Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          Yj4OeNndORAfn1JkM0fOcSUV+w5ozgsR0RUx59aPG+Y=
Subject key identifier:   04:5A:A7:3D:E4:AE:CE:75:5D:13:78:1F:B1:C7:B9:93:B9:96:18:A9
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       01A0CB598A1862BCEE986F880D6E94A634A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          1A71
Signing time:             Tue 22 Sep 2026 23:00:37 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:37 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:37 +0000
Files and hashes:         1: 6MLGeDuttKLHmwjE_YPGG7vZqNI.roa (hash: xpTof2JHX21v/k79XQ8lsV/BL0epT0Yvy5Nz69a9itI=)
                          2: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: /hw4HV3plvnaS1oAlGmHESyyfe2EFLm9SC6O88njGHM=)
                          3: C0RZortvMGTNI8mXSOH2ddVuOLU.roa (hash: 4ELgCPephP8Rm9C0fctLBQQtexf5QESV1+1cQTBIUFw=)
                          4: Z_L2k8DCyYPXTdYIoY3nfdijg64.roa (hash: ivL6lpqNY3Dw4m+rwt+54sqsIUCex6KJIoQEKHYKmZk=)
                          5: mKqPJjGRZ0H6YrO1beoh-YgmSrw.roa (hash: b1Fd2JbvZA0tfjGHdD2N1uDoKNQWOj5U77gTuCVwBwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:8a:18:62:bc:ee:98:6f:88:0d:6e:94:a6:34:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Sep 22 23:00:37 2026 GMT
            Not After : Sep 23 23:00:37 2026 GMT
        Subject: CN=045aa73de4aece755d13781fb1c7b993b99618a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:a2:8f:7f:d3:57:81:1c:71:8b:9e:98:14:
                    47:19:40:f7:b5:01:5e:58:76:e2:72:73:c9:8c:17:
                    f1:63:f2:62:eb:84:de:42:f0:fc:7a:ba:bb:ca:9a:
                    6c:90:f1:fc:eb:84:df:90:f9:15:a0:5c:f2:a9:cb:
                    27:20:80:d3:b9:95:d5:b7:d3:6d:ba:49:21:70:f8:
                    fc:70:6e:4b:4e:97:1a:91:db:c4:b0:9d:45:1c:c3:
                    b9:df:39:b9:8d:5f:ee:56:1b:dd:4d:ba:ba:15:fb:
                    4c:60:8f:49:0e:08:2e:c7:98:3d:7d:51:b5:3c:e6:
                    1c:6e:d4:6f:bf:50:3f:56:36:c4:06:28:7d:b5:ab:
                    38:b7:9f:95:d5:22:55:72:a5:2f:c6:7d:1c:1f:26:
                    dc:f7:77:09:71:4c:00:65:52:eb:c3:45:55:27:30:
                    6b:cc:b7:08:7e:48:37:df:27:61:17:3f:c7:1d:97:
                    f7:43:fe:5c:69:42:f8:b6:6e:10:fd:80:3d:38:22:
                    51:b4:8f:70:0c:69:02:7d:83:94:c2:42:e1:1a:a1:
                    36:28:e6:b0:fb:f0:58:df:45:b7:95:85:f4:fa:63:
                    f7:90:be:2e:c2:0c:66:a9:f2:59:fb:07:01:79:c6:
                    30:00:a8:5d:c4:c0:f9:f6:e1:a3:89:ca:47:99:4f:
                    40:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5A:A7:3D:E4:AE:CE:75:5D:13:78:1F:B1:C7:B9:93:B9:96:18:A9
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:27:b4:9c:ff:5d:75:fc:8c:5b:35:a6:ff:4f:ca:f4:bf:cc:
         55:8e:46:3b:e6:b4:1b:27:d5:37:e7:c8:42:0c:10:54:a0:54:
         bf:6b:d2:90:d9:6a:9e:d0:fd:ac:68:5b:59:49:b9:2e:55:cb:
         a9:26:86:e6:d2:c3:2d:dc:c5:f6:06:12:3d:06:53:5a:c9:a0:
         f6:d1:be:df:0f:b8:47:4e:fe:e6:3d:52:a1:47:59:a8:b4:e1:
         41:11:55:08:a5:a8:5f:e8:04:5b:97:72:c8:76:33:37:a1:2b:
         56:6d:64:c7:b2:6e:29:ae:69:0e:03:55:58:15:65:b5:5a:80:
         d8:af:3b:ba:10:60:3e:60:d9:eb:dd:2c:3f:a7:c2:de:81:69:
         89:e1:72:f5:51:49:00:d7:e9:d0:c9:1f:7c:0b:2e:e0:6f:36:
         96:b3:e2:d7:e7:7c:e6:5f:7c:93:e9:bf:53:c8:7b:c8:df:62:
         2b:05:67:a9:7e:20:81:04:ec:72:c1:53:25:0e:95:d2:aa:20:
         26:0d:cb:25:f0:de:fd:e7:b1:2a:83:ca:65:e2:6b:25:ba:28:
         67:aa:70:3a:39:55:aa:8c:d7:0a:09:97:6b:59:93:49:a4:a9:
         bc:02:c2:ff:80:6e:da:18:a7:30:1e:27:d6:52:aa:da:03:9a:
         e3:5d:b1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:06:31 2026 by rpki-client