Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File:                     bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier:          jtzc+m/wo0O1HsODq/FzJa53uQSE9KyWy6EaUrMM26w=
Subject key identifier:   E6:28:F1:EF:30:45:B8:DF:AC:F7:BA:06:02:EB:03:F2:3B:49:5D:5A
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer:       /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial:       01A117868069F6D5912574D30A2CB39EA00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number:          0E9D
Signing time:             Wed 07 Oct 2026 18:00:52 +0000
Manifest this update:     Wed 07 Oct 2026 18:00:52 +0000
Manifest next update:     Thu 08 Oct 2026 18:00:52 +0000
Files and hashes:         1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: rJZEAr+Naxij63sxuKgMl46dk3GKJE0X8YWhPXD30jA=)
                          2: xedQc8k1ZNFjpdsXA6TYOm-QwAo.roa (hash: 4/kRGVQh8aCzWxXk3+Kdjd95nYFMZaC5eRjEmyP9N4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:86:80:69:f6:d5:91:25:74:d3:0a:2c:b3:9e:a0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
        Validity
            Not Before: Oct  7 18:00:52 2026 GMT
            Not After : Oct  8 18:00:52 2026 GMT
        Subject: CN=e628f1ef3045b8dfacf7ba0602eb03f23b495d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:a5:08:89:a1:9c:66:00:bc:29:b4:ee:81:
                    97:d1:72:d2:94:d4:df:27:87:72:42:39:d2:04:18:
                    6a:76:5a:8a:07:aa:47:5b:9b:8b:38:ee:ad:4e:be:
                    d5:c4:eb:72:56:0b:13:42:04:67:09:c3:3d:3d:f6:
                    01:25:df:70:be:cc:b8:a4:61:15:25:6d:7e:32:2b:
                    c5:4b:d4:80:fc:2a:3f:92:7f:16:da:47:09:bb:2f:
                    f3:01:b4:45:4f:3f:c3:c6:b4:23:fe:c3:a2:20:58:
                    b5:02:87:78:9d:37:40:e3:17:76:48:e5:90:ef:73:
                    eb:26:4e:dd:65:a9:fe:76:01:93:a6:a3:b4:31:b1:
                    1a:3c:74:f2:4f:4d:14:ad:47:26:db:85:cb:f9:47:
                    8c:a5:aa:7f:2b:67:f5:60:22:49:3a:d8:c1:20:3f:
                    ac:e4:bb:f3:e4:50:94:c7:9c:a3:45:7c:1b:48:67:
                    c8:67:45:1d:f4:58:02:06:3c:df:a7:e5:f1:9f:e7:
                    76:83:a0:20:e3:10:7a:2c:ed:38:49:bd:77:95:99:
                    9f:d5:a2:22:89:e3:78:f6:6f:79:73:1e:d1:d1:4c:
                    6b:d3:ed:29:f5:9d:ba:83:fb:7c:b0:29:44:9a:c8:
                    cc:ed:2f:ef:c8:9d:c3:13:6b:b1:82:48:22:f4:1c:
                    e8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:28:F1:EF:30:45:B8:DF:AC:F7:BA:06:02:EB:03:F2:3B:49:5D:5A
            X509v3 Authority Key Identifier:
                keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:50:61:62:ba:db:2d:58:3e:41:28:df:f3:c9:90:91:e6:1a:
         a1:8f:11:ad:b5:ac:48:ad:0b:50:42:9c:ad:27:c8:fb:c2:b0:
         28:7a:ad:f1:da:5e:30:e3:71:b5:4a:f3:d0:9d:91:cf:a1:7f:
         82:3b:94:b1:8b:b8:4c:c0:76:46:35:0e:b1:ea:49:d7:ae:dc:
         9a:93:29:20:de:81:73:f2:bc:c4:c7:03:a0:bd:fd:9f:fa:77:
         13:d2:86:60:5b:2d:20:85:01:df:e4:22:55:55:a1:df:69:ed:
         f5:65:fb:95:21:62:4b:4f:a8:28:46:ed:44:54:28:9d:f5:1f:
         35:bd:9c:ec:64:f5:00:4b:cd:e4:0f:5c:6e:62:0a:17:c5:5c:
         3a:f9:3e:50:60:9d:1e:87:c0:e3:5b:c0:95:c7:fa:99:71:66:
         a1:7a:02:b3:ee:8f:6d:52:2e:60:17:5e:26:1b:10:db:e9:3a:
         64:37:55:c9:43:de:36:c1:f7:05:2d:b3:9f:a1:a4:de:e1:b8:
         2d:7a:a7:39:40:8f:35:3f:2e:86:06:d1:7a:15:8d:93:54:55:
         f5:04:8d:6c:3e:37:fe:3f:7a:ed:85:6a:dd:80:03:0a:86:45:
         33:56:15:a8:28:be:93:af:ac:42:46:33:93:ad:53:c2:a4:f4:
         c3:e7:99:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:57:18 2026 by rpki-client