Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File:                     bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier:          YmiycU1p4EekBJQ/czl6+TqLKrrVkFkzL0HGU3Rb3wU=
Subject key identifier:   C3:B0:4C:12:A8:32:EE:B5:FA:80:DA:49:60:A7:B8:54:68:63:1D:12
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer:       /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial:       019D9A06B6205981878B3C0323E5A8ECD6DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number:          1076
Signing time:             Fri 17 Apr 2026 06:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:24 +0000
Files and hashes:         1: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: QcOsETkZiHMbVNUosVczijzdNztqpIxwKdIfrPW7ZD0=)
                          2: uW6MqNVytVrssfUBxC2o5Ci36m0.roa (hash: 0xEUcG7sHwDRILOo98qDKEy+k04HnajY0Lu0XSxmDN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:b6:20:59:81:87:8b:3c:03:23:e5:a8:ec:d6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
        Validity
            Not Before: Apr 17 06:00:24 2026 GMT
            Not After : Apr 18 06:00:24 2026 GMT
        Subject: CN=c3b04c12a832eeb5fa80da4960a7b85468631d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:57:b5:91:4f:fb:cf:80:1e:03:b0:2f:63:
                    3b:cc:8f:16:26:25:97:e3:a6:ec:be:ed:9a:45:b8:
                    98:2b:69:48:95:36:c0:cd:91:73:a0:36:42:fa:19:
                    28:16:52:3d:3f:60:48:4d:0e:f3:5a:eb:56:59:d3:
                    72:2f:7b:d3:58:d2:4b:8e:3d:79:25:93:ef:50:7e:
                    0a:06:93:e6:f3:db:1c:3c:ed:fa:54:4f:93:60:28:
                    0c:89:02:7d:7e:66:f6:ee:ee:42:c5:85:03:da:c7:
                    42:df:37:00:f9:18:f4:87:76:cd:9c:2d:77:e9:0d:
                    38:91:f3:8b:0f:7c:ad:60:d6:09:45:0b:ab:10:00:
                    d2:c6:ef:41:1f:70:91:92:b4:96:f6:bb:57:ee:44:
                    d5:74:24:38:8b:e4:3a:db:11:58:bd:0a:c2:00:19:
                    dc:e2:72:1c:72:4c:9b:44:a5:2f:ae:1a:91:11:a4:
                    7d:92:fa:fc:52:19:c8:c5:22:9f:d0:44:82:9c:20:
                    d1:0a:6f:85:15:5b:d4:67:21:38:2c:5e:41:13:ca:
                    7c:f0:99:9b:c4:6f:7f:36:ec:ae:99:fc:e2:60:b7:
                    b2:f6:34:7f:f3:b4:ae:c9:70:e6:f6:11:4b:bd:c3:
                    1c:3d:e6:6c:93:a5:2c:44:a5:00:49:72:53:43:4e:
                    1f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B0:4C:12:A8:32:EE:B5:FA:80:DA:49:60:A7:B8:54:68:63:1D:12
            X509v3 Authority Key Identifier:
                keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:e8:29:4c:88:3c:94:d8:17:91:92:be:2c:4b:b2:aa:6d:
         e1:3b:71:81:98:90:cb:bf:3b:ad:e6:09:b3:f3:c1:3a:b9:30:
         fd:e5:e7:d2:dd:44:20:d4:d9:a5:70:7c:b7:17:90:6a:6c:9c:
         5f:2d:d1:be:d4:58:db:fc:c7:02:58:ee:c3:39:a6:24:6a:97:
         89:43:da:99:f0:94:f8:e4:99:ab:d4:23:b5:02:a8:01:9a:da:
         65:76:da:e5:a3:1d:76:8c:27:c1:94:ef:81:4c:85:44:db:bb:
         3d:fc:6d:42:4f:c5:d2:00:0d:b0:39:9d:8b:72:3b:4d:a1:18:
         15:e0:f6:60:2e:5d:f5:ed:d0:86:03:45:07:e3:4a:e2:5b:7e:
         65:13:50:a1:db:8f:63:95:a3:a9:f9:46:2f:cc:25:0e:42:62:
         84:3f:34:c8:16:9e:e5:c8:8d:b9:ef:83:bd:91:b5:db:ac:48:
         78:40:8a:f6:9a:45:63:99:9d:d7:ba:8d:d5:13:a9:dc:b3:62:
         7a:d4:36:85:f5:49:e3:98:85:04:04:0a:e6:76:b4:ba:5b:c1:
         c2:5b:11:ce:e3:a8:3a:cb:78:c6:49:70:a7:d9:e9:3f:04:ad:
         e6:76:d4:ed:1b:65:c1:54:7f:75:17:9d:26:bc:ab:a6:47:b7:
         d0:a4:3a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:00 2026 by rpki-client