Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File:                     B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier:          hB/LTMOvk/HoSJD8XWwjMemYoOJBMUNfNrH+Xty6x+I=
Subject key identifier:   23:95:A3:82:9A:2B:EF:1D:33:92:72:F8:0A:F8:36:89:8F:B0:08:0C
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer:       /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial:       01A001012F913AD99ED144CEF17BF6A85D3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number:          1495
Signing time:             Fri 14 Aug 2026 16:00:49 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:49 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:49 +0000
Files and hashes:         1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: mhjW+ZOpCuh5A3sbbJRWwMbeAXJu2qd64QS02kEfh2c=)
                          2: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (hash: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:2f:91:3a:d9:9e:d1:44:ce:f1:7b:f6:a8:5d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
        Validity
            Not Before: Aug 14 16:00:49 2026 GMT
            Not After : Aug 15 16:00:49 2026 GMT
        Subject: CN=2395a3829a2bef1d339272f80af836898fb0080c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:4d:c9:d9:c6:af:b7:1c:60:e6:b7:79:86:
                    2d:05:5d:c7:9d:8c:c3:c8:ae:08:4b:10:9d:e2:04:
                    16:17:16:8b:e0:78:f0:51:83:09:46:de:22:9e:aa:
                    71:5b:5f:1d:54:f1:a0:cb:f3:23:e3:e4:fa:04:7c:
                    2b:e9:92:b2:d5:1c:25:5c:73:fa:3d:04:01:14:f3:
                    46:71:d6:f1:1f:82:f8:55:43:a7:6a:5a:a3:8f:af:
                    64:a5:80:06:b3:b0:f2:10:e0:25:a7:1d:08:6e:b2:
                    be:63:cc:55:11:c0:d3:d8:60:b6:ab:6e:94:12:81:
                    fb:dc:8d:2e:79:f3:14:68:43:9c:ca:7f:97:fd:45:
                    02:de:5e:6f:c6:67:5f:85:2b:af:39:e8:0d:7a:7a:
                    06:aa:a5:53:e6:dd:bc:91:6e:d5:ff:2c:9d:80:a8:
                    13:e9:5f:0b:48:64:85:05:f4:55:31:b4:ae:3d:6c:
                    ed:02:e7:31:17:18:96:99:d3:bd:9e:76:58:dd:63:
                    09:2d:26:ef:f6:44:a9:e9:17:63:41:79:32:b4:e8:
                    cb:39:c0:a3:d1:d1:c5:a1:69:6f:fb:a9:41:63:cb:
                    25:77:b1:a5:c7:17:3b:9d:f9:9a:1b:50:dc:b3:7c:
                    5b:93:1f:45:b5:4b:24:db:90:ed:bc:e3:9c:63:da:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:95:A3:82:9A:2B:EF:1D:33:92:72:F8:0A:F8:36:89:8F:B0:08:0C
            X509v3 Authority Key Identifier:
                keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ed:07:27:6f:35:84:6c:09:4b:6c:be:dd:f7:c4:f5:55:bf:
         a5:83:df:b0:20:e6:b6:dc:02:ab:0b:7a:40:63:e6:37:2e:52:
         95:29:b4:6c:90:0a:62:e5:a3:d6:67:db:da:b8:97:c1:f7:18:
         2e:cc:09:b5:19:85:36:38:97:b9:1d:ba:59:78:57:96:7d:0a:
         53:76:98:de:14:94:63:1f:30:32:3a:fc:5d:33:5e:6b:65:f3:
         56:81:6d:6e:97:18:23:01:dd:a0:1a:33:8a:13:36:d7:d6:f2:
         42:a9:11:ec:71:23:97:7c:aa:be:f7:91:45:1b:38:21:17:85:
         fe:02:c0:81:4e:5b:4e:82:ef:72:0b:4c:b6:4f:a7:2b:4a:ff:
         9c:80:4c:60:c1:35:6a:30:39:16:43:b3:d0:31:3d:cc:4b:10:
         9d:e4:13:f8:93:25:5a:1c:2d:dc:34:16:6a:39:60:82:46:75:
         e3:c3:ce:7c:68:c6:f5:7b:0c:af:fb:29:27:ed:ec:c0:38:5f:
         78:17:f3:22:6d:ce:a7:20:b8:cc:7c:86:c3:de:1c:c2:7b:b2:
         56:14:2b:a8:d1:62:5b:b3:a3:a9:84:25:05:99:61:2a:6a:cd:
         9a:6f:8a:23:db:ec:14:b0:53:7c:d6:18:c5:c5:cc:b1:27:0d:
         49:b6:d4:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAS+ROtme0UTO8Xv2qF08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NGFkMjNhNGNmYTMxYjZkNTVlYmNhMTZjNWQxNGM0MDRi
YTZjYWQwHhcNMjYwODE0MTYwMDQ5WhcNMjYwODE1MTYwMDQ5WjAzMTEwLwYDVQQD
EygyMzk1YTM4MjlhMmJlZjFkMzM5MjcyZjgwYWY4MzY4OThmYjAwODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlZNydnGr7ccYOa3eYYtBV3HnYzD
yK4ISxCd4gQWFxaL4HjwUYMJRt4inqpxW18dVPGgy/Mj4+T6BHwr6ZKy1RwlXHP6
PQQBFPNGcdbxH4L4VUOnalqjj69kpYAGs7DyEOAlpx0IbrK+Y8xVEcDT2GC2q26U
EoH73I0uefMUaEOcyn+X/UUC3l5vxmdfhSuvOegNenoGqqVT5t28kW7V/yydgKgT
6V8LSGSFBfRVMbSuPWztAucxFxiWmdO9nnZY3WMJLSbv9kSp6RdjQXkytOjLOcCj
0dHFoWlv+6lBY8sld7Glxxc7nfmaG1Dcs3xbkx9FtUsk25DtvOOcY9rBSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOVo4KaK+8dM5Jy+Ar4NomPsAgMMB8GA1UdIwQY
MBaAFAdK0jpM+jG21V68oWxdFMQEumytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODkt
YzhjOTkxY2Q4OWQ1LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODktYzhjOTkxY2Q4OWQ1
LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYu0HJ281
hGwJS2y+3ffE9VW/pYPfsCDmttwCqwt6QGPmNy5SlSm0bJAKYuWj1mfb2riXwfcY
LswJtRmFNjiXuR26WXhXln0KU3aY3hSUYx8wMjr8XTNea2XzVoFtbpcYIwHdoBoz
ihM219byQqkR7HEjl3yqvveRRRs4IReF/gLAgU5bToLvcgtMtk+nK0r/nIBMYME1
ajA5FkOz0DE9zEsQneQT+JMlWhwt3DQWajlggkZ148POfGjG9XsMr/spJ+3swDhf
eBfzIm3OpyC4zHyGw94cwnuyVhQrqNFiW7OjqYQlBZlhKmrNmm+KI9vsFLBTfNYY
xcXMsScNSbbUIA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:10 2026 by rpki-client