Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File:                     B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier:          oNzSPoNowpZtQm0UcyHu4QsiaLHo0yIWo2gXpGtp+Hk=
Subject key identifier:   BB:5E:D8:0F:D2:CF:CB:AE:2E:73:26:CB:1C:BE:21:FB:54:4B:71:B9
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer:       /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial:       01A00101254EEEEFEF4A9312D4D17BDB195A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 16:00:47 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:47 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:47 +0000
Files and hashes:         1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: LDTaE4xHNSlTGmPyE9sYT0i/qIYtoRnvBAnYNz38FmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:25:4e:ee:ef:ef:4a:93:12:d4:d1:7b:db:19:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
        Validity
            Not Before: Aug 14 16:00:47 2026 GMT
            Not After : Aug 15 16:00:47 2026 GMT
        Subject: CN=bb5ed80fd2cfcbae2e7326cb1cbe21fb544b71b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:27:ae:a8:af:b0:90:93:aa:fe:b4:91:74:
                    fe:64:6e:ce:23:28:6a:66:b2:01:54:4e:28:4a:e0:
                    45:71:a7:af:a6:55:9d:ff:91:c6:34:ef:23:b3:5e:
                    fe:6c:0c:ff:63:61:8e:26:5e:e5:ea:d1:32:33:70:
                    0d:ee:33:4f:98:5b:77:6b:af:67:3d:11:74:6f:9d:
                    42:d1:49:2f:7e:2d:5c:d4:60:e8:b2:a0:1f:fe:7b:
                    0c:98:6c:69:24:b3:14:e4:11:0c:85:28:2c:b4:f3:
                    a5:bc:34:a7:9b:26:9a:46:f5:1d:c2:91:c3:e0:e8:
                    8a:44:03:b6:8d:03:cc:7d:69:e1:c7:15:2c:ba:74:
                    8b:b1:0e:8c:95:f5:25:21:23:63:39:08:57:ff:9f:
                    91:1b:96:89:fb:2a:ad:32:48:52:d8:bf:02:0c:24:
                    6a:19:2f:d2:26:27:4b:2c:36:c7:9f:3a:19:e7:72:
                    36:1e:ec:8b:93:63:8d:3d:6e:1d:07:00:2c:6e:5c:
                    f9:19:eb:bd:8f:13:7d:26:8b:51:28:b8:36:71:d0:
                    d1:2f:a0:23:0d:9f:07:92:ee:a3:cc:fa:2b:93:d4:
                    fb:8b:c6:a3:79:ab:37:c5:f6:ae:5a:28:c4:4f:2c:
                    d2:4f:ba:0f:9f:25:dc:6b:58:65:4e:60:eb:97:0a:
                    05:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5E:D8:0F:D2:CF:CB:AE:2E:73:26:CB:1C:BE:21:FB:54:4B:71:B9
            X509v3 Authority Key Identifier:
                keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5b:b5:32:95:67:fd:be:23:3a:c7:3e:f5:3d:a9:30:3c:f1:
         99:ac:a6:0f:ac:6a:88:5d:6c:dc:02:d2:46:04:06:68:f9:45:
         6d:cb:c4:03:e7:f5:5c:74:45:84:ca:a0:01:aa:ef:c5:1b:0a:
         ae:c7:96:97:2b:3c:74:48:c9:47:26:f7:22:2d:6c:59:18:51:
         a0:19:9e:79:a4:cc:27:db:b3:eb:7e:5a:26:9a:74:f9:44:6e:
         ae:ad:7a:3d:a6:8b:ea:5e:3f:8b:a0:f9:18:73:48:82:23:06:
         0d:76:5b:ad:0f:33:d1:a3:a4:21:3d:c6:0d:fa:f6:ff:4e:0b:
         73:0d:e9:fe:9f:c0:2d:dd:97:db:e7:b8:79:6a:92:18:42:9f:
         c2:d2:6a:1b:fd:cd:a7:4e:c6:ef:c5:ea:92:83:4d:8e:73:bd:
         1e:e6:b5:8e:9f:ea:4d:b2:9d:6b:bb:ce:a8:e3:21:7c:e5:7f:
         5a:41:73:f0:3d:21:90:5e:a6:ed:6e:cf:42:ee:72:e4:f4:24:
         a6:cd:29:0c:9f:11:a4:37:0a:fe:45:4d:dc:f3:d5:23:54:ee:
         d2:e7:5b:39:24:c2:c0:c7:6f:9e:50:af:11:6b:00:61:9f:43:
         d5:f7:03:b3:f7:a2:2f:02:ad:ea:25:22:57:44:a6:c0:86:ea:
         ef:04:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:21:07 2026 by rpki-client