Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File:                     BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier:          FaUo8rgPObX4loBBymDfNs4poioR24CatoCjWWjQoTs=
Subject key identifier:   24:29:07:D0:E7:F4:35:8E:1C:8E:05:14:76:EA:4D:5D:FB:42:4B:EB
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer:       /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial:       01A0C74620CC32560C7BA329AA44E948E8EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number:          094A
Signing time:             Tue 22 Sep 2026 04:00:56 +0000
Manifest this update:     Tue 22 Sep 2026 04:00:56 +0000
Manifest next update:     Wed 23 Sep 2026 04:00:56 +0000
Files and hashes:         1: 00o4xaDHpiFteTUPLMlUN7rQVoI.roa (hash: ZRGfAq/Hq7q+igfCUvDc/UpA7zCnyl+OWfUsaj7F95E=)
                          2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: 43bzE2D6x1OZ1/mDCqv1/Nz54k9NxO7jtL65AZrNjtU=)
                          3: MvKa56Lh9HW9SL8NyMjhRYtv0qg.roa (hash: 3xT11vaLSNBdap8Lh9ldE026pM17b0YhoNdmRaGGcdM=)
                          4: WrMgI56WRjshSRrApL-slkKjgA4.roa (hash: 0BKk8cC15fl8RJL/MOhUkeA23XV4PJie7eRKpkT7taU=)
                          5: etH8r7e8XASDtw0AKt0yqnoZqpw.roa (hash: Ew9vIIGcLcL1KV1t2cyyHQVGMjP/TKGuie7BO0Z4Iyo=)
                          6: smKaRyBksPR8VVMeNllW4CrXk_U.roa (hash: dXCbu0CsSAQ16fQlnuw0mfD9ky7E36GElPP7CmVSu8Y=)
                          7: wh_A1Ywd9PlQ177YVaXtq3eGCuQ.roa (hash: 53+0yVnHLQ77916U1STNg9D9Toz5NayIfx2I9V3mCKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:20:cc:32:56:0c:7b:a3:29:aa:44:e9:48:e8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
        Validity
            Not Before: Sep 22 04:00:56 2026 GMT
            Not After : Sep 23 04:00:56 2026 GMT
        Subject: CN=242907d0e7f4358e1c8e051476ea4d5dfb424beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:e3:3f:64:b6:8f:9b:59:05:16:9b:fd:5f:
                    d1:d7:e0:db:74:02:0f:78:85:4d:dc:6f:14:6e:35:
                    9b:3d:51:16:31:0d:ba:55:22:85:7e:41:57:bc:0e:
                    cd:36:d9:ef:92:58:3a:34:42:95:62:ae:5a:62:f2:
                    79:66:aa:a3:dd:85:cf:f9:67:59:59:e4:d8:1e:0f:
                    27:07:e3:8a:88:29:06:0d:a3:3f:cf:7d:7c:ee:d2:
                    97:f8:9a:7f:f9:be:91:5d:fb:47:84:49:8c:81:81:
                    eb:8a:6b:f5:75:b6:8e:9b:11:1a:ef:fc:e0:7a:e6:
                    80:5c:30:fe:93:4d:40:f9:7c:33:bc:00:e3:38:9b:
                    c0:f5:fc:50:72:06:b1:87:8d:0c:37:37:12:7a:02:
                    4f:f2:05:8a:77:08:75:73:df:60:d5:fc:9e:01:e4:
                    30:91:80:cc:5a:83:3f:4f:40:d9:83:0d:76:d0:cc:
                    08:fe:b3:0a:42:3a:62:36:fb:78:5e:17:d2:01:90:
                    16:09:81:d3:b4:1b:75:62:cf:a2:5f:9e:f7:4a:bb:
                    ff:72:56:18:49:63:e7:62:8e:0f:cd:b7:4c:4d:96:
                    2a:33:8d:62:b9:e7:1d:1b:b1:28:f3:8e:9d:93:7c:
                    5f:51:fe:a0:15:98:3c:c0:19:ce:0c:e6:d1:06:7e:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:29:07:D0:E7:F4:35:8E:1C:8E:05:14:76:EA:4D:5D:FB:42:4B:EB
            X509v3 Authority Key Identifier:
                keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a9:b4:86:58:67:99:aa:4b:73:5c:c5:03:1c:55:46:85:aa:
         89:02:c6:11:46:e1:c4:19:4a:66:d9:bd:d9:3b:3d:f3:f9:1b:
         5a:49:a7:81:e4:99:a3:aa:ac:1d:81:33:56:17:0b:b5:d5:a3:
         87:7c:c0:24:fa:5e:e5:16:57:96:d1:45:66:d2:93:37:27:3d:
         31:8b:27:3c:c2:08:ca:2e:42:2c:60:8c:b2:10:a9:9a:bb:8c:
         f8:c9:89:b3:13:95:5c:81:7e:47:65:d5:a5:ec:d2:73:78:87:
         c2:4f:bc:65:c0:92:18:de:7f:1a:ea:47:5f:10:bf:7d:78:af:
         5a:d0:0e:4b:71:fa:c7:bd:7d:17:c3:94:2e:c2:d1:48:da:85:
         b1:b2:09:00:96:e5:34:fc:85:b5:9a:47:6f:8a:ff:b2:58:af:
         05:13:25:bb:18:30:db:ae:9c:3b:1d:0c:64:29:be:b1:a5:16:
         b0:fb:26:15:71:21:f0:7f:36:4f:e2:9f:a6:b0:32:aa:f1:a7:
         64:a6:00:b6:62:f0:ce:b6:4e:7b:04:da:3e:76:53:46:53:6a:
         98:43:a4:3e:70:61:46:7f:bd:53:f5:93:78:ad:70:1a:4d:10:
         03:bb:06:45:f7:42:ea:54:13:ad:21:68:a1:7d:3f:50:d9:52:
         74:63:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:12:18 2026 by rpki-client