Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
File:                     BJt80UY9tia6isf5o9hzPbDdgSQ.mft (raw, json)
Hash identifier:          5UX8UA0fE7tXogvOXVcOwA4A67pBwVsG7Ex9l4BCze4=
Subject key identifier:   A4:E6:F1:3E:C6:01:37:C8:45:61:F9:39:A2:9B:88:7A:A6:F5:99:0E
Authority key identifier: 04:9B:7C:D1:46:3D:B6:26:BA:8A:C7:F9:A3:D8:73:3D:B0:DD:81:24
Certificate issuer:       /CN=049b7cd1463db626ba8ac7f9a3d8733db0dd8124
Certificate serial:       01A142045636F4A73AECE4DA5D3F752394AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
Manifest number:          0120
Signing time:             Fri 16 Oct 2026 00:02:22 +0000
Manifest this update:     Fri 16 Oct 2026 00:02:22 +0000
Manifest next update:     Sat 17 Oct 2026 00:02:22 +0000
Files and hashes:         1: 2P7SaJMcXsPyw8VXwK7lvJ92E84.roa (hash: De3uii83QPlU8l4wx/dhaSH5u2nnOc8fYmv6y+0gSd4=)
                          2: BJt80UY9tia6isf5o9hzPbDdgSQ.crl (hash: Dfwugi/qqEZ36Vlzj9A+JcAmv498r0MmEgh51jVBZsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 23:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:42:04:56:36:f4:a7:3a:ec:e4:da:5d:3f:75:23:94:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049b7cd1463db626ba8ac7f9a3d8733db0dd8124
        Validity
            Not Before: Oct 16 00:02:22 2026 GMT
            Not After : Oct 17 00:02:22 2026 GMT
        Subject: CN=a4e6f13ec60137c84561f939a29b887aa6f5990e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:85:e1:e0:b7:30:a3:64:cd:7f:ec:33:49:ce:
                    07:ed:50:79:ed:b7:15:35:ce:88:0b:90:30:3a:c5:
                    e1:68:a1:c7:39:f7:54:25:5d:97:fb:55:a7:64:42:
                    80:83:78:ce:78:58:05:f7:04:8f:be:40:7c:6a:5e:
                    40:93:db:79:f7:51:d9:13:19:71:1a:9e:0f:64:e0:
                    36:a5:3c:06:f9:ac:b1:0c:1d:73:72:bb:40:26:e9:
                    af:44:10:33:3e:c9:6e:cc:f1:84:f0:39:4b:7d:a1:
                    20:03:c9:f9:f8:9a:6e:39:70:e8:54:f0:3d:5e:7e:
                    0d:25:f7:d2:7d:d7:47:c5:ff:26:35:49:df:19:39:
                    0a:42:4b:1a:c5:9c:ae:21:28:17:e3:c6:6e:77:c0:
                    8f:d9:69:51:38:1e:e1:28:f0:a6:ef:c9:ef:e0:2c:
                    96:94:bc:f9:fb:fa:56:11:7f:07:cd:0f:f3:20:38:
                    a9:0a:d7:f3:f7:4f:15:1d:64:a4:25:10:b0:a8:e1:
                    7c:2a:b5:e9:79:49:22:95:dc:a2:e5:83:67:4d:ee:
                    fb:55:55:e3:d5:75:e3:0d:b8:15:33:9a:a8:de:fb:
                    c7:df:2f:18:2c:b1:87:51:e6:05:66:0b:88:c1:f4:
                    e5:86:ac:11:e5:f5:4c:9a:8f:a5:08:39:82:41:d7:
                    05:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E6:F1:3E:C6:01:37:C8:45:61:F9:39:A2:9B:88:7A:A6:F5:99:0E
            X509v3 Authority Key Identifier:
                keyid:04:9B:7C:D1:46:3D:B6:26:BA:8A:C7:F9:A3:D8:73:3D:B0:DD:81:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f2:bd:eb:dd:f2:c0:d7:51:a6:42:a9:45:5c:59:ac:78:19:
         46:ed:d6:fd:55:d0:3a:2f:83:8f:90:47:f1:9f:6a:06:a9:e0:
         86:c4:45:44:28:b5:68:96:17:6f:b3:3a:0f:c9:c2:01:eb:98:
         34:74:ba:23:fb:e8:93:5f:fe:b1:6f:e5:ca:09:60:58:8f:1e:
         a2:1f:67:3e:b6:6b:b3:5c:6a:ed:01:cc:5e:40:1b:e1:25:c1:
         1f:e2:34:34:91:9f:0f:47:c1:f7:3a:18:18:58:0d:ac:af:89:
         24:b1:03:f7:86:3d:4c:1b:6b:c8:98:4e:b8:e6:ef:55:8b:8f:
         4c:c1:b2:7c:98:d4:82:8c:fc:73:68:a8:29:f4:7b:e7:df:d6:
         9b:d9:c2:20:0a:d3:0f:44:bd:e6:e8:ae:9f:e2:4a:b9:72:9c:
         02:72:f3:7a:79:5c:23:fa:7a:e0:10:f6:1a:8d:87:50:ed:f8:
         8c:3a:ce:b1:c3:7e:19:08:55:0d:62:27:f3:31:55:c0:f0:81:
         96:7e:be:ae:ee:d6:5f:6d:00:a8:f3:43:73:18:94:1d:8a:b4:
         fb:8e:e0:b4:43:67:2b:88:7b:6d:bc:85:02:ac:24:3d:d7:0d:
         4b:60:5a:40:cb:f9:22:6c:90:f8:4e:02:7e:18:fa:69:e9:ce:
         45:8c:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 06:45:05 2026 by rpki-client