Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File:                     BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier:          i3t7BZtEIVzPJmvtM5afK7/uY0aNElDyLjYXilFXEk8=
Subject key identifier:   CF:4E:12:DA:84:AA:18:57:06:5E:FF:09:CC:BD:5D:E4:BD:FF:7A:AA
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer:       /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial:       01A0ED78D6CF62E8EA004DEEA9AF7440F473
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number:          0F31
Signing time:             Tue 29 Sep 2026 14:01:54 +0000
Manifest this update:     Tue 29 Sep 2026 14:01:54 +0000
Manifest next update:     Wed 30 Sep 2026 14:01:54 +0000
Files and hashes:         1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: I7nvWOilXRXUO60IrTDeO15dccdBJh0W6Bzn5FZ9fHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:78:d6:cf:62:e8:ea:00:4d:ee:a9:af:74:40:f4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
        Validity
            Not Before: Sep 29 14:01:54 2026 GMT
            Not After : Sep 30 14:01:54 2026 GMT
        Subject: CN=cf4e12da84aa1857065eff09ccbd5de4bdff7aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:41:fb:d4:db:af:50:44:e2:7c:3b:c2:85:d9:
                    7d:0a:cd:77:dc:5b:a8:8a:78:31:49:ca:1f:b7:cf:
                    0e:0d:ce:2c:bf:b8:1b:20:c9:9d:a8:75:95:59:0b:
                    77:b8:34:c4:72:f1:91:d2:54:fe:a4:89:65:af:77:
                    f1:71:a5:ca:9e:1b:ef:48:1b:b6:20:ce:e7:cf:07:
                    18:48:68:51:da:ff:5e:56:c2:16:87:ba:96:81:24:
                    b0:e1:2b:48:e5:4a:26:15:3c:96:9b:9e:0c:e4:58:
                    83:f9:55:fa:47:dc:cb:63:4c:a2:bb:84:e2:2e:0f:
                    4b:14:85:e2:b4:3e:8b:81:db:39:b2:c1:0e:b5:90:
                    cc:2b:f9:2f:e3:8c:50:ce:e1:30:f6:95:b2:39:8a:
                    87:e6:fd:96:a9:bb:99:c7:c5:eb:a9:4e:10:26:29:
                    08:28:57:ce:98:2e:16:5c:b3:b4:ce:a0:be:2e:14:
                    ff:15:d6:7d:bc:94:ed:cc:1c:f7:e8:41:9d:3c:b1:
                    77:9f:e0:66:ba:71:d1:b3:b6:72:cf:d2:6f:fc:e8:
                    5f:69:82:c1:f1:97:43:83:ec:5c:cc:e7:14:6e:9d:
                    34:3f:dc:8d:83:5e:be:ac:f4:7c:a0:5e:5a:87:14:
                    85:e8:89:ec:08:56:03:e5:5c:3e:d9:d1:af:c5:38:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4E:12:DA:84:AA:18:57:06:5E:FF:09:CC:BD:5D:E4:BD:FF:7A:AA
            X509v3 Authority Key Identifier:
                keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e3:73:2c:57:84:57:17:23:f2:63:a9:97:dd:b7:bc:e7:52:
         bc:95:60:98:0e:6e:14:79:91:18:77:19:48:26:46:8f:17:ac:
         ae:e5:ae:3d:3c:c2:fa:79:c0:78:0e:bd:29:ef:21:b3:e4:5a:
         f4:7b:16:01:a3:93:64:89:c7:ec:e3:71:c5:88:56:91:65:3e:
         23:9e:42:48:39:70:30:e1:83:66:43:58:b7:f8:47:12:39:02:
         8a:e6:04:e6:a6:ed:59:2c:a9:af:3a:ef:5b:00:3b:4a:58:0e:
         3d:0d:95:2d:b5:a4:6e:52:1d:ac:da:da:5b:e5:d3:fc:5a:4c:
         97:c9:fd:64:9e:34:08:2f:13:fc:0a:38:37:3b:ef:78:9e:77:
         8c:7b:dc:e2:d0:00:72:51:2e:41:66:68:80:b1:e8:ad:74:d1:
         05:70:24:40:1a:08:6b:f9:60:a1:3d:2c:7e:eb:c3:cf:9c:a7:
         a6:a6:4c:8f:f4:17:5f:ad:c6:1b:4e:ad:94:2b:ae:10:0d:2c:
         68:72:71:f0:1a:87:ab:49:50:35:67:03:f5:3e:31:b0:40:61:
         e9:7c:a7:35:eb:db:1e:58:41:1a:bb:2f:8b:9d:ec:dc:16:cf:
         85:4c:46:ee:20:04:bf:73:3b:43:23:f6:b2:35:2b:4b:4f:08:
         49:9f:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:39:08 2026 by rpki-client