Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File:                     BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier:          sqTrW5gro5o0HZYOobixMAHNKvqPFy9T4WtVU0XKYcc=
Subject key identifier:   0C:94:60:12:5E:50:B8:D5:0C:BD:52:01:7A:06:9E:F0:A8:D3:B5:38
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer:       /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial:       01A0D4262741ED9A007B454CAAAFF79DBACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number:          198C
Signing time:             Thu 24 Sep 2026 16:01:05 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:05 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:05 +0000
Files and hashes:         1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: RDEG/IQOX6XgS8ZAPe1/hZYWBTgn1l+2a9k902gDvF8=)
                          2: qh-sD6kOkExAEQOZYjnoqxx9DpY.roa (hash: 5t8eLCXvC3atBWqULd/nurDvBUxx1v91TFam4vLNrJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:27:41:ed:9a:00:7b:45:4c:aa:af:f7:9d:ba:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
        Validity
            Not Before: Sep 24 16:01:05 2026 GMT
            Not After : Sep 25 16:01:05 2026 GMT
        Subject: CN=0c9460125e50b8d50cbd52017a069ef0a8d3b538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:77:ef:b0:36:a9:e0:7f:2b:8b:44:15:94:
                    c4:47:a4:88:47:b0:cf:30:82:c8:56:e5:5d:53:fb:
                    2b:1d:c5:60:c9:42:25:1e:50:a3:3d:8b:80:9b:42:
                    ab:92:0f:23:ba:1f:5d:4f:00:a5:4c:e3:2a:42:f2:
                    02:ed:3b:5f:88:98:bd:4d:4f:7a:85:97:eb:96:51:
                    8f:95:3c:31:23:43:99:b2:7b:27:ce:4d:3d:25:d1:
                    2b:d2:d1:95:c4:99:8e:7c:34:dd:e1:46:1e:67:01:
                    3a:69:07:d9:e6:6c:24:0f:4b:d2:6e:3c:ec:26:b0:
                    1f:a4:6e:fe:94:fc:fe:52:84:33:ac:ab:e2:d1:c2:
                    0e:cc:6a:3a:bf:c5:63:b1:68:10:66:d2:6c:be:5a:
                    07:50:a8:36:7d:ad:87:33:7b:5c:44:fa:a2:3f:07:
                    0c:ff:70:51:a9:00:ca:dd:55:ae:ff:22:26:0d:dc:
                    2f:44:5a:09:f7:84:24:cf:53:40:76:6f:c7:2f:9a:
                    c4:db:15:ae:5e:0e:31:3b:6a:29:0e:69:0b:6e:fc:
                    89:f6:cc:9d:08:75:f9:0a:d9:3c:8f:26:9f:d4:d6:
                    e0:6e:86:e1:65:3b:e3:0a:74:83:49:fd:d6:9d:91:
                    46:a7:88:dd:0f:bd:f5:06:48:b6:de:a5:d8:eb:06:
                    4c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:94:60:12:5E:50:B8:D5:0C:BD:52:01:7A:06:9E:F0:A8:D3:B5:38
            X509v3 Authority Key Identifier:
                keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f5:61:ed:6a:4a:13:58:20:66:98:c9:bc:08:77:6b:7f:32:
         24:a1:69:bf:52:2d:38:62:56:41:10:7e:c6:ec:1a:36:d4:d1:
         77:a5:df:6a:d1:bb:3b:2e:7b:71:7a:e0:a1:a4:af:86:cd:55:
         09:8b:12:37:1c:8a:1e:61:04:21:33:6e:89:49:f9:d4:b5:8d:
         1e:a6:a1:9a:29:4d:81:ab:70:c8:c3:19:eb:33:f1:d3:e8:96:
         2e:a7:36:3b:fa:30:d5:7e:1a:05:8a:35:f8:b7:15:a3:79:61:
         dc:72:e2:ce:3b:39:71:56:ab:de:e5:2f:c9:60:d6:81:00:12:
         34:05:62:e1:43:99:c4:af:7e:dc:77:64:76:57:44:07:90:68:
         70:e8:d2:3a:60:ef:e6:d9:40:fd:70:17:ba:7a:40:73:3a:ac:
         62:3e:87:34:cc:64:20:78:4d:9b:fd:6a:c0:c4:cc:ae:96:3d:
         48:8c:00:2f:19:a9:1b:99:57:f4:49:02:45:80:d5:c9:f8:41:
         44:a2:6b:95:cd:1e:7a:a5:93:65:3a:ca:36:79:c9:ee:df:b5:
         0b:40:98:37:93:e1:5c:0f:38:78:b3:f8:2b:9f:ba:9e:27:5a:
         a4:0a:d8:18:a8:68:a5:f8:05:50:fb:5d:26:5a:5a:ec:cc:16:
         ac:70:b4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:02:54 2026 by rpki-client