:ca:95:4f:cf:11:4e:8d:24:ff:1c:
                    54:8d:3c:81:e3:65:cc:1c:12:f7:2d:8b:8b:61:d0:
                    2a:e2:6d:9a:93:04:5d:a9:30:a9:e0:b4:3a:77:a0:
                    81:0f:55:25:63:38:24:52:ab:59:46:a7:1b:2a:fa:
                    73:d3:c8:6f:22:dc:bc:d7:1c:fb:48:e8:56:13:62:
                    a7:40:c9:7c:8e:a6:ad:f2:d3:4f:10:64:7d:a7:a0:
                    19:4d:1c:37:37:0c:d0:af:f9:aa:02:09:d6:b0:9c:
                    a9:94:8d:d6:a0:91:21:77:b7:a6:21:f5:cd:1e:71:
                    ba:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:46:FD:9D:42:39:87:15:B7:43:30:6C:26:3B:92:90:3B:91:50:49
            X509v3 Authority Key Identifier:
                keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:58:e2:b1:b6:7a:26:31:42:9b:48:d6:c8:af:e7:8f:64:b8:
         23:67:3f:28:17:e3:75:f2:36:58:1c:ff:42:17:a6:b1:5b:af:
         54:19:7c:e3:ed:fd:bb:19:42:69:ca:50:96:24:7c:70:58:e5:
         f1:44:b0:4b:90:79:0f:d1:34:fa:27:31:2f:c1:dc:0f:fa:f6:
         cc:90:e1:dc:91:a4:e0:a5:80:22:49:95:0c:d6:63:1b:73:e4:
         8b:e1:c3:7a:b5:2d:ad:31:df:93:54:dd:e3:98:e5:54:4f:af:
         49:22:06:01:19:51:c8:a8:d0:1c:d3:3a:e6:13:9d:19:63:63:
         b8:5e:62:ca:b8:47:8f:ad:3c:bf:6e:69:8d:a4:de:96:3e:5c:
         1d:c5:ec:16:21:05:52:f2:4b:c2:90:f0:8e:9d:c2:bd:3a:e0:
         9c:ae:53:1e:3a:79:ec:42:2e:7e:58:5b:ac:21:02:d6:5b:c1:
         2d:2b:7a:a2:68:cc:8e:32:44:85:31:63:d4:35:39:e6:5a:c9:
         12:e4:df:99:eb:83:bf:2c:80:52:8c:7f:b0:9b:1d:21:0f:c7:
         f0:f4:55:5a:5f:ac:12:98:83:ea:c5:87:95:8e:4b:fb:4d:1a:
         77:36:aa:23:86:9c:6a:f2:ba:32:ce:30:6e:13:60:08:d2:4c:
         d4:52:bf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:40:27 2026 by rpki-client