Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File:                     BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier:          yWeY/3PvSxjIHCjKDmp9Vr/ItFkYmW2ARfz9g70YTxs=
Subject key identifier:   72:7C:34:34:52:64:5F:77:0A:54:97:44:CA:68:0B:B1:45:E3:64:5A
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer:       /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial:       01A0C58E373F597FDD8BC3F0DBD5A8880A24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number:          19FC
Signing time:             Mon 21 Sep 2026 20:00:26 +0000
Manifest this update:     Mon 21 Sep 2026 20:00:26 +0000
Manifest next update:     Tue 22 Sep 2026 20:00:26 +0000
Files and hashes:         1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: 2BVCYFusmxPFS3CmtvOmSUPArZQbIWaL3Gz3VBU6cdE=)
                          2: xhF6836ZAZ1v6FMBtDsruSd1XhM.roa (hash: CMajZTVB+UvtUZM05scLZACQyLK6q2OoOtMJquT+J6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:8e:37:3f:59:7f:dd:8b:c3:f0:db:d5:a8:88:0a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
        Validity
            Not Before: Sep 21 20:00:26 2026 GMT
            Not After : Sep 22 20:00:26 2026 GMT
        Subject: CN=727c343452645f770a549744ca680bb145e3645a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ab:78:a6:7d:f9:53:e6:24:da:8b:cb:b9:0a:
                    3d:81:82:47:f1:4b:fe:42:da:f5:b4:ae:54:ee:fa:
                    f3:a3:f0:a2:aa:33:26:95:9d:96:18:b1:c9:91:a8:
                    f2:03:9d:b3:61:77:b1:5e:a8:79:65:30:6e:7b:5b:
                    82:5b:8a:f0:4f:00:35:85:a2:69:60:53:b1:0c:a9:
                    8f:35:8e:37:13:c9:2b:47:4f:16:d0:cc:74:6a:d8:
                    73:4c:3b:32:75:93:71:28:82:bc:9a:91:a2:a1:7d:
                    3f:a5:cf:87:17:3b:bd:8e:3f:40:85:99:c9:28:b1:
                    dc:ac:b2:0b:16:a8:39:0d:44:44:89:42:54:cd:a2:
                    1d:5a:13:f2:75:ec:bc:8f:af:f5:9d:8f:da:5b:31:
                    a7:19:01:9f:e1:39:bb:84:6c:45:63:b5:f9:8c:0f:
                    e5:82:dd:03:f4:5e:84:f2:fd:62:52:8d:f7:b3:ec:
                    2c:e8:99:8e:35:74:8c:6e:4e:43:0d:a6:65:6d:f8:
                    69:02:3e:04:52:15:e0:09:12:4f:8d:08:4d:27:2e:
                    38:0c:25:e5:b6:ec:b9:26:85:97:2e:c3:65:0c:62:
                    33:9d:41:01:30:78:73:d1:fd:88:a2:c9:8e:47:65:
                    a4:75:34:13:69:c9:72:b3:e1:a7:74:f1:57:d7:52:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7C:34:34:52:64:5F:77:0A:54:97:44:CA:68:0B:B1:45:E3:64:5A
            X509v3 Authority Key Identifier:
                keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:43:3a:d5:d7:d1:83:6f:08:30:55:0b:87:ff:4a:02:90:bd:
         c8:8f:45:59:f5:88:3d:57:2f:b0:2d:8c:b2:e3:d7:38:03:41:
         ea:99:e4:f7:30:c0:31:45:33:e8:73:16:33:e6:1d:7d:ea:89:
         05:cb:58:f1:d0:af:fc:df:07:df:50:a5:40:90:3b:8f:65:d4:
         29:21:ab:76:97:67:0f:a3:d7:03:55:a2:ee:05:c5:88:4e:7e:
         7c:cf:ba:ee:81:b4:f4:2b:0e:4d:19:08:9e:5c:94:ab:42:a5:
         15:6a:95:6d:51:33:6a:b3:cf:94:68:8f:e3:42:ff:69:31:f9:
         7b:56:64:75:ce:fa:17:e6:d0:c0:e0:c0:03:ca:02:30:91:5e:
         bc:ae:0a:ee:5b:49:af:47:4b:77:a8:7e:d6:8d:92:46:d5:da:
         88:6d:53:9b:8a:d9:fe:7e:7c:07:9e:c7:0b:fc:6e:5b:d0:38:
         e7:1a:41:9a:1d:87:b4:42:5c:d9:d2:fb:2c:2c:33:4e:45:03:
         42:28:94:5b:23:6f:4d:0d:1d:78:31:91:50:03:31:9b:65:3d:
         3a:13:71:c2:7e:1d:2b:8d:65:a1:c6:80:4a:ce:7e:f1:ce:bc:
         52:c8:52:ef:17:de:cc:c0:c6:d2:be:15:5e:95:4b:2c:56:0b:
         2e:b7:34:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFjjc/WX/di8Pw29WoiAokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2M2I2NjBmNTY5YjU0NmI1MzBlYzZkZTY5YjMwOGIzNjkz
ZTdmNzQwHhcNMjYwOTIxMjAwMDI2WhcNMjYwOTIyMjAwMDI2WjAzMTEwLwYDVQQD
Eyg3MjdjMzQzNDUyNjQ1Zjc3MGE1NDk3NDRjYTY4MGJiMTQ1ZTM2NDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26t4pn35U+Yk2ovLuQo9gYJH8Uv+
Qtr1tK5U7vrzo/CiqjMmlZ2WGLHJkajyA52zYXexXqh5ZTBue1uCW4rwTwA1haJp
YFOxDKmPNY43E8krR08W0Mx0athzTDsydZNxKIK8mpGioX0/pc+HFzu9jj9AhZnJ
KLHcrLILFqg5DUREiUJUzaIdWhPydey8j6/1nY/aWzGnGQGf4Tm7hGxFY7X5jA/l
gt0D9F6E8v1iUo33s+ws6JmONXSMbk5DDaZlbfhpAj4EUhXgCRJPjQhNJy44DCXl
tuy5JoWXLsNlDGIznUEBMHhz0f2IosmOR2WkdTQTaclys+GndPFX11L8FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJ8NDRSZF93ClSXRMpoC7FF42RaMB8GA1UdIwQY
MBaAFAY7Zg9Wm1RrUw7G3mmzCLNpPn90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQt
YmMyNWFlNmViMTNjLzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQtYmMyNWFlNmViMTNj
LzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0M61dfR
g28IMFULh/9KApC9yI9FWfWIPVcvsC2MsuPXOANB6pnk9zDAMUUz6HMWM+YdfeqJ
BctY8dCv/N8H31ClQJA7j2XUKSGrdpdnD6PXA1Wi7gXFiE5+fM+67oG09CsOTRkI
nlyUq0KlFWqVbVEzarPPlGiP40L/aTH5e1Zkdc76F+bQwODAA8oCMJFevK4K7ltJ
r0dLd6h+1o2SRtXaiG1Tm4rZ/n58B57HC/xuW9A45xpBmh2HtEJc2dL7LCwzTkUD
QiiUWyNvTQ0deDGRUAMxm2U9OhNxwn4dK41locaASs5+8c68UshS7xfezMDG0r4V
XpVLLFYLLrc0IQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:41:47 2026 by rpki-client