Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File:                     BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier:          IDw1QQq85uNuAqU99+MRSibqbwDMLrsvsSeKbKcgne8=
Subject key identifier:   3F:53:25:2E:50:CD:B7:1B:04:79:D5:76:52:A7:82:CD:20:D7:60:A1
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer:       /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial:       01A0C5C539B1253A14622045A34547976B60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number:          18FC
Signing time:             Mon 21 Sep 2026 21:00:31 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:31 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:31 +0000
Files and hashes:         1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: E7BFI4KhvcqX2o3NeZfX4wUYDm179F/W2a+c4PVN/l0=)
                          2: n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa (hash: /LBumHatcMFGiSJpi+D4CNDkH6MVAePa519MRpuWiWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:39:b1:25:3a:14:62:20:45:a3:45:47:97:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
        Validity
            Not Before: Sep 21 21:00:31 2026 GMT
            Not After : Sep 22 21:00:31 2026 GMT
        Subject: CN=3f53252e50cdb71b0479d57652a782cd20d760a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:86:b2:74:28:5f:d5:d0:75:2d:8d:23:ee:
                    18:9e:42:bc:92:59:d5:19:34:6c:c4:98:4a:37:5e:
                    f2:86:c2:53:3b:21:6f:d8:21:a0:7a:25:dc:22:d5:
                    68:19:21:14:10:25:13:ba:bb:9b:20:77:1a:2b:48:
                    c1:ed:b1:b4:8f:58:21:6f:90:cf:b4:b5:b9:b4:ef:
                    a2:26:f6:62:9b:e0:7f:a1:7a:b3:15:24:58:01:13:
                    0f:0e:29:da:bd:f1:81:77:37:a6:f5:1b:70:53:d2:
                    eb:47:8b:94:2c:1c:8d:49:ea:d4:74:35:44:33:46:
                    83:bb:5a:19:c7:f0:a7:88:db:cb:d6:47:94:fd:77:
                    a9:49:11:c6:3d:fb:70:f8:ea:ee:30:cd:3d:66:b4:
                    c8:4c:84:bb:67:97:d4:f2:d1:cb:ff:12:0f:f8:32:
                    16:c8:fa:11:94:5f:93:f7:a1:39:4a:30:0d:3a:10:
                    04:73:e6:21:b6:36:18:f2:d3:34:f7:b2:50:e0:26:
                    3e:09:27:28:81:71:0d:ef:89:62:0f:23:7d:55:58:
                    a7:41:18:5d:32:cf:9b:6f:31:c2:23:18:ec:fc:62:
                    38:cc:3b:db:fa:96:f7:79:b8:30:21:ed:5e:a9:0d:
                    c1:35:7e:81:b8:ed:0e:98:55:7e:ae:fe:a2:70:59:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:53:25:2E:50:CD:B7:1B:04:79:D5:76:52:A7:82:CD:20:D7:60:A1
            X509v3 Authority Key Identifier:
                keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:fd:64:aa:35:63:4a:f4:72:2a:20:4d:8a:31:c0:fd:f5:06:
         92:79:38:0c:00:ca:25:f3:46:82:1e:e8:1a:bd:74:55:17:be:
         9c:b7:00:8f:1b:e8:06:da:e6:83:f4:c8:f1:03:a7:78:98:7f:
         51:42:3c:c6:05:02:a9:4e:01:b5:18:04:75:1b:e3:e1:a4:6e:
         5e:7e:c7:90:76:10:08:c4:8a:fb:66:4d:11:ec:05:39:40:de:
         ee:d8:96:9d:c1:29:a4:0b:7b:32:52:47:9a:04:fa:95:30:6a:
         04:c3:8f:b2:4e:2b:fd:f2:49:48:b7:b6:b9:23:9b:1d:6e:a5:
         32:f9:61:e0:43:09:0e:6c:6e:d5:6c:a7:a9:42:95:b5:03:b7:
         4a:1f:98:f5:b3:f5:f7:7f:02:01:a2:ec:4b:1a:a1:60:83:a1:
         74:61:9b:fd:7e:f0:2a:dd:6b:a1:e3:63:c0:08:0b:40:69:da:
         5f:16:6b:8e:80:7b:13:31:16:36:9c:3b:a8:19:51:08:ea:27:
         1e:36:81:8e:90:16:85:f9:9e:a3:4f:13:c8:6e:f9:41:8d:39:
         57:1a:71:62:fa:67:28:80:e4:61:ed:6c:03:a8:cd:fc:87:6d:
         f9:e6:ec:0a:a6:d8:b8:60:1b:80:68:54:1c:76:8a:bd:92:b6:
         e7:62:2b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:32:02 2026 by rpki-client