Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          xr+2xympriT4m5RYqeAHKoWvmquSu2uMww/30vvlad4=
Subject key identifier:   23:F3:5E:68:7C:A2:51:5D:0E:A8:27:4D:4A:70:55:28:3E:72:ED:C2
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       01A1DF8337A0AA437C0D3B94AF4F3E20E006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          1B02
Signing time:             Sun 15 Nov 2026 14:01:20 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:20 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:20 +0000
Files and hashes:         1: 291-znFSQvct2BZwzfK1cwLcwAw.roa (hash: /XCFd3ag+0mbQwm0eGd/JPuEd+El4o/QFrmk6+RphE0=)
                          2: 9MUFr_RsFRsCcEg9M0GmDZmsGGA.roa (hash: EvKHDQxBQtqNQYihgVJcZyfTiv7kA1w7YuXBnwu1TSA=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: GNjyk8hMa0LB9X8LNWXIQ/BrDXRmjnVSVFW00ndNE1I=)
                          4: VLzwNJkeBJU6voipR2ycpH_SyW0.roa (hash: WYZWxhBI2BwoiqzCW6Bmxom122HZzf1lwYvT1+rEwEw=)
                          5: iL8SJgTfFm_DO4zngs_BfrPS1jM.roa (hash: BsRqnxPV5ByC/K//Fbo6jM4xfMeMokNBdVnHMfCc3jQ=)
                          6: v6nfH0wLxZxAHbdZRaS-4fG1PGE.roa (hash: cr0KXwFavQXu/IQfCxnN6TBOG1I9t2JoVvFAl5yC74k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:37:a0:aa:43:7c:0d:3b:94:af:4f:3e:20:e0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Nov 15 14:01:20 2026 GMT
            Not After : Nov 16 14:01:20 2026 GMT
        Subject: CN=23f35e687ca2515d0ea8274d4a7055283e72edc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:48:41:a5:14:da:21:77:6c:1e:62:54:67:
                    c0:83:eb:e9:7f:1d:e5:d0:ed:3b:e6:d2:f2:78:b1:
                    bd:2d:3a:2e:06:c0:1c:39:88:eb:e4:ed:b8:bd:6b:
                    2b:82:ad:44:8c:43:54:04:92:59:af:2a:87:0a:87:
                    7c:15:75:dd:33:27:88:e2:e6:c0:cd:b4:55:a5:68:
                    9b:ad:c0:7f:59:9a:53:09:b4:b4:8b:6d:dc:10:3f:
                    ab:50:76:2b:29:3a:3c:74:6a:9e:6a:b0:19:e3:91:
                    2c:44:de:0d:b0:70:2b:40:61:a0:4b:20:ab:07:91:
                    7d:f6:bb:45:81:9e:44:4d:0a:92:8d:2e:20:b2:09:
                    b1:26:bc:d8:6b:87:4b:85:5e:c7:cd:18:a3:bb:8b:
                    b9:fc:b5:05:ff:da:75:8c:ef:14:8c:a7:58:6c:f7:
                    34:68:08:d5:d9:37:a3:c8:78:06:0b:22:f9:df:17:
                    b2:61:40:1c:73:83:26:9e:ba:7b:a0:39:44:d8:4f:
                    12:75:7e:8e:ba:3d:43:1b:11:87:95:94:c4:71:31:
                    05:0d:fa:a7:87:90:74:a2:97:f2:71:6f:36:47:45:
                    0b:73:6c:59:88:cc:7e:90:d6:59:0f:54:74:0a:4f:
                    7d:68:ec:44:ed:d0:f3:ba:1d:a4:89:43:da:5b:ac:
                    a7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F3:5E:68:7C:A2:51:5D:0E:A8:27:4D:4A:70:55:28:3E:72:ED:C2
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8f:ff:dc:ea:45:23:76:d6:22:f2:be:c7:59:d1:95:b4:b8:
         ef:d9:b2:7a:f5:7b:f2:11:f7:4c:79:61:e2:0e:59:6d:18:fd:
         bb:ff:48:6d:b6:ca:3c:d0:c0:c1:2e:0e:d0:6e:fe:d5:cd:48:
         d0:29:bc:64:9e:eb:86:51:9a:b6:52:6a:4c:22:c5:b9:2e:f9:
         34:45:d0:d2:2b:82:bf:a7:53:b8:38:b0:94:3e:b9:88:df:0f:
         e3:a8:1d:e3:fc:54:8b:4e:37:9f:e7:9f:e3:4b:dc:f2:cb:a6:
         0e:fe:61:fa:c3:5b:7e:f8:01:2d:fc:13:03:67:ca:c1:2f:1a:
         7c:92:30:81:76:22:2e:6d:b7:83:1f:5d:bb:6f:2e:25:89:20:
         68:97:ad:6c:70:27:47:cc:47:17:22:94:09:a1:52:25:a0:c3:
         10:c0:f6:47:36:8a:66:62:db:0a:f8:b5:93:5e:ee:68:1e:f9:
         b0:31:32:ef:4b:2e:4f:93:38:0b:28:6f:74:b5:6d:0d:a7:0d:
         b7:17:da:cd:86:a0:8a:f3:c9:2c:f5:2c:a1:c6:12:f7:d4:a4:
         41:c6:d4:18:e9:8a:2e:8d:40:de:fe:75:89:6c:a3:13:dd:a5:
         10:94:82:2c:30:01:34:5f:44:bd:0a:97:99:16:ff:4e:e9:ce:
         15:51:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:58:52 2026 by rpki-client