Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
File:                     bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json)
Hash identifier:          bEWzhAhsxq5WoZ8alAchB5dY/XTDK9oBBzzO9u8p6F8=
Subject key identifier:   27:13:76:C8:D9:27:18:28:60:BF:79:47:78:60:80:2A:12:45:46:B5
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Certificate issuer:       /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial:       01A13ECBD9B875228960E82CFEC28765BE07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 09:01:49 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:49 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:49 +0000
Files and hashes:         1: MJtCVVy7xxJhXUWGWWZ2lNCGj1k.roa (hash: HdvJHKbNcNPfl/JOSdnPb5pLI2El/VPr+80cW88sPD4=)
                          2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: m/gw0WoTV8yr11AHWSJml8OwLwEnBpsdIU9d2YMwxHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:d9:b8:75:22:89:60:e8:2c:fe:c2:87:65:be:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
        Validity
            Not Before: Oct 15 09:01:49 2026 GMT
            Not After : Oct 16 09:01:49 2026 GMT
        Subject: CN=271376c8d927182860bf79477860802a124546b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:86:92:89:17:7f:e8:07:1c:95:38:2d:2b:
                    43:71:de:a4:7a:2e:17:4e:bb:48:3d:e6:dc:b4:d3:
                    b4:16:96:ca:97:7d:60:85:2f:dc:4e:01:ad:09:7d:
                    ea:cf:ff:18:40:4e:e5:eb:a0:3a:20:09:fc:0f:fd:
                    b9:c8:5f:b4:1b:12:25:be:59:3b:23:3d:87:26:7f:
                    63:1d:9a:ae:c7:48:ef:be:35:7c:b7:23:fc:9b:12:
                    59:81:ab:a2:78:b5:7b:30:fa:4c:4b:c6:60:dd:a2:
                    de:1f:d7:6c:3f:76:43:d6:1e:94:62:75:bd:c4:67:
                    0c:7c:9f:d8:0e:db:e7:69:ed:10:81:ad:d7:99:68:
                    bd:c8:f3:eb:5e:f2:58:9a:08:37:53:43:96:87:7b:
                    19:16:26:7a:86:d3:4f:9b:c3:c1:c2:ed:26:72:2d:
                    f3:bf:6a:55:0d:38:4e:d1:52:90:5c:fc:d6:93:de:
                    0f:3b:ed:ef:65:bc:5f:99:28:cc:08:f0:f8:4f:c7:
                    8e:42:bf:98:e1:de:8b:cb:19:fb:80:e5:65:a9:20:
                    c2:00:9a:bd:21:90:e7:2f:18:71:28:67:de:5e:ba:
                    f7:07:a1:3e:74:cb:90:e7:5d:e2:2a:a3:4f:b4:f7:
                    10:de:49:8d:5d:de:0f:87:36:21:cd:69:b7:69:a4:
                    f2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:13:76:C8:D9:27:18:28:60:BF:79:47:78:60:80:2A:12:45:46:B5
            X509v3 Authority Key Identifier:
                keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:12:08:74:b4:79:5e:29:58:b5:20:04:e8:56:7f:64:af:bc:
         80:7f:f0:09:ef:68:96:02:e5:f2:56:97:e8:a4:c9:49:4d:03:
         86:f0:cb:d8:ce:7f:18:62:81:80:66:c1:bb:b2:28:c7:92:12:
         33:1c:be:52:4c:3d:71:95:4a:29:6b:a6:03:47:bb:82:f5:5e:
         bf:13:f4:ef:22:f3:7b:4e:44:c2:5d:9c:01:72:78:fc:cb:1f:
         f7:e4:ed:71:72:35:c4:19:3d:bb:f2:23:f4:fa:d2:10:62:8b:
         7b:b6:4c:48:27:23:27:7a:35:1a:8a:8f:36:17:11:e7:5d:3b:
         0e:5b:f8:d5:3a:b8:f5:c3:9d:6b:89:d7:2e:06:34:18:3f:9f:
         f7:30:3c:b1:70:ae:a0:1b:d7:fc:99:1e:35:8a:ce:cc:5a:72:
         72:95:76:c3:4a:0b:a3:8e:08:25:65:cc:20:a6:14:d7:2c:60:
         7f:80:1a:da:1d:3d:14:6f:ee:6d:92:da:15:bc:d8:50:90:1c:
         8c:80:1b:dd:9f:4d:1c:f1:f1:c7:9a:7b:74:38:49:15:ed:03:
         0b:1a:e8:3a:0b:1c:eb:87:86:7a:06:1a:9a:ce:a1:63:07:31:
         de:21:36:79:e0:f9:43:53:b8:61:36:ae:a2:3b:b7:59:ce:66:
         8a:dc:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:53 2026 by rpki-client