Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
File:                     BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json)
Hash identifier:          I4bgSIl+MjL78OOetScqhXU5y1yhVpi5iEfeGLVo/H8=
Subject key identifier:   05:BA:96:98:69:52:1A:85:28:52:F6:4B:C7:4B:9B:5E:B3:E2:2D:E2
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Certificate issuer:       /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial:       01A0E550E1ACB2570E838C69B805A9DEAD29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
Manifest number:          1A81
Signing time:             Mon 28 Sep 2026 00:01:18 +0000
Manifest this update:     Mon 28 Sep 2026 00:01:18 +0000
Manifest next update:     Tue 29 Sep 2026 00:01:18 +0000
Files and hashes:         1: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: 2Sc0ItbD2GC1SsCLZhog2mUuDHSaz5K+uQZVWASNGAQ=)
                          2: C_AvtSnRCKwvl2SpLUtFVcIH_w8.roa (hash: Ey0Vszsa81W+PEv7/mryXgBI5kc8rCJJuGeJRL0U9AY=)
                          3: gMFcOPQteOhqPx2LNjSrGk_i0pc.roa (hash: 4bBSvIov832SMHkWTbm2twdnK2LmhaFY34aJt67Zyz4=)
                          4: yqqyq27K4-xGzG8Of_lVR5tN1fY.roa (hash: L4LuTGsF9rww8/NB+ZFiDYSxLKLvCScujCdQEYKMpLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:50:e1:ac:b2:57:0e:83:8c:69:b8:05:a9:de:ad:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
        Validity
            Not Before: Sep 28 00:01:18 2026 GMT
            Not After : Sep 29 00:01:18 2026 GMT
        Subject: CN=05ba969869521a852852f64bc74b9b5eb3e22de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:3c:a1:bd:9b:15:95:ee:34:83:2c:36:a8:
                    74:ed:0c:28:39:5e:9b:48:ab:6d:0e:90:ff:a1:d5:
                    ff:4a:73:8a:c6:bf:e3:e7:31:23:5b:4b:27:56:e2:
                    16:28:df:0e:9a:7e:54:06:f5:60:56:1f:02:34:98:
                    50:31:ed:29:27:d9:27:db:2a:06:7a:f5:16:ba:5b:
                    2f:ee:ae:33:5e:da:d2:6a:9d:c9:ac:06:f1:74:f7:
                    9b:e8:ab:98:b6:44:0e:86:fb:ec:78:65:67:ea:44:
                    64:07:15:d9:78:2f:da:cd:46:c9:a8:b7:3f:df:81:
                    5c:76:4d:b5:2b:dc:9d:df:9e:11:3d:63:f3:cc:2d:
                    4e:12:c0:f0:d1:b6:96:6f:c8:8a:c9:90:a7:b7:e7:
                    fa:0b:43:cd:ca:e2:c5:d7:5e:07:45:69:56:4a:29:
                    e2:c8:50:18:cf:ae:d0:b1:c0:1f:ac:42:28:31:ee:
                    af:e3:71:b4:04:73:72:d0:d7:7a:e5:c6:51:0c:6b:
                    4a:27:75:e2:0e:87:80:94:7c:03:16:49:fa:ba:ce:
                    02:c3:0a:90:87:34:70:e9:d1:b1:cb:ba:7f:35:89:
                    a7:70:bd:0f:c8:a2:3a:ce:cf:4d:68:27:34:45:b4:
                    2d:0a:52:0e:38:4e:78:22:15:6b:2a:a0:78:22:f6:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BA:96:98:69:52:1A:85:28:52:F6:4B:C7:4B:9B:5E:B3:E2:2D:E2
