Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File:                     BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier:          Lsi/MkIF/IACFuLkuku6vawPVIuCIx2TMC+5Pnn4h5Y=
Subject key identifier:   E8:E5:F0:27:E0:6E:D5:A8:F1:A0:9C:C8:2E:A9:8C:D5:97:1B:07:49
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer:       /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial:       01A1E095B66EEF577B8920AC8631B3C35B96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number:          1AFC
Signing time:             Sun 15 Nov 2026 19:01:10 +0000
Manifest this update:     Sun 15 Nov 2026 19:01:10 +0000
Manifest next update:     Mon 16 Nov 2026 19:01:10 +0000
Files and hashes:         1: 2owrDtSSdVfxvYXAxMiLovDSXEU.roa (hash: 9L5ssgJ0+ShYxgpGMGCzPMDxEovXXE+mzE0m/NaKh/k=)
                          2: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: PJJfpxiaJZzsXJNn0k/uwl/pP9Eekeuks0Murxv9AJw=)
                          3: J_ltO4IY-zslK2HzdFODfkjQNtE.asa (hash: Vj0jAxwKfiBhKsc+pYPJJ3wR9tPHQ0qcCAKE+u9mInI=)
                          4: W2dqeQoexNzO-eZu-b3E0MsHT4I.roa (hash: xbkqBY08vRM/01LJVRXUSH6oRqaCojszvq1SR3phsH0=)
                          5: cqgUAYp6Ct2GmV82YKdcCzBkMZI.asa (hash: CHbZCVVD9C5mKoyLTLmnjjwnKPQeNc2ARB2LqZbSLRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:95:b6:6e:ef:57:7b:89:20:ac:86:31:b3:c3:5b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
        Validity
            Not Before: Nov 15 19:01:10 2026 GMT
            Not After : Nov 16 19:01:10 2026 GMT
        Subject: CN=e8e5f027e06ed5a8f1a09cc82ea98cd5971b0749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:b1:b5:ae:0e:8d:0e:11:06:00:c1:e9:d2:
                    dd:bb:a8:91:b4:bc:41:ee:e8:6c:d9:ec:2e:be:ef:
                    ca:64:e4:ef:48:63:3b:17:98:b2:12:47:b2:bd:88:
                    5f:aa:61:c4:bf:39:38:24:7c:8d:05:70:3e:ba:cd:
                    a9:e7:3e:b9:53:ed:e3:b9:05:bc:24:f6:bd:c3:96:
                    35:4e:63:4b:51:a4:77:1f:c2:17:47:2f:a1:d3:31:
                    74:7f:97:38:aa:18:af:25:7c:25:0b:5a:e5:7b:dd:
                    13:5b:0e:27:29:2a:16:27:46:a7:82:ce:63:dd:30:
                    ce:98:fb:ef:dd:57:25:a7:7d:00:4d:77:42:dc:f7:
                    02:b4:fa:de:0d:ca:9b:73:ee:48:20:6b:00:09:d9:
                    13:69:57:5e:9b:c3:bf:65:7f:f8:1c:81:41:a7:8a:
                    4b:ef:44:0a:8c:fc:97:be:cd:ac:ff:1f:ac:c3:dc:
                    4e:c8:ab:ae:b8:cb:75:17:3c:06:51:fe:73:a1:dc:
                    68:87:46:7d:cc:c1:7f:7a:0c:cc:52:80:70:0f:c7:
                    ff:26:b7:d9:40:e2:28:5d:b4:a6:2f:d9:13:9a:0f:
                    e0:85:f7:8e:47:d9:d3:81:cd:c4:47:d6:c7:32:75:
                    44:f4:3c:e5:06:85:d6:f1:c6:40:a2:90:25:ce:84:
                    bf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E5:F0:27:E0:6E:D5:A8:F1:A0:9C:C8:2E:A9:8C:D5:97:1B:07:49
            X509v3 Authority Key Identifier:
                keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9d:f4:15:40:eb:66:73:7a:07:0a:28:29:47:80:b4:37:7f:
         1f:b6:1c:7b:12:f7:f6:ce:af:a6:6b:54:9d:a1:30:79:ee:31:
         29:81:7c:1c:41:7c:0c:83:4a:c5:05:e1:49:10:4b:e2:b0:8d:
         22:32:b9:ed:72:6b:03:ec:ff:a7:18:95:7b:a8:7a:f5:23:f9:
         c3:af:82:a6:5b:21:ef:29:77:83:6f:9a:ef:27:8f:15:8b:a4:
         af:aa:e3:40:cf:76:dd:07:fe:e7:53:53:6e:65:62:37:f1:57:
         1b:65:ea:17:0c:08:8d:27:87:6a:a6:9d:14:5e:51:db:cb:89:
         db:da:9d:18:28:24:16:63:ed:76:59:3f:d1:39:92:39:41:e6:
         8d:64:c6:a9:c9:da:30:90:db:2c:5f:be:76:ce:1d:32:50:6f:
         43:04:15:c0:16:fc:e7:57:27:6c:4f:18:bc:29:ef:97:97:99:
         d1:d5:48:44:a4:c4:0b:96:2b:ba:8f:95:ed:b7:bd:39:76:1e:
         ad:bc:89:6b:26:b0:a8:3d:7d:ee:3c:7e:ec:17:d9:19:04:02:
         55:c1:fa:5e:7d:e8:04:11:95:da:d4:c6:2b:fd:8b:79:8a:cd:
         6a:a9:82:d5:70:fd:6c:b5:c0:50:6c:c1:fa:96:2f:b3:0b:c1:
         b3:2b:fa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:46:08 2026 by rpki-client