Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
File:                     BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft (raw, json)
Hash identifier:          X88LDgbu45QfMlMPiDE65KEFVeiqbmqpR6bco2k5ALw=
Subject key identifier:   E1:67:D5:FC:3C:21:6D:3C:29:51:62:C8:A3:79:A1:D2:4F:63:CE:37
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Certificate issuer:       /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial:       01A0C7B3620EE4A3FD041742356AE7E599D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
Manifest number:          03A9
Signing time:             Tue 22 Sep 2026 06:00:16 +0000
Manifest this update:     Tue 22 Sep 2026 06:00:16 +0000
Manifest next update:     Wed 23 Sep 2026 06:00:16 +0000
Files and hashes:         1: BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl (hash: ug/GPCVFN9MdAUtHazEQZE/LoDKCP2uvQTfi2MnXnsE=)
                          2: GlfjtyID3JWD6gfRCet0c13y4oE.roa (hash: LlD9D2Qj80+2x3YcRcDhNjcjPr/rKerCLr5sHKh6tkA=)
                          3: SHM8e5Xg0qhNz9SMmQfcefSeu0g.roa (hash: GCoJkdgRca4Rrppv2r1E0k+f0VE7P9HFtilI5l3TlKU=)
                          4: fQqhOO0FnaFVtEyg6GJLZV0GsXc.roa (hash: CUNYPNKSF7YckX+bEfY2dM6QKQX4z3XcFfcG2M3cMOA=)
                          5: ixoSA4vv93EMzPFXEdYkZkFXEuM.roa (hash: LpzORNFMoHrs7UHue0dvdeBk04SczLGtJqFp6wF9Yy4=)
                          6: lvaBEefREte9megKsuTphpZWEYI.roa (hash: gtzJ7Yq4UBIaiaj1g0GucnUUIgufu6zUuc3MZU4/efU=)
                          7: ovLtvuErkYW3JV-5FyXwUkABVrg.roa (hash: dC4dQZ1mX3nPadXU0G7tzcioIJQ9K57JJCxbTMySTvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:b3:62:0e:e4:a3:fd:04:17:42:35:6a:e7:e5:99:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
        Validity
            Not Before: Sep 22 06:00:16 2026 GMT
            Not After : Sep 23 06:00:16 2026 GMT
        Subject: CN=e167d5fc3c216d3c295162c8a379a1d24f63ce37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:68:55:6b:29:b9:e0:7b:ca:50:ff:04:90:61:
                    fd:dd:1d:45:3b:0a:3c:05:af:63:6d:49:25:61:cd:
                    5c:ce:fd:6d:f8:7e:cf:c3:cf:d3:05:bb:d2:39:67:
                    d3:8a:44:60:a6:fe:ad:0b:46:1d:70:e6:ca:72:cf:
                    26:ce:85:71:2a:64:2c:f1:94:5a:55:df:4c:93:8c:
                    af:70:09:2e:38:c2:c7:4e:2b:c7:56:7e:66:0d:2e:
                    65:39:c8:99:2b:35:a3:87:28:bd:ba:a2:1f:5f:20:
                    8c:0b:d0:b3:20:5d:06:7b:6d:3b:98:1d:df:3e:f9:
                    35:0a:b9:e8:c9:6b:9e:c7:d3:79:e9:cd:1b:6e:cc:
                    0a:4c:b9:99:38:64:a1:92:2e:ca:e3:be:8a:58:b1:
                    8b:e9:25:6d:0e:0d:ad:65:1f:87:1c:18:d2:14:58:
                    4b:dd:af:61:2c:c0:42:d5:00:3d:a3:6e:ca:b5:0a:
                    ad:c2:d6:49:b8:b8:71:7a:d2:c1:84:d8:c6:31:85:
                    2b:b3:4b:b4:08:cf:9b:d4:4b:5d:24:ac:22:2b:f7:
                    98:63:2b:a3:60:55:80:d4:27:9d:02:15:76:59:24:
                    89:1e:d6:96:c3:9f:31:6b:cc:9e:e2:fe:b6:bd:ab:
                    e6:5a:4f:bd:22:05:5b:02:db:6e:aa:d0:3d:24:fa:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:67:D5:FC:3C:21:6D:3C:29:51:62:C8:A3:79:A1:D2:4F:63:CE:37
            X509v3 Authority Key Identifier:
                keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:23:36:1d:0a:3c:a1:9f:8e:39:47:b3:e4:6e:93:76:98:35:
         51:ef:9e:b2:b3:86:4c:21:4a:e8:da:ac:0e:c1:5e:a9:d1:09:
         d2:db:f6:01:26:bf:0a:c0:a1:a6:28:47:41:dc:c5:a6:00:da:
         0a:ce:12:60:1d:f1:fc:c6:f9:c6:c3:bc:68:b7:7f:87:d5:70:
         2c:8d:6f:05:7d:96:7d:d8:e7:db:ee:df:50:c4:68:18:5c:93:
         e9:35:fc:c7:8a:7e:21:0f:4e:e2:a4:24:5a:db:7d:43:e2:9d:
         10:60:1a:fb:fd:ca:f2:88:a3:87:ea:3c:04:88:84:44:96:9e:
         b8:32:00:6b:a6:6e:1f:f3:88:08:dd:c0:96:b1:46:29:3f:5e:
         dc:e0:53:44:89:9e:cd:a5:f8:70:99:b3:f2:8c:2c:57:02:fa:
         c7:e3:4a:97:12:ae:f9:b2:71:86:bd:0f:e7:f4:e3:7d:5b:70:
         d6:4f:aa:fb:bc:ee:20:f8:b8:92:ad:66:2c:80:04:a1:02:a4:
         b6:73:37:de:9e:d0:60:95:5d:b7:60:b3:c2:09:c7:83:cd:c9:
         dc:40:16:db:a9:f0:75:b6:a4:69:be:44:06:c2:12:01:2e:4e:
         88:f0:9b:39:f5:53:ec:cc:84:59:fe:41:86:02:cd:46:3a:b3:
         f6:ff:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:41:39 2026 by rpki-client