Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File:                     BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier:          KFoQfkV8wBlI5h+OSlN4Pp/fC2Z/OmhYSuVMzygPSoI=
Subject key identifier:   86:5C:FA:F7:FC:2F:01:1F:A3:E3:F7:25:E9:D0:B6:B4:F0:52:9E:C0
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer:       /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial:       01A0C7B355E122B9016426D65F20E75E11C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number:          0EB6
Signing time:             Tue 22 Sep 2026 06:00:13 +0000
Manifest this update:     Tue 22 Sep 2026 06:00:13 +0000
Manifest next update:     Wed 23 Sep 2026 06:00:13 +0000
Files and hashes:         1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: 38A8W/PE4wUvOS3r2b8OIJIblo/rwYjRE9Wopp3IHeU=)
                          2: amJeDHvWP-ETK0yoiLHExz0KUe8.roa (hash: IcQUFfwFSyhIeatkmu2G3INzW+CZRcCSClFDDAMk4m4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:b3:55:e1:22:b9:01:64:26:d6:5f:20:e7:5e:11:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
        Validity
            Not Before: Sep 22 06:00:13 2026 GMT
            Not After : Sep 23 06:00:13 2026 GMT
        Subject: CN=865cfaf7fc2f011fa3e3f725e9d0b6b4f0529ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:72:11:b8:e3:35:87:47:92:74:4a:7d:50:5c:
                    40:9a:ff:ae:33:23:ec:c7:7c:0d:8d:b0:09:42:90:
                    03:bf:c5:c3:16:fd:6f:5e:e0:57:7b:90:79:15:57:
                    0f:2b:aa:c4:29:46:b5:81:8c:fd:2f:2e:c7:b7:42:
                    7c:68:d3:e9:01:76:c1:34:be:e1:33:6b:2a:2c:23:
                    b4:42:a6:70:9f:3c:12:bf:0b:83:97:d1:30:d9:cd:
                    a4:bd:3e:ca:fe:15:55:63:45:b0:55:02:39:40:5e:
                    0d:8c:50:1c:79:72:6f:50:ff:32:32:79:66:c6:25:
                    70:71:4b:c6:ba:e7:57:5d:5b:39:aa:ff:b0:f7:fa:
                    a7:f6:6d:67:bd:d7:45:af:dc:25:ee:30:65:cc:b5:
                    2f:c0:bf:9b:ec:55:ce:fb:c5:9e:6b:8f:c9:24:3b:
                    4b:7f:0f:20:84:95:4a:1a:06:72:74:e9:1c:b9:05:
                    65:cf:cd:c5:38:c6:f7:90:f8:02:f3:46:7a:77:25:
                    8d:22:91:87:28:62:d6:13:f2:8f:da:a8:29:c1:bc:
                    cb:f1:ec:1d:70:a5:2b:a5:ae:50:9e:73:1e:c9:d2:
                    11:33:e7:0c:01:b0:10:cd:c8:83:4b:f7:32:02:d3:
                    4e:37:a7:76:80:5b:da:0d:d2:74:e6:f7:ea:28:18:
                    b8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5C:FA:F7:FC:2F:01:1F:A3:E3:F7:25:E9:D0:B6:B4:F0:52:9E:C0
            X509v3 Authority Key Identifier:
                keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:cb:ab:9d:ee:6c:30:27:5c:0d:bb:80:f6:82:d4:da:37:e1:
         b7:a5:b6:94:a8:f4:38:e7:b4:e8:90:b3:a6:60:ba:f0:05:bd:
         9f:42:37:51:48:2e:5f:5a:2f:f0:db:6d:64:74:9a:fe:10:c9:
         e0:a3:71:f1:1f:ff:61:be:d7:55:d2:f6:27:5b:ef:54:99:b1:
         39:92:d6:8d:6c:fc:65:5e:5f:aa:a3:a7:1d:7d:0a:30:38:5b:
         0d:92:70:72:80:f5:39:9a:43:76:b6:ed:da:d6:44:e8:1a:9c:
         f7:17:5d:a7:1f:d5:5b:5d:04:99:cf:8c:93:f4:fa:6a:74:4a:
         30:4d:63:93:40:e9:64:83:e2:6f:cd:6f:2a:f1:26:62:f3:08:
         f8:f5:74:fc:14:42:da:c0:a1:b4:4a:8c:bb:d0:b6:56:49:bf:
         08:36:8c:3f:50:a3:9e:21:1b:dc:6d:eb:27:28:8e:17:dc:f9:
         1b:f1:fd:8f:02:4f:96:c9:34:c7:7f:e2:65:c7:eb:5d:43:74:
         92:aa:56:6b:e2:79:2e:a6:bb:2f:6e:77:cd:09:9b:26:97:60:
         7d:b3:d3:61:59:b7:f0:09:38:55:46:c9:ab:db:7f:06:66:8e:
         13:6b:70:bb:28:a4:dc:99:b1:64:f1:b2:89:f3:1c:d3:a6:ad:
         24:6c:23:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:48:36 2026 by rpki-client