Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File:                     BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier:          8KAmO5nFT/1/Ar/Hm2SWawkAn525HztU78bw0rUFIXM=
Subject key identifier:   00:F0:52:88:EA:85:57:BF:D9:72:62:E2:96:12:E9:BA:72:58:E4:BA
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer:       /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial:       01A0C77CBE28C9CA5269A7BC3DF68BEB4E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number:          19A7
Signing time:             Tue 22 Sep 2026 05:00:36 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:36 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:36 +0000
Files and hashes:         1: 1HpVkB_jbLhmzmxBwUx9bssht30.roa (hash: zCHbybFcXq0qDlNR99yqu6g+oFdwplvbb6MafSX5AMs=)
                          2: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: 4OymtRibOqaI/LnLZQd0cl+BDGxeOv2aJb3nRBKamA4=)
                          3: TgYSgtEo4dSznEstSh4wl1Lb_yg.roa (hash: nniijit4FyrPMtz8C+vav/OxG7xVfSAPSwIGynyNP+Q=)
                          4: XXDxWPYvJwQEEoD1ZkxghR4ET40.roa (hash: kPDCqZ/ABCjh6D3pWOnBRlSEdw9IBPT/5sVK336dTdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7c:be:28:c9:ca:52:69:a7:bc:3d:f6:8b:eb:4e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
        Validity
            Not Before: Sep 22 05:00:36 2026 GMT
            Not After : Sep 23 05:00:36 2026 GMT
        Subject: CN=00f05288ea8557bfd97262e29612e9ba7258e4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:93:53:2b:b7:ad:3e:06:e4:61:a2:f0:ff:
                    0b:af:b1:95:69:f0:b5:ba:d5:6d:ce:14:e9:73:03:
                    33:d8:e8:2f:02:a2:b2:fe:96:0f:d0:b3:5a:ca:2b:
                    65:b8:2a:45:b7:58:ca:d2:a2:67:76:33:f3:26:71:
                    7c:6b:90:f3:03:69:be:e9:02:81:5e:13:ce:5a:bc:
                    58:53:c8:21:df:77:12:1c:19:2b:d3:b2:47:8e:a8:
                    76:12:1a:f1:75:da:2c:26:d9:5d:35:0c:6c:d8:4d:
                    d5:e4:00:0d:0c:de:85:85:77:d2:ef:6c:6f:f7:b4:
                    60:6c:67:0b:18:72:c4:c4:c9:38:41:5b:ea:4c:1a:
                    a2:02:37:67:a6:35:8c:c9:41:48:db:ed:13:71:58:
                    4e:73:89:2e:19:ee:92:64:60:a5:60:04:f7:d5:d2:
                    ef:24:8f:79:02:39:66:97:87:91:66:1c:bd:7a:ff:
                    9a:f6:e3:d0:10:bf:8b:19:9c:8d:1b:fe:8e:e6:89:
                    1e:7c:9f:48:40:ad:a6:72:ce:58:89:19:1c:10:b3:
                    fc:bf:ca:ce:01:d9:50:3d:31:98:16:98:1a:c2:9d:
                    69:fb:2f:b1:98:03:20:cc:0b:bf:02:c9:38:b4:b8:
                    43:8f:3b:fd:e0:8b:65:5b:20:3a:9b:bb:f5:a0:f4:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F0:52:88:EA:85:57:BF:D9:72:62:E2:96:12:E9:BA:72:58:E4:BA
            X509v3 Authority Key Identifier:
                keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bd:17:77:7b:ce:b0:4a:74:b2:2b:62:7f:37:a5:27:19:73:
         33:4d:83:89:7f:e9:1d:22:ad:27:c1:eb:c9:e1:28:1a:89:40:
         09:93:c5:1c:ff:8d:b7:b8:54:13:10:a7:9c:7d:e6:c3:d9:c0:
         42:64:09:7d:53:81:be:85:e3:30:74:6f:f0:56:aa:c0:0e:2f:
         ed:eb:f6:78:dc:71:5a:29:7f:e2:4b:02:8a:18:d3:c1:86:de:
         8a:da:85:b8:fa:e7:45:50:d6:0d:98:a8:f0:6f:ac:22:9f:2f:
         c4:b3:ca:98:e6:bd:ca:eb:79:4d:c3:b6:be:56:bf:b8:f3:f6:
         7e:4f:fc:f7:6f:54:42:36:a7:09:96:bf:d0:c4:26:eb:99:41:
         c5:82:9d:b8:c7:e9:9b:72:5e:31:79:e0:2c:7c:ac:6a:5d:af:
         0c:d5:0d:8a:7a:dd:b0:c8:31:e0:97:5d:c9:a2:b4:46:5d:9a:
         e5:ae:49:a8:a2:6f:73:bb:84:0d:ec:1a:6d:0f:59:0f:06:89:
         be:09:ac:35:cb:da:7e:05:d8:52:7c:9b:08:6e:3e:2b:5f:eb:
         b1:1a:fe:fe:c6:de:07:c1:a9:ea:cd:da:78:12:38:e9:f8:3a:
         b8:4d:3d:2e:06:68:39:4b:1f:b6:a1:fe:47:b8:ca:1c:0f:5b:
         17:dd:14:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfL4oycpSaae8PfaL604FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh
MThmMjAwHhcNMjYwOTIyMDUwMDM2WhcNMjYwOTIzMDUwMDM2WjAzMTEwLwYDVQQD
EygwMGYwNTI4OGVhODU1N2JmZDk3MjYyZTI5NjEyZTliYTcyNThlNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06qTUyu3rT4G5GGi8P8Lr7GVafC1
utVtzhTpcwMz2OgvAqKy/pYP0LNayitluCpFt1jK0qJndjPzJnF8a5DzA2m+6QKB
XhPOWrxYU8gh33cSHBkr07JHjqh2EhrxddosJtldNQxs2E3V5AANDN6FhXfS72xv
97RgbGcLGHLExMk4QVvqTBqiAjdnpjWMyUFI2+0TcVhOc4kuGe6SZGClYAT31dLv
JI95Ajlml4eRZhy9ev+a9uPQEL+LGZyNG/6O5okefJ9IQK2mcs5YiRkcELP8v8rO
AdlQPTGYFpgawp1p+y+xmAMgzAu/Ask4tLhDjzv94ItlWyA6m7v1oPTVUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADwUojqhVe/2XJi4pYS6bpyWOS6MB8GA1UdIwQY
MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt
ZTBhYmQ0ZDg0NTcxLzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx
LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdb0Xd3vO
sEp0sitifzelJxlzM02DiX/pHSKtJ8HryeEoGolACZPFHP+Nt7hUExCnnH3mw9nA
QmQJfVOBvoXjMHRv8FaqwA4v7ev2eNxxWil/4ksCihjTwYbeitqFuPrnRVDWDZio
8G+sIp8vxLPKmOa9yut5TcO2vla/uPP2fk/8929UQjanCZa/0MQm65lBxYKduMfp
m3JeMXngLHysal2vDNUNinrdsMgx4JddyaK0Rl2a5a5JqKJvc7uEDewabQ9ZDwaJ
vgmsNcvafgXYUnybCG4+K1/rsRr+/sbeB8Gp6s3aeBI46fg6uE09LgZoOUsftqH+
R7jKHA9bF90UZg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:45:38 2026 by rpki-client