Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File:                     Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier:          erupQq1v6juZQ87Uk4kRsiraWkj+M4cNoLkR8sanKUw=
Subject key identifier:   0B:E9:2C:5D:2F:4C:72:36:91:17:31:B8:C1:C9:67:BB:7E:3A:EE:08
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer:       /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial:       01A1C0D3D6FBFDFBF440DB0CADAD6B55037E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number:          1AE8
Signing time:             Mon 09 Nov 2026 15:01:10 +0000
Manifest this update:     Mon 09 Nov 2026 15:01:10 +0000
Manifest next update:     Tue 10 Nov 2026 15:01:10 +0000
Files and hashes:         1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: Pny4U2Lsek5Jpfbxkvll4wULkUN6rdaqsU2aN8Z5QJg=)
                          2: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (hash: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c0:d3:d6:fb:fd:fb:f4:40:db:0c:ad:ad:6b:55:03:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
        Validity
            Not Before: Nov  9 15:01:10 2026 GMT
            Not After : Nov 10 15:01:10 2026 GMT
        Subject: CN=0be92c5d2f4c7236911731b8c1c967bb7e3aee08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9d:42:05:84:03:c1:50:09:fc:f0:2e:ab:c6:
                    43:7e:6d:23:4a:23:b5:7c:8f:54:c4:62:46:b4:4e:
                    7b:ac:9d:01:c0:29:a7:06:23:1c:9f:d6:e4:11:eb:
                    73:aa:11:ce:c3:f7:33:ef:c4:12:88:4f:91:84:f8:
                    8e:08:34:18:46:6d:33:07:8e:1d:89:04:9c:c6:f4:
                    e2:53:36:78:28:bf:79:78:f6:59:c6:f8:00:38:d8:
                    af:cc:cd:de:88:b7:4e:61:ea:05:b7:3c:85:1c:c9:
                    5e:d0:ed:20:83:f4:b0:c1:3b:1e:54:f7:fd:fe:95:
                    4a:28:0f:9b:12:01:9f:95:f5:a1:15:f8:03:f1:a7:
                    ae:62:75:f1:49:e6:8b:a9:43:5f:50:91:ab:41:93:
                    d3:b4:73:43:93:aa:58:3b:47:e5:1a:b5:30:72:96:
                    ac:1c:e6:f6:ee:e7:8a:2f:77:ee:0f:ca:28:4a:52:
                    4f:02:2c:9b:ff:4a:45:53:5b:fe:51:9a:59:3e:6f:
                    e6:ac:03:01:63:7e:cb:8f:58:a3:7f:7f:79:38:75:
                    01:1e:cb:14:b3:4d:19:20:a7:0b:d8:bd:ab:5e:d9:
                    e3:38:ae:6a:1a:b7:93:1d:9e:7f:4c:78:85:e4:37:
                    9c:a5:1d:b8:5c:51:d8:ac:d4:6c:1b:57:0b:d4:f3:
                    50:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E9:2C:5D:2F:4C:72:36:91:17:31:B8:C1:C9:67:BB:7E:3A:EE:08
            X509v3 Authority Key Identifier:
                keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:84:24:ba:c3:6e:95:99:18:82:e1:33:47:44:17:5a:33:03:
         ab:57:66:bb:ca:9f:4f:b0:98:5a:0a:36:b3:52:dd:e4:0a:fd:
         e7:1d:75:8f:cb:a1:32:1c:25:64:68:2a:f3:e2:a6:b9:24:39:
         c2:e4:81:81:fe:93:9b:46:fe:d7:10:80:d5:a4:11:dd:7b:4f:
         5c:7b:ad:5c:c9:cc:54:b3:d1:4d:6f:32:a0:a3:96:f7:c7:0d:
         d1:7f:9d:7b:28:ef:be:72:c8:92:1c:66:07:d6:0c:b9:68:76:
         d7:39:f9:d0:75:c4:d3:f7:bc:d7:70:da:8c:2f:7f:05:8f:b5:
         16:99:ca:19:96:fc:64:e2:60:ad:cd:84:cd:d4:a0:1c:ae:96:
         7c:c5:1d:40:8b:ae:88:f8:8b:00:75:6f:17:82:13:17:8d:c9:
         c5:b0:b5:47:57:c7:1c:d6:c4:e5:bc:30:93:35:83:da:a6:3c:
         1f:ae:3d:d6:97:6a:58:d0:26:08:73:05:6d:4c:ad:33:8f:71:
         af:38:38:09:94:6d:14:b0:59:1b:cb:de:84:9c:21:80:cc:76:
         79:a9:b6:30:a5:ef:2f:de:3c:33:53:93:21:a9:45:33:26:da:
         ba:be:b8:c5:ac:a7:5c:35:14:f8:06:ba:2c:d6:29:98:73:25:
         df:77:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 00:52:18 2026 by rpki-client