Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File:                     BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier:          SbKXENz5364+qdGAB7DSsHbHh4cYlIOLxeG4yAEEwGc=
Subject key identifier:   32:19:96:EB:4E:0A:B8:E4:D5:3C:C0:1C:4B:7C:3B:F5:52:A8:DF:54
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer:       /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial:       01A0C40E1D940149FAAD480EE92D9EC2C89A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number:          1915
Signing time:             Mon 21 Sep 2026 13:00:54 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:54 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:54 +0000
Files and hashes:         1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: oeFf4AYQu9LQrcmeBhyY8UqwcQqcdcRNFYIJCA13Wmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0e:1d:94:01:49:fa:ad:48:0e:e9:2d:9e:c2:c8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
        Validity
            Not Before: Sep 21 13:00:54 2026 GMT
            Not After : Sep 22 13:00:54 2026 GMT
        Subject: CN=321996eb4e0ab8e4d53cc01c4b7c3bf552a8df54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:7e:54:da:aa:4e:31:7f:16:3d:54:d3:ba:
                    3a:5f:bc:e7:ed:4c:4e:b4:d2:35:40:35:aa:af:70:
                    3c:4f:b6:1b:52:e6:3d:b0:59:43:d8:00:13:5c:41:
                    1a:38:99:f8:62:e0:14:e2:95:71:07:24:47:6d:7e:
                    5d:2f:d9:82:98:f4:f0:89:8f:e6:a7:a5:8f:3a:df:
                    3e:4a:2a:d0:6e:bf:e3:fe:30:ca:1a:b2:1a:ec:96:
                    67:2d:98:00:19:d4:b6:0c:4b:20:a0:36:d9:bc:8a:
                    dd:9e:ce:b4:70:65:39:d4:33:c1:57:bf:29:05:62:
                    42:87:1b:3f:67:69:bb:a5:4a:36:ca:d3:fc:67:17:
                    f5:1a:50:a0:af:9e:f8:0b:e5:46:4e:d8:71:c6:a8:
                    31:a9:b8:50:da:c2:b4:16:57:67:3f:f3:28:36:23:
                    a0:42:cc:ab:6d:ae:01:2e:ad:5e:73:bc:bd:93:29:
                    cf:16:97:9a:e2:3d:eb:a2:32:ea:6a:df:20:41:85:
                    19:5f:79:6a:bd:58:8f:a9:e5:2b:86:55:5b:37:e6:
                    c2:bf:71:b9:a5:25:55:d7:6e:86:46:c0:c3:64:54:
                    67:04:e9:c2:e6:cf:c7:b4:10:72:0d:79:5d:c1:02:
                    18:cf:2f:e8:cb:0a:f0:57:3d:39:98:54:03:20:82:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:19:96:EB:4E:0A:B8:E4:D5:3C:C0:1C:4B:7C:3B:F5:52:A8:DF:54
            X509v3 Authority Key Identifier:
                keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e4:6a:d1:0b:ef:10:ba:97:68:16:cb:bf:fe:da:b6:cd:76:
         22:c0:01:a2:31:fa:e9:63:ef:88:96:8f:ab:0e:1e:7d:65:33:
         4c:06:52:62:39:3a:7d:62:3d:6a:bd:f4:84:9a:75:70:2f:0b:
         b3:19:d1:e1:1d:68:07:bc:5c:c9:19:92:56:c0:81:5d:65:0f:
         1a:e7:36:20:de:3e:9a:76:de:ac:9a:c0:5d:d2:f7:eb:0c:47:
         69:d1:94:bb:51:40:b7:ec:cc:dc:33:5c:0d:39:c5:e6:c9:c6:
         a2:4e:cf:4d:1a:86:28:6d:3c:c4:83:f9:21:b5:cc:38:e2:ef:
         7b:95:ed:52:4d:7b:73:7e:75:db:b4:9f:24:b4:4e:04:f7:58:
         e0:dd:80:d1:70:8d:8b:1e:c8:48:12:e2:a4:8a:65:56:27:3f:
         26:01:9a:3c:df:26:82:25:d3:eb:3e:27:0c:ac:8c:50:fd:3f:
         20:68:49:cc:27:4b:a2:fe:3e:19:43:56:74:e5:a3:f9:c3:3d:
         a5:86:09:ad:9f:a9:49:cf:58:e0:fc:21:45:bc:a3:03:0e:b7:
         a5:2a:8c:bd:bc:b5:fb:c6:ce:7e:5f:7d:6c:ee:00:2a:86:74:
         83:02:b3:2c:ae:6a:fe:b4:f5:65:ee:e1:83:67:e1:8a:fe:fa:
         7f:aa:8a:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDh2UAUn6rUgO6S2ewsiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzNmMDgxZTU3YmQwOWRhYmIwNmUzN2RmODU2OWViNTI0
MjBmNzYwHhcNMjYwOTIxMTMwMDU0WhcNMjYwOTIyMTMwMDU0WjAzMTEwLwYDVQQD
EygzMjE5OTZlYjRlMGFiOGU0ZDUzY2MwMWM0YjdjM2JmNTUyYThkZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeh+VNqqTjF/Fj1U07o6X7zn7UxO
tNI1QDWqr3A8T7YbUuY9sFlD2AATXEEaOJn4YuAU4pVxByRHbX5dL9mCmPTwiY/m
p6WPOt8+SirQbr/j/jDKGrIa7JZnLZgAGdS2DEsgoDbZvIrdns60cGU51DPBV78p
BWJChxs/Z2m7pUo2ytP8Zxf1GlCgr574C+VGTthxxqgxqbhQ2sK0FldnP/MoNiOg
Qsyrba4BLq1ec7y9kynPFpea4j3rojLqat8gQYUZX3lqvViPqeUrhlVbN+bCv3G5
pSVV126GRsDDZFRnBOnC5s/HtBByDXldwQIYzy/oywrwVz05mFQDIIKfCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIZlutOCrjk1TzAHEt8O/VSqN9UMB8GA1UdIwQY
MBaAFAUz8IHle9Cdq7BuN9+FaetSQg92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85NzVjZWYtNDEwMy00Y2Y3LWJmZmUt
MDYyZjJjNmEwYWIyLzEvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS85NzVjZWYtNDEwMy00Y2Y3LWJmZmUtMDYyZjJjNmEwYWIy
LzEvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+Rq0Qvv
ELqXaBbLv/7ats12IsABojH66WPviJaPqw4efWUzTAZSYjk6fWI9ar30hJp1cC8L
sxnR4R1oB7xcyRmSVsCBXWUPGuc2IN4+mnberJrAXdL36wxHadGUu1FAt+zM3DNc
DTnF5snGok7PTRqGKG08xIP5IbXMOOLve5XtUk17c35127SfJLROBPdY4N2A0XCN
ix7ISBLipIplVic/JgGaPN8mgiXT6z4nDKyMUP0/IGhJzCdLov4+GUNWdOWj+cM9
pYYJrZ+pSc9Y4PwhRbyjAw63pSqMvby1+8bOfl99bO4AKoZ0gwKzLK5q/rT1Ze7h
g2fhiv76f6qKIA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:04:36 2026 by rpki-client