Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
File:                     BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft (raw, json)
Hash identifier:          x6n3SUCRjSPRr/ZnMQRa6/WqaS5GyOoAxOUIACiV98k=
Subject key identifier:   40:32:0F:33:70:06:3F:BC:1E:24:55:2E:D8:80:61:B9:A9:EF:47:12
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Certificate issuer:       /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial:       01A0C47C84CF5076BDA855AE6B1C3FD9D42A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
Manifest number:          1A7B
Signing time:             Mon 21 Sep 2026 15:01:29 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:29 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:29 +0000
Files and hashes:         1: BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl (hash: jbmz2EAQQx7xHZr4R2h2Pu/0ZWId1a4oC4sns0Qgd/Y=)
                          2: _wXRGRg_6zlng_X2cu0Vdmyx740.roa (hash: qUv481U77SQNOCg85ZBm0jeo1hhfGdw3T12+hLvftSA=)
                          3: bj5wFXmeRPP2S1wVt1wMSe_BzEY.roa (hash: musfSfNeEvw07XmluOo2fmHJKdeOK5PAUZXeb2dFuaE=)
                          4: cigYLfuKfxY1dzhdPK0-Tor0nAw.roa (hash: Lf7RrTzPFxk/TGatTkwPWxsNBgC0IJVj7eeUQ31/4D8=)
                          5: gvw5yUDT8VkcGYmB4FemcY9F6Z0.roa (hash: qjzJbkJHWatioGBZd8+uDjCJfFJ0vYZMyqtFG/SE1vc=)
                          6: jkHAenTpuidnXByxveNkRSju7uY.roa (hash: cpn+ySzKd4iMnG4Jk2/pb+mw+Adqpv3Wll4fkTbcVt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:84:cf:50:76:bd:a8:55:ae:6b:1c:3f:d9:d4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
        Validity
            Not Before: Sep 21 15:01:29 2026 GMT
            Not After : Sep 22 15:01:29 2026 GMT
        Subject: CN=40320f3370063fbc1e24552ed88061b9a9ef4712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:8f:d5:f7:8f:42:a6:c0:13:92:d6:e7:6a:
                    03:4e:64:6b:be:b8:3c:e0:9d:80:e8:40:7a:2b:bd:
                    98:8b:2e:3f:d0:28:9e:07:7f:ff:50:25:db:1f:5b:
                    07:83:bd:90:0e:b6:dc:a4:f9:6a:ca:00:00:8e:2d:
                    70:a6:f7:16:80:32:08:10:2b:d0:da:8e:aa:1a:dd:
                    65:de:c4:b0:91:b7:72:3d:a7:66:42:9f:98:c5:55:
                    e1:52:ea:21:63:3b:d1:13:59:59:f8:69:90:df:17:
                    1c:ae:0f:92:5d:be:60:e4:2a:ba:cd:39:5a:52:40:
                    cb:5b:27:4e:5c:6e:48:51:d3:f7:6b:fe:6c:77:24:
                    04:5f:1f:66:26:1f:d4:16:d7:98:90:f1:13:bf:55:
                    aa:de:32:9d:0c:39:d4:01:5c:29:16:67:ea:cb:22:
                    66:1a:f6:08:51:e9:10:02:fd:48:49:94:0d:27:8c:
                    e9:d3:a7:68:45:3c:22:1f:28:87:46:81:be:51:b7:
                    1d:ed:eb:17:d9:b3:3a:ae:7a:1f:33:64:6e:ba:b6:
                    23:ee:b9:28:31:5c:ce:0a:4d:43:e8:ed:31:24:9b:
                    7c:46:e9:ee:db:53:ae:1b:d1:38:ec:72:dc:10:65:
                    09:7b:28:c6:88:ef:c3:cd:ef:e5:72:4e:a6:0e:89:
                    96:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:32:0F:33:70:06:3F:BC:1E:24:55:2E:D8:80:61:B9:A9:EF:47:12
            X509v3 Authority Key Identifier:
                keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f3:f7:ce:64:bd:28:be:92:0e:98:24:8f:d5:60:58:52:77:
         e2:6b:95:5a:b6:45:b7:30:f0:60:67:4f:59:f8:37:13:09:85:
         47:a9:ea:42:1d:b9:23:c1:41:e0:3d:14:91:45:0c:65:51:7c:
         c6:74:6d:f0:5a:5d:06:1d:96:d5:73:7d:5d:65:fa:ae:cf:4a:
         d9:06:23:a6:52:8f:42:c7:3f:b1:1f:1e:a7:87:90:5f:ad:ba:
         92:d7:56:3d:ea:79:c0:41:50:be:10:8c:35:1d:ff:eb:94:c7:
         32:dc:90:32:ed:87:14:9c:4f:fc:8b:f3:05:95:d0:4e:54:20:
         7c:33:5f:8a:72:f3:62:47:73:30:94:9d:67:9c:1d:64:83:90:
         f6:a3:51:b2:e6:a9:c7:16:cd:3e:3f:10:1d:a2:12:20:cd:50:
         da:ef:da:a5:8d:65:3b:0f:00:dc:f7:aa:7f:41:c3:33:f5:55:
         71:59:83:2c:82:9b:8e:64:11:8c:da:53:98:7d:d8:82:2b:e0:
         ad:43:02:9e:87:c1:96:39:f8:f4:5f:bd:48:67:04:52:f2:22:
         0e:44:52:8e:04:87:6c:4b:bb:2a:2f:2b:ed:7c:65:95:fa:da:
         0a:d4:5b:7c:57:20:9d:e5:af:93:42:73:70:23:4e:f6:b5:5c:
         a6:34:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:46:11 2026 by rpki-client