Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
File:                     B0Rsf2NCHXPCj4ynf9LUo1chABU.mft (raw, json)
Hash identifier:          FPQTaqbZGyiSexZy4B6bZqqlZBmvCgauDAegzjoD+0A=
Subject key identifier:   B6:E1:B3:A3:FC:F6:07:CA:F1:F7:30:01:5A:6C:D2:77:4D:55:BD:0B
Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
Certificate issuer:       /CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Certificate serial:       01A0C8FD9E80AA3052FEC48E5F6901689044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
Manifest number:          19F9
Signing time:             Tue 22 Sep 2026 12:00:59 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:59 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:59 +0000
Files and hashes:         1: B0Rsf2NCHXPCj4ynf9LUo1chABU.crl (hash: tZaXyVHWUdmo/MIFlp9np5QEZXC/HABH/h1qcTd1JBo=)
                          2: vWaSI97YDOehiwDX9EtCVi1TGr8.roa (hash: qObHiQ/zhXEaIaP9YgXMKfb5GBmcR4gdeH2I3WxGujw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:9e:80:aa:30:52:fe:c4:8e:5f:69:01:68:90:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015
        Validity
            Not Before: Sep 22 12:00:59 2026 GMT
            Not After : Sep 23 12:00:59 2026 GMT
        Subject: CN=b6e1b3a3fcf607caf1f730015a6cd2774d55bd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:74:ca:2f:13:c8:36:77:a9:66:a2:67:5d:85:
                    79:6a:2c:88:a8:a9:c1:77:d1:64:eb:b6:2e:65:70:
                    65:bc:af:aa:09:dd:47:a9:05:ce:97:3a:df:bd:27:
                    f4:8b:2c:35:a4:76:b1:57:8a:96:4f:85:84:87:df:
                    cf:ca:82:76:7d:f3:71:84:12:f3:c2:58:6f:63:27:
                    5d:39:d3:0c:b0:d0:60:0d:5a:8c:bb:93:54:05:af:
                    c5:48:58:48:f9:62:55:5e:3e:34:06:6f:3f:04:04:
                    02:f6:b1:f5:f7:69:89:20:72:1d:27:72:9f:59:49:
                    61:f4:a7:06:8b:90:16:13:82:7d:8e:bb:77:1e:72:
                    1d:32:d9:e7:e6:18:9e:6a:b4:5f:c8:30:f2:49:7b:
                    c5:42:94:f9:b6:1f:2b:6c:86:29:a5:c5:17:4b:da:
                    6b:4b:e2:d6:80:6b:5d:24:5f:c7:eb:66:ab:58:38:
                    45:b3:26:92:5a:cd:75:89:a9:f6:6f:c7:f4:0d:32:
                    c2:cd:85:43:8f:4e:1f:01:1e:89:4f:ad:1c:f1:5b:
                    72:b0:5e:e2:05:d7:51:de:c9:f5:e6:0e:a1:5b:67:
                    1f:ec:7a:f6:b8:d0:2d:1f:f1:2f:fc:cf:c3:93:23:
                    a7:61:59:3a:08:f8:d9:52:f3:8d:f1:d5:cf:98:91:
                    f8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E1:B3:A3:FC:F6:07:CA:F1:F7:30:01:5A:6C:D2:77:4D:55:BD:0B
            X509v3 Authority Key Identifier:
                keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:eb:a6:d4:73:ba:ca:75:86:2e:97:83:38:5c:2b:e6:1a:
         f7:78:c3:e8:d1:9b:6f:f6:48:82:8f:0e:3d:b0:ee:65:6e:29:
         34:b6:34:7f:8d:d3:af:d9:36:42:09:cf:39:0b:f3:28:ce:09:
         30:7f:40:69:95:20:c3:16:ba:04:06:9a:36:01:0e:17:ee:71:
         69:17:b9:6b:cf:1a:a7:a0:87:8d:4e:c1:72:13:6b:e6:83:4e:
         ab:0f:19:35:33:08:02:53:13:08:b0:f0:16:96:bd:07:6f:0c:
         85:46:56:d0:10:13:de:51:ff:21:59:88:8e:97:3b:ba:57:0c:
         05:80:16:4a:76:2e:75:18:7a:8e:c1:7d:ea:c8:e9:2a:dd:be:
         0d:89:d6:c0:4b:e8:f8:93:00:af:23:f5:bf:3d:2a:b7:ba:c2:
         d4:bb:04:2e:29:5f:72:d3:9c:9e:1b:b7:de:4a:df:b5:41:f2:
         2c:30:07:fa:27:59:45:38:87:56:12:05:59:32:b3:8b:ab:a5:
         98:df:a0:31:20:e3:8e:73:3a:9c:32:96:bc:a9:43:11:30:27:
         16:13:10:12:9f:57:ec:26:61:89:07:00:5f:de:d5:c1:0d:6a:
         47:c9:e1:17:75:1a:a4:b5:b5:c6:38:8d:40:ef:0f:a5:af:5a:
         4d:c3:41:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:53:52 2026 by rpki-client