Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File:                     B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier:          Hc+G+tGumNPpvjJwHkbPy+sNYU3G+mt6VpPYDRIrNqM=
Subject key identifier:   90:CD:C4:F8:51:C2:1E:27:33:05:F1:48:9D:49:D4:CB:1A:C6:0D:CB
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer:       /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial:       01A0CD117E3B169D8509E5D278726A2DCA7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number:          0BC5
Signing time:             Wed 23 Sep 2026 07:01:10 +0000
Manifest this update:     Wed 23 Sep 2026 07:01:10 +0000
Manifest next update:     Thu 24 Sep 2026 07:01:10 +0000
Files and hashes:         1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: xQChfrvs6gt3GF0AhmMlRyxBKW4VH152Gj/zAhwGOUQ=)
                          2: wPl7ynnI5jX4tx7pSw6wN-FRjIs.roa (hash: Wc0jszL4Hb97uhnMz/zMSryxca7jN11EVHOmQGyZa3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:11:7e:3b:16:9d:85:09:e5:d2:78:72:6a:2d:ca:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
        Validity
            Not Before: Sep 23 07:01:10 2026 GMT
            Not After : Sep 24 07:01:10 2026 GMT
        Subject: CN=90cdc4f851c21e273305f1489d49d4cb1ac60dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:5b:9b:64:bd:1e:71:a1:8c:e8:8b:5d:21:
                    70:5f:7e:d2:76:c3:e1:e8:42:e7:6a:6f:3d:1d:65:
                    7a:21:0a:fd:17:e1:34:1c:3c:76:a3:ea:19:24:47:
                    ce:fc:26:90:e8:19:3e:b8:b0:14:68:83:bd:a1:14:
                    0a:a3:4e:f4:50:07:3e:82:65:bc:38:ec:9e:00:75:
                    48:60:b6:28:88:9c:94:6b:df:09:5e:46:f9:52:97:
                    3e:82:4a:e9:2b:d9:ac:05:48:25:fb:13:43:96:37:
                    7b:16:80:f7:e0:f2:b4:69:cb:13:d4:14:2d:58:6c:
                    28:b8:e4:8b:67:e6:b0:9e:4b:b9:f4:79:e3:82:44:
                    b2:4d:44:c4:76:84:05:aa:4a:c2:b6:3f:c2:07:9d:
                    8f:1e:45:90:d1:3d:31:b7:79:53:b6:90:13:74:78:
                    3b:81:fe:61:df:02:1c:86:2e:84:65:37:46:2c:42:
                    f3:cc:33:72:06:e7:d3:d7:d7:c0:79:44:4e:69:79:
                    18:af:e0:99:d3:af:04:74:02:73:4f:61:d5:5d:03:
                    84:fa:bc:7c:ad:e4:d9:ae:af:99:4a:69:62:91:6d:
                    24:1f:11:93:d2:5d:a7:05:9f:d8:ad:47:25:9a:52:
                    d0:be:8a:58:75:ce:b1:56:01:34:24:90:a0:4b:17:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CD:C4:F8:51:C2:1E:27:33:05:F1:48:9D:49:D4:CB:1A:C6:0D:CB
            X509v3 Authority Key Identifier:
                keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:72:86:08:2d:38:df:07:28:92:05:4f:b2:21:fa:db:68:
         28:28:72:60:21:7b:77:9a:16:9a:f1:a3:5e:f3:0e:40:55:3a:
         1a:32:a9:bc:b9:ef:1b:04:75:b1:14:2a:ee:b5:bc:a8:a8:ee:
         7d:59:d1:15:c0:f5:a1:c6:4f:92:0e:f2:b0:d1:ee:85:83:f6:
         5c:eb:05:b6:9a:67:ec:e7:23:11:e9:f7:94:94:c4:26:fb:b4:
         f4:9d:fb:3c:89:4b:60:fa:2b:54:18:20:22:69:c3:e7:b9:32:
         18:a7:ad:30:78:96:2f:7c:72:7c:1f:d9:2f:41:dd:62:8e:9e:
         bc:5a:56:3a:bf:04:6c:b3:4a:c6:40:99:9e:ff:4a:b1:77:97:
         ae:be:de:82:ee:77:65:91:77:6e:60:19:c1:74:02:a9:22:7b:
         d0:93:ec:a4:b3:15:30:34:33:ee:4b:a5:76:7d:23:48:13:0e:
         ad:0a:a8:81:51:58:2d:bb:68:34:37:8c:25:25:b3:b1:0f:ce:
         88:3d:80:80:8b:41:c1:2b:76:7e:6b:9c:bd:97:3d:e5:1d:b1:
         41:21:9b:1c:91:be:59:a5:48:72:3f:e7:8e:96:a7:b8:26:60:
         5e:78:ae:62:c6:24:9c:be:05:2d:7e:c9:27:ce:90:8b:b4:cb:
         e2:ae:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:04:09 2026 by rpki-client