Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
File:                     BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft (raw, json)
Hash identifier:          Sv1DO4rWXOiHJqG1tkkPncwAFmkUBY5HKaUhQdTdMzE=
Subject key identifier:   CD:33:7A:9B:37:9D:3B:E3:55:43:A2:BE:69:81:FF:AA:EF:1C:4E:D8
Authority key identifier: 05:74:F1:74:B2:29:BF:7B:DA:0D:E8:71:4E:8F:62:A0:4C:29:AB:E4
Certificate issuer:       /CN=0574f174b229bf7bda0de8714e8f62a04c29abe4
Certificate serial:       01A0CC3506DB54D13F0774CF0152BC293E44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXTxdLIpv3vaDehxTo9ioEwpq-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 03:00:22 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:22 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:22 +0000
Files and hashes:         1: 6yHxEFCX8SGDDuqJtxkLqvDHhAM.roa (hash: FJdjgo8aJL+d/N15X0/urga/udLTA1icT6feDIkUrRY=)
                          2: BXTxdLIpv3vaDehxTo9ioEwpq-Q.crl (hash: Q0dIctuRTFpRTYWf0SoR2pqdABWV2Qpbi2KxDl0RUJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXTxdLIpv3vaDehxTo9ioEwpq-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:06:db:54:d1:3f:07:74:cf:01:52:bc:29:3e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0574f174b229bf7bda0de8714e8f62a04c29abe4
        Validity
            Not Before: Sep 23 03:00:22 2026 GMT
            Not After : Sep 24 03:00:22 2026 GMT
        Subject: CN=cd337a9b379d3be35543a2be6981ffaaef1c4ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:af:7f:80:dd:8d:de:58:08:a6:d1:4e:64:02:
                    75:85:94:63:6d:b7:56:0f:b0:3d:a4:47:1d:e2:46:
                    ad:77:1c:28:88:21:df:60:9a:c4:c4:db:6b:91:5a:
                    a7:84:c0:a5:6e:4f:ff:a9:ba:25:5c:8d:d4:fe:e3:
                    d3:a7:c8:a0:02:fa:ee:6f:7a:57:a4:3e:2f:87:52:
                    64:b0:48:65:92:f8:90:fb:71:29:4b:5e:6e:f6:42:
                    4f:80:2d:ed:b8:9e:3c:33:eb:43:c7:40:ed:98:6d:
                    dd:36:7d:bd:7e:41:62:52:91:b6:54:59:be:7e:35:
                    ce:7c:e9:c4:3a:fd:39:c0:3e:cc:3e:7d:6c:3c:e5:
                    31:13:ba:f2:91:6c:58:98:22:27:f8:6c:ee:56:bd:
                    8e:83:de:7e:0d:dc:a0:96:45:c6:36:41:55:db:b6:
                    b1:5e:8a:a8:82:ab:b5:d1:d8:5e:6b:0b:21:25:04:
                    69:ff:c3:ad:78:6e:bf:11:42:e6:80:08:38:6d:76:
                    1b:48:ab:af:ba:af:99:76:68:bf:f2:c6:46:cf:da:
                    75:7e:95:13:6e:83:a6:e3:1c:a5:ad:0e:d9:49:3b:
                    07:3a:25:55:32:49:cc:93:f3:36:91:4f:4e:5a:c9:
                    87:11:5d:4a:cc:76:c8:7a:13:6b:81:de:bb:36:20:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:33:7A:9B:37:9D:3B:E3:55:43:A2:BE:69:81:FF:AA:EF:1C:4E:D8
            X509v3 Authority Key Identifier:
                keyid:05:74:F1:74:B2:29:BF:7B:DA:0D:E8:71:4E:8F:62:A0:4C:29:AB:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXTxdLIpv3vaDehxTo9ioEwpq-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/BXTxdLIpv3vaDehxTo9ioEwpq-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:31:67:22:ad:fb:75:36:45:4a:84:d3:a6:06:23:48:be:9d:
         37:7f:59:3b:81:17:03:8a:90:26:df:d2:df:f2:dc:d8:05:10:
         79:33:66:40:70:4a:52:3a:21:45:f4:ac:12:ab:54:66:5c:1b:
         bd:de:ff:57:cd:e7:9a:09:83:56:8b:89:4a:af:82:28:eb:e2:
         67:d0:a8:c9:bd:e8:db:19:b3:17:3c:89:2d:ee:2f:8b:e2:88:
         ce:9c:18:3d:d4:e9:f4:f0:b5:1f:d4:4d:3c:f0:c6:4d:7a:6f:
         65:ae:3c:77:5f:fb:c1:60:92:43:60:45:5d:9f:51:ec:ba:d2:
         c6:e1:c9:ec:82:80:b5:b6:a4:8e:9c:f0:2e:d2:40:cd:70:44:
         bf:75:4f:50:a5:2c:af:05:de:44:0b:e9:2e:8f:f8:5a:18:cd:
         c3:57:c8:6b:ee:cd:9d:82:bb:25:bd:96:21:24:b2:49:44:55:
         16:21:b6:26:85:85:57:a3:f4:8b:b2:02:71:5c:01:fc:f9:cc:
         54:a9:79:a8:72:56:c3:e5:67:04:e7:58:98:af:c4:43:ba:c9:
         3c:34:70:cd:c4:dd:be:48:83:ee:6d:06:ed:40:2e:99:e2:56:
         67:6b:9d:c1:f1:f4:71:73:58:c7:cf:3e:88:98:f3:2e:17:1b:
         45:e7:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:19:15 2026 by rpki-client