Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
File:                     BJt80UY9tia6isf5o9hzPbDdgSQ.mft (raw, json)
Hash identifier:          6k3sbRiUd8xVE0+KfkIMofKs9kX/zDziAJYouyI9JhE=
Subject key identifier:   95:6F:39:4D:EE:6F:84:83:4E:78:C0:5A:A4:6A:3A:1F:99:4E:CB:B8
Authority key identifier: 04:9B:7C:D1:46:3D:B6:26:BA:8A:C7:F9:A3:D8:73:3D:B0:DD:81:24
Certificate issuer:       /CN=049b7cd1463db626ba8ac7f9a3d8733db0dd8124
Certificate serial:       01A15176D6E194D44EEC3A651676F747226B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
Manifest number:          0128
Signing time:             Mon 19 Oct 2026 00:01:44 +0000
Manifest this update:     Mon 19 Oct 2026 00:01:44 +0000
Manifest next update:     Tue 20 Oct 2026 00:01:44 +0000
Files and hashes:         1: 2P7SaJMcXsPyw8VXwK7lvJ92E84.roa (hash: De3uii83QPlU8l4wx/dhaSH5u2nnOc8fYmv6y+0gSd4=)
                          2: BJt80UY9tia6isf5o9hzPbDdgSQ.crl (hash: kLWJFXaL3x5wy516vcb6C0aco3rhyWXvPBbrqKUOXLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:76:d6:e1:94:d4:4e:ec:3a:65:16:76:f7:47:22:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049b7cd1463db626ba8ac7f9a3d8733db0dd8124
        Validity
            Not Before: Oct 19 00:01:44 2026 GMT
            Not After : Oct 20 00:01:44 2026 GMT
        Subject: CN=956f394dee6f84834e78c05aa46a3a1f994ecbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f8:5e:49:b1:5d:55:8a:68:dc:ce:21:a2:13:
                    1c:af:37:57:ad:f4:63:ec:1f:e2:ce:b1:7e:78:d6:
                    5a:a2:d0:da:48:74:82:ce:f6:db:44:a0:b5:cf:68:
                    9c:6f:70:1f:3f:42:1b:89:80:5f:03:84:a2:29:fb:
                    00:39:43:15:2d:5b:a5:7c:40:4e:59:12:06:ff:f6:
                    3b:19:fa:34:c5:1d:22:1e:4e:c5:60:4f:8b:21:55:
                    48:d5:32:5f:8d:70:6f:db:52:f3:5a:00:e6:d8:09:
                    5f:76:1b:df:2d:eb:27:70:8f:85:ba:96:89:8a:8e:
                    7e:4d:0d:bc:92:db:23:e9:f8:bf:52:92:1c:ea:71:
                    94:93:ac:1f:ed:6c:5c:e2:ad:a5:3d:0b:9d:0b:88:
                    cf:a1:a6:c3:26:f8:bf:cb:d1:63:ff:8f:c2:4b:a4:
                    05:f7:21:19:c4:3d:5a:64:56:b2:16:37:ad:6f:3b:
                    3a:df:50:fc:10:c0:c5:6a:fd:ac:e5:95:48:c3:b4:
                    91:33:f9:ef:f6:61:19:a5:f5:31:26:96:be:7a:a0:
                    4d:43:44:17:74:01:d0:52:60:98:10:35:b5:41:75:
                    cf:33:69:eb:45:1b:41:42:a5:49:b8:c8:62:39:5b:
                    dc:92:da:64:cc:30:95:f7:3f:0a:b8:ac:5c:d0:be:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6F:39:4D:EE:6F:84:83:4E:78:C0:5A:A4:6A:3A:1F:99:4E:CB:B8
            X509v3 Authority Key Identifier:
                keyid:04:9B:7C:D1:46:3D:B6:26:BA:8A:C7:F9:A3:D8:73:3D:B0:DD:81:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c8:25:5b:c5:19:16:09:00:5b:e2:e5:d8:62:7f:5a:72:9e:
         24:05:fc:07:d4:11:53:74:60:9e:30:f0:82:a5:f2:06:d3:15:
         90:11:3d:14:49:fd:ab:30:7e:03:4e:c4:b8:01:6b:81:9c:b3:
         71:17:83:40:2f:05:b2:49:95:35:32:19:10:fc:cf:9c:5a:20:
         61:36:e7:8b:a4:27:41:df:2c:ea:4a:e0:cc:2a:f7:7a:5f:81:
         89:14:c0:a4:4c:2a:ba:c9:77:4b:ae:90:7c:3d:9d:da:05:8b:
         e2:92:31:86:29:1a:cb:46:85:34:cc:b6:c7:cc:88:f2:ce:30:
         ee:eb:c3:6b:19:d4:71:a8:a5:ee:bd:2b:4a:e1:6c:0e:fd:85:
         81:47:0d:7f:e7:77:3f:8e:d3:67:31:c2:81:2b:9c:c7:75:20:
         bb:f9:58:2d:4b:24:8d:93:e8:c7:af:8b:af:b9:7e:75:d3:9c:
         6b:42:1d:46:22:b6:ed:b3:fe:7d:08:1f:0e:3d:25:af:01:e0:
         16:c1:68:88:1f:d5:e4:43:23:45:db:3b:44:45:c9:7f:f1:42:
         9f:a7:29:89:2e:f1:f1:41:f7:47:63:ae:5b:00:52:a6:f3:a2:
         54:d7:13:34:8d:e4:29:c2:5c:a7:d2:2f:9a:9b:b7:38:da:ac:
         19:14:6a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:06:20 2026 by rpki-client