Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File:                     BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier:          /fetdgG65G5gwqvegzhUgDgHmFX1CTA7U3+UVDq5hOY=
Subject key identifier:   AC:E0:10:5D:2D:5E:56:B6:8A:F7:00:10:14:5E:4E:E2:60:62:C3:F3
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer:       /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial:       01A0CEFFA6432AFC7686413BCD11549884C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number:          0EAE
Signing time:             Wed 23 Sep 2026 16:00:55 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:55 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:55 +0000
Files and hashes:         1: Au-jxyk8yuPicdAFMz3eTjzm5xg.roa (hash: SVJvDVr8Okc0XBK6yuIGRkLBFvSr5vNFPiZyk64MGUI=)
                          2: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: Cx7MjW9TF3F7GI2C7Co1naTzIWgswCjd7xiQCgp99i8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:a6:43:2a:fc:76:86:41:3b:cd:11:54:98:84:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
        Validity
            Not Before: Sep 23 16:00:55 2026 GMT
            Not After : Sep 24 16:00:55 2026 GMT
        Subject: CN=ace0105d2d5e56b68af70010145e4ee26062c3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:25:78:c2:6f:09:06:df:80:7a:4a:f3:2d:
                    c6:f9:2b:d1:a5:f8:16:ac:32:3b:ec:e4:bc:43:87:
                    de:0e:a0:57:a7:ad:11:db:ab:71:60:86:ae:7c:07:
                    5b:40:16:f8:6b:a5:56:23:85:e2:b0:1a:70:1c:ee:
                    9d:39:a8:6c:d0:a2:9f:7a:7f:83:97:37:25:be:71:
                    f5:c1:09:20:d8:90:2d:8d:59:aa:98:9f:6d:63:90:
                    ab:e0:cc:ec:25:59:f8:de:44:0f:6d:7a:88:c9:7b:
                    f6:c1:e3:bb:94:86:16:e2:1b:66:8c:0e:e8:7e:d6:
                    84:fe:b7:f8:0a:c5:ef:1f:a9:60:30:7a:17:37:18:
                    ec:97:6b:89:68:e8:8f:59:04:29:16:92:7d:e2:ab:
                    d4:2b:41:d3:51:e5:29:2e:fe:00:ab:cc:71:69:6f:
                    e2:3a:ba:c2:98:9f:51:a9:43:6c:e6:56:87:15:e7:
                    49:b8:5f:3d:8e:28:c4:c3:bf:c5:8f:a1:cd:4a:3a:
                    63:12:ad:1c:30:3d:67:fe:1a:60:c5:a8:53:3d:9f:
                    9d:3b:81:87:ac:a1:03:6b:b4:96:f0:75:16:e0:fd:
                    87:f4:36:48:c0:86:d9:c1:08:99:94:9f:98:77:d0:
                    f2:2b:fb:ba:1b:d6:68:45:13:2f:45:f5:65:01:4e:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E0:10:5D:2D:5E:56:B6:8A:F7:00:10:14:5E:4E:E2:60:62:C3:F3
            X509v3 Authority Key Identifier:
                keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:82:33:96:18:0f:a2:32:93:1c:55:3d:67:7a:4e:af:f6:21:
         54:a5:91:b8:d7:e8:46:8b:58:77:94:60:0b:cf:f2:b2:3d:d5:
         88:60:e0:4f:df:95:55:7d:b4:9d:b2:28:71:2a:37:5c:cd:ac:
         37:48:a5:45:86:b4:cc:16:52:3a:81:a9:64:b9:aa:78:bc:68:
         82:9b:0f:25:2e:8e:b5:bc:7a:c3:89:2b:dc:cc:c5:b3:12:5d:
         2b:d7:e0:34:9b:0c:00:b3:9e:76:b8:1c:5c:5e:48:1b:3e:f3:
         d9:65:7f:b3:f0:f4:10:9a:a7:f9:33:0d:82:96:6f:07:7e:42:
         33:86:8e:07:10:79:98:72:7c:ed:98:0a:89:bf:77:3d:e2:b3:
         05:94:84:96:31:24:19:58:e0:19:e4:47:a0:4b:b5:4b:1c:0a:
         d4:98:ee:4e:4e:b9:fb:28:7f:f7:f1:f8:e7:fc:41:b6:0e:f9:
         94:40:17:30:ee:b7:bf:28:f6:77:e7:1f:37:18:0d:20:d5:77:
         47:b4:dd:7d:1a:5e:9c:3c:36:53:4e:3b:bb:48:c2:42:9e:3b:
         0e:9d:e8:31:68:30:f8:40:12:3a:6a:84:52:b1:3c:f9:b2:4f:
         84:4b:e1:46:17:92:62:82:6f:11:86:53:cd:35:db:31:dc:60:
         30:f5:84:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:51:19 2026 by rpki-client