Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File:                     Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier:          WHwiddikTCZyBXiW6/eyi9NMNBr8FSmhw+m4Bqbb3B8=
Subject key identifier:   77:6C:89:05:C7:B2:82:FA:7C:FE:B3:55:56:42:A4:9C:DB:EB:FA:14
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer:       /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial:       01A0CB59A7E17884F303E0AF9D3D294DDD9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number:          1A68
Signing time:             Tue 22 Sep 2026 23:00:45 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:45 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:45 +0000
Files and hashes:         1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: Md2v6lbrNw1xHbsfYUxP3m3rskio/N7nAuuVQ243tqc=)
                          2: E7v6hMZAYWaHkRlbGtOj9vSPgCU.roa (hash: MiOCqZqr88ikQyLtncklUrXjnwaAx3E5tXyKQ8CA/ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:a7:e1:78:84:f3:03:e0:af:9d:3d:29:4d:dd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
        Validity
            Not Before: Sep 22 23:00:45 2026 GMT
            Not After : Sep 23 23:00:45 2026 GMT
        Subject: CN=776c8905c7b282fa7cfeb3555642a49cdbebfa14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:47:fe:02:47:56:21:44:83:0b:2f:d5:49:
                    27:f9:06:7a:95:e4:55:4c:25:57:04:c9:87:b1:35:
                    5e:f0:c1:53:85:f2:f4:20:84:3c:b8:80:61:78:e8:
                    b4:56:f3:7a:22:f9:79:eb:b2:73:a8:26:01:9e:fe:
                    a9:58:83:ff:ea:24:43:62:46:85:04:dd:bc:35:84:
                    45:ad:da:9d:20:eb:0b:ab:b9:dc:d0:fa:92:33:58:
                    fe:64:48:3d:61:78:1f:ca:68:fa:64:70:bf:ce:2e:
                    3f:ee:12:75:22:97:f3:44:1e:ea:9b:88:ae:24:fe:
                    1b:34:a2:63:42:2c:cd:07:cc:81:ea:52:c6:e6:b5:
                    a9:6c:9a:ba:b2:3e:76:d2:27:de:43:f5:12:ae:3a:
                    75:86:07:a8:e0:58:46:0b:2d:96:fb:79:b8:c3:92:
                    31:70:fc:4f:0f:ff:47:16:6f:d5:60:06:c7:44:e0:
                    5c:21:a0:14:ab:9f:ba:f1:85:3c:49:64:07:8f:8b:
                    67:56:99:f8:3c:c7:40:95:a8:ea:73:ad:a7:ea:d9:
                    c9:6e:02:80:c7:56:a0:67:e7:1c:1b:23:c7:97:fa:
                    25:5f:f3:9d:f0:8a:a7:75:68:fe:63:7f:da:e3:4a:
                    b1:aa:9f:22:2b:b5:26:7b:78:7a:25:7e:53:48:a2:
                    b6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6C:89:05:C7:B2:82:FA:7C:FE:B3:55:56:42:A4:9C:DB:EB:FA:14
            X509v3 Authority Key Identifier:
                keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:de:3d:a9:9b:77:60:7a:e4:9a:e6:aa:9c:3b:b9:49:99:4c:
         e0:7e:4e:77:c7:0c:54:a2:91:af:fa:ff:b4:6d:44:1b:50:a0:
         0f:0f:4a:5a:93:2d:ee:a4:9a:7e:48:3e:11:e0:c6:51:0b:85:
         4b:ec:dc:8d:77:9d:bc:12:f1:1b:43:db:d6:8f:67:41:d0:fa:
         af:0a:45:08:0b:fc:85:68:a5:87:62:d9:e2:17:dd:13:ef:19:
         18:72:4e:3e:87:d0:1c:0c:1f:a8:00:86:07:5c:07:e0:0b:4b:
         f6:7b:5f:12:f7:e9:c0:0b:9a:18:e2:58:ea:27:eb:d8:41:13:
         a6:f4:ba:87:c1:33:35:86:35:3e:9f:29:8b:dd:8d:d0:7c:44:
         b2:82:df:ed:3b:e0:09:42:26:c1:88:d1:b7:6b:58:76:71:05:
         e8:27:54:81:56:54:d1:53:20:33:5c:31:40:d3:14:6f:13:42:
         1e:55:d2:84:0b:f4:af:73:ec:32:7a:4e:89:2b:dc:50:ef:d4:
         19:0b:90:81:88:b5:c6:85:02:c8:34:14:24:33:bb:6d:d6:36:
         c9:10:bb:5c:ad:e8:35:5a:75:50:fb:db:2c:f9:50:3f:b0:4b:
         f0:7a:34:31:05:ab:d2:dc:c6:5b:44:25:b8:bf:6d:76:a8:9d:
         57:cc:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:38:35 2026 by rpki-client