Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          5509AWjYjBm3HhxRsnK2A3djHImrZpT+GVWCqmnUxg4=
Subject key identifier:   AD:EC:7D:44:50:BF:AD:37:55:4F:3F:36:11:C9:C3:A0:4F:23:4A:E1
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       01A0C520667DAFA37B630B853E9C0D81B213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          074E
Signing time:             Mon 21 Sep 2026 18:00:29 +0000
Manifest this update:     Mon 21 Sep 2026 18:00:29 +0000
Manifest next update:     Tue 22 Sep 2026 18:00:29 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: vw5HDH1qv6OA1Xr9ecYNtAahp2PfOhC2xnEtDm1Ul6o=)
                          2: WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa (hash: c2NkdQLg1UmIOJ9gE664QKmmEytOaSIm+ZEQFc0pnYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:20:66:7d:af:a3:7b:63:0b:85:3e:9c:0d:81:b2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Sep 21 18:00:29 2026 GMT
            Not After : Sep 22 18:00:29 2026 GMT
        Subject: CN=adec7d4450bfad37554f3f3611c9c3a04f234ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:0b:cf:20:6e:9f:d2:6b:ea:5d:ac:c8:cc:
                    45:2b:6d:e5:28:81:a6:f1:d8:6b:3f:f0:1c:65:34:
                    c9:58:92:81:a1:52:6f:95:e1:31:ad:1b:62:67:d3:
                    20:25:ab:aa:72:51:ed:4a:02:34:73:c9:fb:6a:99:
                    f2:9c:de:b8:6d:c8:71:b7:f5:61:0d:10:b4:ec:b4:
                    8b:0f:61:e3:82:f3:6b:d8:6a:09:98:89:3c:eb:0a:
                    7e:b9:da:b6:5c:c9:57:07:46:bb:83:9c:15:f9:05:
                    9c:5a:53:7a:25:b6:87:8a:4a:40:29:cd:d1:2a:4f:
                    a4:31:f5:8e:8f:75:59:8b:c9:a8:43:51:27:64:6f:
                    3f:9f:b0:a4:30:0a:2c:af:b1:e6:fb:60:05:09:90:
                    44:b1:8f:0e:f5:22:7d:c6:90:1c:fb:ca:1e:52:7d:
                    12:43:12:ad:07:5c:f4:09:09:28:46:b5:2a:72:98:
                    00:63:87:9f:77:33:f3:65:58:95:9c:22:8e:67:6d:
                    89:f7:e2:bf:63:d6:3b:4a:02:b8:f5:36:43:b4:55:
                    b2:df:a1:f4:f1:79:e6:19:00:72:cc:39:9e:7f:33:
                    dc:e7:34:bc:c2:59:ca:3f:97:0d:7f:4d:6d:e8:4b:
                    8c:c2:02:52:db:84:c5:da:fa:d6:a5:47:c0:02:51:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EC:7D:44:50:BF:AD:37:55:4F:3F:36:11:C9:C3:A0:4F:23:4A:E1
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f9:98:83:aa:af:59:e1:66:d2:1e:84:f3:3b:b1:a8:f8:4e:
         90:ac:df:91:e5:e4:1f:5b:25:4b:ae:1b:3c:8c:d4:34:c5:f1:
         33:5a:92:94:2d:c7:85:b3:73:69:04:c5:df:6e:a9:d1:3e:2d:
         b6:72:fb:e6:53:08:b7:07:02:17:63:96:bd:56:d5:c6:29:29:
         8c:56:b8:92:47:38:60:c5:c3:69:c9:4c:00:6d:1a:c2:1e:35:
         13:be:20:d6:1d:06:0e:06:3c:a6:26:ef:3d:1c:2d:9f:1b:06:
         5b:de:e1:93:de:7d:94:de:a0:de:c2:03:c3:46:9c:8c:aa:6f:
         9d:3c:9b:68:92:a0:6e:e8:64:9d:5c:a2:2d:3a:81:7e:cb:07:
         08:ad:9b:24:a4:7e:04:dc:52:15:23:12:16:ac:27:ec:0c:47:
         9e:8b:b4:0a:2e:07:e7:6d:b7:54:12:af:38:b1:77:a6:7a:81:
         bf:d6:fa:f5:a5:f2:4a:41:11:10:11:32:86:e9:43:ab:5d:e3:
         5b:42:c9:7f:33:96:de:6f:a6:b0:7b:f8:cc:b5:8e:5f:68:99:
         6b:c6:02:c5:03:62:e5:6f:c7:2b:8d:0f:1b:0e:98:a2:03:0e:
         8e:04:d2:50:77:f1:96:17:27:2d:e7:69:fc:5a:7b:a4:e9:80:
         ef:bc:ff:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:09:48 2026 by rpki-client