Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File:                     BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier:          FUBcvlHEWE30iDObiTA6rmdwyjtQNeudqYb1t+mi2jg=
Subject key identifier:   C7:5C:DF:D2:F5:A6:24:F1:6D:8F:DE:41:E0:A4:F8:68:AD:34:A2:10
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer:       /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial:       01A0C8C704B93C50D154E2B36D949A6C8614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number:          19B7
Signing time:             Tue 22 Sep 2026 11:01:21 +0000
Manifest this update:     Tue 22 Sep 2026 11:01:21 +0000
Manifest next update:     Wed 23 Sep 2026 11:01:21 +0000
Files and hashes:         1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: b4BWJJ9h3abjLS13QH/mqUf7/xEJckFsNJZBRpjiiE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:c7:04:b9:3c:50:d1:54:e2:b3:6d:94:9a:6c:86:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
        Validity
            Not Before: Sep 22 11:01:21 2026 GMT
            Not After : Sep 23 11:01:21 2026 GMT
        Subject: CN=c75cdfd2f5a624f16d8fde41e0a4f868ad34a210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bb:bf:d5:a3:56:c2:45:b1:e6:b0:ec:06:9f:
                    e0:32:bd:ce:0a:d5:e0:52:8c:3d:3f:e1:ee:fa:3e:
                    ac:a2:80:dc:e8:bc:e6:b9:35:d5:87:a5:b8:fd:c2:
                    a8:db:4a:e0:4f:f9:36:2e:10:16:fa:07:e4:0a:f9:
                    00:85:5b:28:b2:0a:df:2c:60:0a:b8:06:17:2c:cd:
                    28:68:cb:19:30:9b:e8:d8:c0:4a:35:a0:33:44:ff:
                    18:59:24:05:fb:9f:19:25:e4:a4:b7:39:b3:eb:63:
                    6f:95:d5:80:06:96:38:8a:43:3a:58:46:fa:26:ba:
                    01:68:ba:dc:0c:45:ca:a5:53:f3:e9:f3:81:86:c3:
                    e7:e5:cd:1c:f6:2f:24:9b:42:d7:4a:86:a1:d8:29:
                    2b:d0:a6:36:65:01:f3:5b:f1:62:7e:4c:30:33:10:
                    89:13:f4:fc:9b:3f:ae:9e:9b:f1:e1:f3:95:1f:5d:
                    6d:15:56:d6:c6:2a:54:fa:a9:fe:2f:69:25:90:c0:
                    7a:b6:ef:e5:fb:65:af:e9:20:0a:bf:0c:b4:31:50:
                    90:ed:b2:d7:19:84:7f:12:04:99:ca:6f:d8:e9:c3:
                    5b:29:0c:44:cd:4a:9e:93:a1:a9:a4:b7:47:e0:72:
                    17:1a:2e:42:41:bd:2c:ef:66:9e:77:3f:ac:70:87:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5C:DF:D2:F5:A6:24:F1:6D:8F:DE:41:E0:A4:F8:68:AD:34:A2:10
            X509v3 Authority Key Identifier:
                keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f6:c6:66:2a:59:74:fc:b9:31:88:9d:14:00:00:32:0a:5f:
         81:03:39:1b:07:03:ce:13:f0:86:89:b9:4e:b3:6e:f7:76:b8:
         35:a2:bf:bc:1f:70:0b:89:13:dd:e7:73:0d:7a:58:09:fe:34:
         3d:8b:48:27:23:b5:f3:18:d0:22:c2:15:38:88:41:3d:3c:21:
         3b:38:3d:55:03:9d:a9:00:47:c2:36:a4:f5:fa:b3:53:a8:a1:
         fb:dd:25:85:9e:b9:9b:71:11:1f:c5:7e:d4:26:91:ec:b4:38:
         b6:8d:d4:e1:68:5f:af:03:78:71:ed:fa:95:14:00:fb:7d:d2:
         c3:a2:89:86:e0:ae:b0:e3:29:13:bc:0c:6c:1a:9e:ab:0e:61:
         bc:5b:65:d0:d0:2f:ce:98:45:80:d5:7c:b2:a8:4c:11:65:94:
         5a:73:13:fd:7c:d2:1d:d4:eb:d5:8f:6c:81:ba:f0:6c:0e:6e:
         41:f9:24:93:9c:1b:e8:12:10:b5:00:0b:26:79:08:82:0a:ea:
         03:2a:d3:1b:87:3e:ef:03:6b:2b:fa:f4:eb:44:fb:24:e9:ac:
         ca:aa:82:14:20:a2:3d:bb:15:5f:95:78:ad:00:14:79:46:02:
         b4:91:13:cd:ff:e7:a1:75:f6:ea:5a:e8:7f:a9:cf:86:51:51:
         7b:35:0a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:22:44 2026 by rpki-client