Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File:                     Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier:          3uVdHu3GpPHVK42muXZSiDhJ+P8Zjueah/ZPuyNjSeU=
Subject key identifier:   15:E4:FD:C1:F9:23:06:82:1D:D3:C4:60:DD:C4:BB:3C:77:1E:EA:C0
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer:       /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial:       01A0C3D6FB929B4A6D3F002BE65FBA654986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number:          1A65
Signing time:             Mon 21 Sep 2026 12:00:41 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:41 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:41 +0000
Files and hashes:         1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: qeI3QMcAhE8DZUfOZYIk/Q7EsC4fjIHgykoG+zTki8E=)
                          2: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (hash: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d6:fb:92:9b:4a:6d:3f:00:2b:e6:5f:ba:65:49:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
        Validity
            Not Before: Sep 21 12:00:41 2026 GMT
            Not After : Sep 22 12:00:41 2026 GMT
        Subject: CN=15e4fdc1f92306821dd3c460ddc4bb3c771eeac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:09:1a:45:e6:58:21:7c:84:b5:dc:d7:48:
                    98:35:6e:33:53:a2:fc:14:05:ca:cc:07:2b:a4:d9:
                    62:9f:af:98:90:89:d1:d5:1c:ef:c2:9c:1b:75:b3:
                    5b:10:be:a0:61:7e:95:f5:26:77:18:81:f9:5c:c0:
                    6e:2b:6d:90:04:9a:7c:02:ac:66:d4:b0:7f:b7:32:
                    0d:9c:8c:6a:ce:bb:61:2f:b4:00:38:ae:26:45:c4:
                    4e:39:41:45:6f:10:9f:2f:dd:b9:de:da:9b:07:aa:
                    d4:09:cd:aa:25:ea:e3:26:39:da:7d:97:0e:08:79:
                    66:bc:15:fc:47:08:00:17:5d:54:8d:96:80:7f:30:
                    81:b0:67:8d:76:f0:e3:50:6c:ec:ee:99:9c:04:62:
                    ff:ea:98:27:ce:4f:da:ff:61:95:87:39:28:2a:60:
                    81:f7:ac:ce:0d:0d:36:3a:53:3d:c0:bc:cd:89:c9:
                    d5:69:73:6c:61:69:fd:db:d1:16:7a:d9:f4:53:61:
                    0e:ba:b6:51:41:26:37:25:45:17:97:46:3f:72:40:
                    60:c7:44:19:5f:a9:7e:88:b0:9e:2f:38:6f:e6:be:
                    90:4a:47:81:41:07:a9:82:62:07:5e:ec:7a:a7:d3:
                    09:d3:f8:61:f7:8d:de:ea:e7:d8:2c:80:42:fd:a4:
                    ed:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E4:FD:C1:F9:23:06:82:1D:D3:C4:60:DD:C4:BB:3C:77:1E:EA:C0
            X509v3 Authority Key Identifier:
                keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:29:eb:6f:d2:f1:84:8b:60:a8:c1:79:d9:60:d3:7f:6b:17:
         1c:a6:99:9f:44:08:00:e6:67:1f:ea:98:38:76:23:5f:87:62:
         fe:1d:0c:5e:f4:c8:81:af:ed:6c:60:e7:ec:f6:9d:a0:00:cb:
         f9:43:5a:65:74:6b:4b:46:c6:75:77:75:b4:55:a6:24:c7:f2:
         9d:c2:67:b1:a0:36:cc:ee:26:e0:bb:71:8e:8c:85:61:78:e8:
         70:6b:87:63:a6:95:15:cb:4a:4b:a4:9c:f5:af:b5:47:db:a5:
         77:d8:fb:72:b4:c4:fe:d6:38:b2:5f:ef:cf:19:8c:a8:f2:55:
         d8:b6:94:21:3e:68:ec:f9:bf:b9:1a:e4:6c:bd:20:7e:08:1b:
         5e:0c:85:26:9e:fa:8a:dc:d8:b7:84:d7:4d:fe:db:b3:84:bc:
         c6:72:bb:6f:86:59:d3:ab:62:cb:b2:ea:21:39:10:a0:b2:7e:
         8d:92:72:b7:ec:ee:eb:84:d5:34:8a:c3:03:8f:4d:f6:ac:c8:
         bd:cb:75:4b:ca:f0:07:99:d1:3d:f2:a3:4f:19:2f:4b:d1:74:
         51:01:28:fc:d6:20:0f:b1:f5:7e:34:ba:96:27:2b:82:03:3d:
         79:6f:f1:de:b3:27:20:37:6e:de:8c:e6:b0:c9:b0:fb:93:e5:
         05:0e:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:38:31 2026 by rpki-client