            X509v3 Authority Key Identifier:
                keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6e:32:3f:7e:80:6d:1f:a4:ba:9b:3a:b2:ce:49:4e:2f:6e:
         2c:2f:49:57:c9:85:f5:86:be:f0:86:96:fb:fa:2d:b9:cb:e6:
         23:be:e1:0f:33:47:95:20:7a:4b:25:17:7a:76:97:ff:53:a3:
         68:8e:0e:c4:cf:9f:53:ae:9e:d0:c9:cf:09:59:8a:7a:1c:61:
         bb:75:5a:07:40:c7:de:31:4d:c6:fd:8f:49:e3:e7:34:62:7b:
         e8:25:75:ef:06:09:71:b5:3c:63:4b:3f:6d:33:f7:e5:47:28:
         e7:76:01:19:e1:40:46:6a:72:72:8a:4f:30:8b:3e:2a:4c:fb:
         33:b8:c4:7d:2a:a7:a7:f4:11:88:6e:b8:57:ad:37:6c:0e:ae:
         8b:99:f2:fa:b1:aa:68:86:73:62:f8:c3:ac:b6:03:81:c6:0e:
         f5:12:0c:e2:aa:f2:ef:1b:f6:7c:86:9b:8c:ed:93:6a:d4:b6:
         2f:1f:08:02:de:03:00:5c:42:82:a6:f2:a7:3f:49:82:2a:aa:
         ef:40:f4:c2:49:d5:19:a9:0c:d0:97:d9:e4:36:a9:58:25:84:
         0d:46:ec:2f:e7:6d:85:15:25:55:31:27:13:b9:89:35:af:e3:
         ab:0f:7e:65:7e:e4:91:49:63:bf:a2:b4:c6:7c:68:26:be:cf:
         24:9f:16:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDlUOGsslcOg4xpuAWp3q0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1M2QwNGU3MmJiMjQ5Yzc5ZWIxMTY4Y2YxZDQzYTNjYTU0
OGMyMDYwHhcNMjYwOTI4MDAwMTE4WhcNMjYwOTI5MDAwMTE4WjAzMTEwLwYDVQQD
EygwNWJhOTY5ODY5NTIxYTg1Mjg1MmY2NGJjNzRiOWI1ZWIzZTIyZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlQ8ob2bFZXuNIMsNqh07QwoOV6b
SKttDpD/odX/SnOKxr/j5zEjW0snVuIWKN8Omn5UBvVgVh8CNJhQMe0pJ9kn2yoG
evUWulsv7q4zXtrSap3JrAbxdPeb6KuYtkQOhvvseGVn6kRkBxXZeC/azUbJqLc/
34Fcdk21K9yd354RPWPzzC1OEsDw0baWb8iKyZCnt+f6C0PNyuLF114HRWlWSini
yFAYz67QscAfrEIoMe6v43G0BHNy0Nd65cZRDGtKJ3XiDoeAlHwDFkn6us4CwwqQ
hzRw6dGxy7p/NYmncL0PyKI6zs9NaCc0RbQtClIOOE54IhVrKqB4IvZFhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAW6lphpUhqFKFL2S8dLm16z4i3iMB8GA1UdIwQY
MBaAFAU9BOcrsknHnrEWjPHUOjylSMIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlQwRTV5dXlTY2Vlc1JhTThkUTZQS1ZJd2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zNTUwYjQtNTFiNS00NDhiLWFiNjIt
MmE4MTNkYmY0NTgyLzEvQlQwRTV5dXlTY2Vlc1JhTThkUTZQS1ZJd2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zNTUwYjQtNTFiNS00NDhiLWFiNjItMmE4MTNkYmY0NTgy
LzEvQlQwRTV5dXlTY2Vlc1JhTThkUTZQS1ZJd2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQm4yP36A
bR+kups6ss5JTi9uLC9JV8mF9Ya+8IaW+/otucvmI77hDzNHlSB6SyUXenaX/1Oj
aI4OxM+fU66e0MnPCVmKehxhu3VaB0DH3jFNxv2PSePnNGJ76CV17wYJcbU8Y0s/
bTP35Uco53YBGeFARmpycopPMIs+Kkz7M7jEfSqnp/QRiG64V603bA6ui5ny+rGq
aIZzYvjDrLYDgcYO9RIM4qry7xv2fIabjO2TatS2Lx8IAt4DAFxCgqbypz9Jgiqq
70D0wknVGakM0JfZ5DapWCWEDUbsL+dthRUlVTEnE7mJNa/jqw9+ZX7kkUljv6K0
xnxoJr7PJJ8WzA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:28:55 2026 by rpki-client