Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File:                     bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier:          WTInHqFtkXA4DjkcE4dglAR9lzBWooPBK7jFbJkOedk=
Subject key identifier:   9F:A1:5D:BA:65:42:9C:A1:BB:C1:CF:87:FB:CC:FF:D2:01:13:8B:83
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer:       /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial:       01A13D813D0697E711E6EADBD889AA403317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number:          17F0
Signing time:             Thu 15 Oct 2026 03:00:42 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:42 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:42 +0000
Files and hashes:         1: 13x6q0kK4jWtFgTsaQE2IuvYeC0.roa (hash: jOVJU7qUmDkbddDyA5OyhBcSOp8ncmsAOoZ16mvRU1k=)
                          2: 2TPDXIW8nRhH-zn4Tm9ZPC07Xoo.roa (hash: vNp+e/Xr5uBDdSepNIMLpg+2kp7VmOLIl/0ANnudWck=)
                          3: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: yzEsDrS4oWKLqtBGJC0Wn/9SYGeqkQBJEoFYCXTZVCQ=)
                          4: ekrqCKLizVAMKQXSGPD3DpBP_OY.roa (hash: s5CParuuwC3JvXqHExuQ7yQFo1a7fTuNWPzfjB6dlrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:3d:06:97:e7:11:e6:ea:db:d8:89:aa:40:33:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
        Validity
            Not Before: Oct 15 03:00:42 2026 GMT
            Not After : Oct 16 03:00:42 2026 GMT
        Subject: CN=9fa15dba65429ca1bbc1cf87fbccffd201138b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:da:5f:84:30:24:01:1d:f2:f5:c5:c3:66:a5:
                    78:34:b6:60:bb:cf:fe:f8:bf:c8:d6:40:31:02:3a:
                    37:e4:d9:c1:0a:30:69:3b:f4:c4:1c:02:e2:60:a5:
                    f5:85:8e:df:e9:75:5c:c3:b3:13:12:4f:db:88:1b:
                    2c:56:43:41:9e:05:07:3a:3a:89:08:6c:6f:17:8e:
                    a2:b4:7c:33:2d:ea:14:b6:4c:d1:e5:36:c6:58:e2:
                    67:3c:96:39:05:ca:2d:64:83:2f:73:e4:63:a9:cb:
                    79:08:27:b9:c8:a6:b6:a2:c4:c7:88:e2:16:0a:d3:
                    bd:1f:6d:95:18:32:c3:a1:8a:55:0f:95:3a:0c:f4:
                    32:5c:2d:b1:a7:ee:3d:93:15:fb:c6:a1:bf:ad:2c:
                    cc:31:22:c2:03:8e:c1:35:59:a4:18:8a:99:ae:31:
                    69:5f:55:3d:71:f4:89:99:47:24:f1:76:83:3b:13:
                    e1:3f:a5:b5:ee:d0:92:a0:ce:9b:a0:09:90:f5:d3:
                    31:19:b6:e5:45:c5:25:f8:d6:20:21:3a:76:cd:58:
                    76:17:e7:55:fd:1d:8f:38:03:bf:f5:bf:bc:8e:9e:
                    9d:a3:97:39:9b:36:ea:55:44:4d:4c:3c:5d:20:81:
                    fd:09:e6:3f:5c:78:20:ef:b2:46:47:81:14:e1:07:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A1:5D:BA:65:42:9C:A1:BB:C1:CF:87:FB:CC:FF:D2:01:13:8B:83
            X509v3 Authority Key Identifier:
                keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:60:c4:9a:9b:95:19:9a:60:b2:88:49:e7:2f:25:f1:c5:f3:
         ee:06:da:58:fc:ed:24:4b:1c:aa:6d:d4:19:43:27:8d:7c:1d:
         3a:02:04:3e:b1:38:7b:0f:f0:8e:0c:3d:9a:c3:3a:2d:c8:ce:
         a5:fa:e7:22:74:c9:4d:41:a6:5e:60:17:2a:b6:24:8f:03:d8:
         8d:93:f1:a9:dd:c9:2e:cd:37:76:18:64:e2:c1:e0:df:c9:6d:
         0f:3f:01:f7:ae:e5:0c:c9:33:40:1b:be:90:97:68:29:32:9a:
         77:1c:5b:1b:e4:25:1a:50:be:aa:e7:73:c1:72:3c:59:fd:64:
         91:4e:b5:8b:50:59:7a:91:25:d2:45:d7:09:cd:55:71:f1:ea:
         51:48:ef:c8:d0:af:51:9f:4c:3c:e9:f2:ab:80:0e:b0:e8:b9:
         4e:97:e7:a2:47:53:4d:20:e9:34:4e:98:e2:c9:8a:0a:5d:50:
         5d:ac:95:88:11:88:69:8a:cb:82:e4:6f:29:f3:db:15:eb:07:
         52:fd:dc:9a:cf:dc:55:7e:eb:db:55:9e:41:a2:85:65:04:fa:
         a0:14:5c:1a:9c:bc:bd:de:7b:84:ba:01:2b:3f:5c:6a:ee:42:
         c5:f0:bd:03:ba:57:1e:5a:4e:cb:56:6c:4c:de:cd:d3:ef:52:
         08:5f:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:28:32 2026 by rpki-client