Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
File:                     bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json)
Hash identifier:          CuLkyvP1qPIR8XQS4KlgUa7tDqEZR2kc/WQRgmMGRuU=
Subject key identifier:   F2:C3:78:98:2B:CB:C3:FC:0A:EF:35:8D:17:97:9F:C9:B9:87:1A:7D
Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
Certificate issuer:       /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Certificate serial:       01A0C1E8757E4EC53D6612A92DC655FDAFD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
Manifest number:          0BFA
Signing time:             Mon 21 Sep 2026 03:00:31 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:31 +0000
Manifest next update:     Tue 22 Sep 2026 03:00:31 +0000
Files and hashes:         1: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: yCCNCPd+mDKvwCF3x3JLAviS4qq/6aPIMuVbq0EdpPk=)
                          2: e1omXpCIQpnerGyCBf44XvMH7b8.roa (hash: WuuVal2MbC5TVrn+qWtOZo1dB1Kr34wJojmJ2NY5UPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:e8:75:7e:4e:c5:3d:66:12:a9:2d:c6:55:fd:af:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
        Validity
            Not Before: Sep 21 03:00:31 2026 GMT
            Not After : Sep 22 03:00:31 2026 GMT
        Subject: CN=f2c378982bcbc3fc0aef358d17979fc9b9871a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:d3:b4:86:c7:1a:fc:5a:36:86:62:df:11:
                    fa:f0:b1:7a:50:7c:2d:97:3a:88:87:29:60:c9:1a:
                    0a:f6:28:ae:b4:f6:ed:9b:89:c7:c1:8b:23:14:0b:
                    7a:09:45:d9:6d:71:40:f0:04:be:29:24:2b:7d:db:
                    14:04:ca:db:f7:f9:6d:d8:df:f3:8d:75:ea:f6:6d:
                    c7:47:d7:49:29:9d:6d:09:b0:b0:65:b9:eb:4e:fe:
                    fc:52:0a:3c:af:33:d4:40:a5:d7:8f:6c:b1:70:4a:
                    0b:1d:08:38:c5:dc:d4:0a:78:0b:ee:a0:78:d8:aa:
                    56:11:1a:ca:eb:c3:11:eb:46:02:ed:9c:43:18:a4:
                    f4:10:07:96:67:33:fd:d7:d4:00:00:eb:ea:cd:78:
                    92:2a:ef:d6:28:77:3d:b6:d0:8b:66:83:07:e6:37:
                    93:fa:72:4c:f2:11:85:de:0e:00:98:36:ea:8e:c5:
                    8b:c0:9c:7e:96:6f:71:16:ff:3c:b9:2b:c3:7c:37:
                    50:20:9d:fd:6e:67:78:75:08:8d:bf:c6:ec:a8:6d:
                    2c:27:2b:5e:b2:84:2b:69:67:4f:7d:f0:f1:57:a3:
                    dd:7f:2d:4c:fe:63:89:dd:e6:3f:6e:3e:ba:eb:2b:
                    64:6e:c1:7c:9c:95:80:63:c8:a1:bd:2e:9b:08:9a:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C3:78:98:2B:CB:C3:FC:0A:EF:35:8D:17:97:9F:C9:B9:87:1A:7D
            X509v3 Authority Key Identifier:
                keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0e:ff:4b:a1:58:86:87:8e:43:40:79:8a:59:f2:28:c7:07:
         4f:b7:52:f9:bf:ff:06:87:88:18:72:15:07:51:b4:e7:7f:4c:
         3f:11:c9:d8:32:00:8e:cf:eb:a3:3b:31:5b:c4:a0:5e:31:61:
         d9:48:29:fc:af:5b:71:85:72:ab:53:5c:ce:c3:67:8b:73:e1:
         f3:a0:92:3c:40:fa:4c:b2:0f:ca:80:4d:b4:2b:44:e7:47:fd:
         2f:d7:07:b0:31:0f:84:f3:fc:20:f5:26:ed:9e:a7:b3:07:ac:
         f2:d1:89:ec:d1:6d:66:b6:df:da:da:05:36:b4:fd:32:0f:2c:
         1f:25:11:3d:4f:5c:8e:77:8a:4f:d7:27:d6:5d:7a:3a:7d:cd:
         63:08:25:61:36:4c:7a:22:5b:e6:db:98:5a:fb:a4:87:e9:9b:
         f1:c2:06:a8:e1:4a:b6:d9:91:a3:25:e5:72:f5:a8:62:62:4f:
         65:c7:1c:31:9b:7d:83:c7:71:d2:f8:ba:a3:ad:41:e9:d4:90:
         41:fa:ae:c2:19:e9:10:55:76:b0:b3:98:10:f8:57:58:10:89:
         f0:3a:83:f2:be:f3:a0:01:7a:ab:7d:5e:3f:8c:d7:27:b4:f9:
         92:8e:1c:27:0f:9b:8a:ee:f2:34:7f:d5:2d:8b:fa:2e:f9:2b:
         fd:a6:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:21:49 2026 by rpki-client