Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File:                     Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier:          PDWm/CEiimFoNiFRgTNTdjT8RSkSkVJjHnmIlB6vNKo=
Subject key identifier:   20:28:03:81:5F:34:C1:2F:35:EA:16:2E:39:E6:0F:06:43:87:17:F9
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer:       /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial:       01A00101809A7B39805FCF3D7569F8DA1AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 16:01:10 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:10 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:10 +0000
Files and hashes:         1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: KwB1I/RPRMv5V+M4/OzFbfn6Z1JVA7oj3s3cNjpWdpY=)
                          2: yko62gQUpDznk6pbTXdM7BFWgrg.roa (hash: 4X0+42FTN6ZFQiCpU0LUUz9jtfGgyphhCU+pgUNgAQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:80:9a:7b:39:80:5f:cf:3d:75:69:f8:da:1a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
        Validity
            Not Before: Aug 14 16:01:10 2026 GMT
            Not After : Aug 15 16:01:10 2026 GMT
        Subject: CN=202803815f34c12f35ea162e39e60f06438717f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:42:42:04:c6:e9:48:c6:32:a3:ba:34:79:
                    92:53:01:fe:be:17:cf:e0:0f:28:f1:e2:95:62:5e:
                    83:a4:37:62:89:e2:ea:05:eb:3e:f9:ae:3b:5d:f8:
                    8b:ba:12:50:60:71:c0:1e:93:4a:ad:ba:1b:de:1b:
                    56:e2:f0:27:4d:18:0f:b9:c7:02:ec:0e:da:00:63:
                    c3:d3:5a:76:58:c5:a1:0f:71:fe:3f:c3:29:6c:32:
                    02:c9:df:1f:fe:74:08:25:9a:42:52:45:d8:36:a5:
                    df:11:0f:a5:64:d1:e1:8d:d9:9c:ec:d8:3c:f4:61:
                    ab:a9:fd:6b:db:91:64:d0:22:5e:20:02:1d:f4:f7:
                    2b:71:d0:6e:42:d6:8a:4c:1f:06:ea:65:fd:50:ba:
                    b7:e6:16:7f:89:fa:a0:bb:2d:5b:08:a5:e5:92:5c:
                    7f:47:d7:16:29:c3:22:6f:94:f7:0f:0a:5a:b4:50:
                    99:21:8c:af:6b:f3:9e:29:95:1c:7d:c5:7a:21:2b:
                    e9:4a:69:63:40:2e:c5:1c:f9:28:71:f1:88:62:d9:
                    38:d0:f8:96:55:ff:20:1e:31:bd:d1:b2:08:9a:7d:
                    4e:98:fd:e1:04:59:a2:05:be:7f:9c:64:ec:44:fc:
                    79:33:5f:f6:6f:d2:7f:e6:e6:44:4f:e9:44:51:f7:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:28:03:81:5F:34:C1:2F:35:EA:16:2E:39:E6:0F:06:43:87:17:F9
            X509v3 Authority Key Identifier:
                keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:fd:fd:0d:a5:28:24:83:37:fd:15:31:aa:67:e6:22:55:
         34:9b:9d:1a:d4:44:3d:3a:f8:1a:bc:3e:9d:a3:d9:e0:dd:67:
         c2:0e:52:2e:6a:b7:53:49:65:23:04:99:a3:cd:60:47:e3:86:
         cd:03:63:44:c0:da:e8:f1:fd:97:ff:df:b5:bc:6d:95:0d:f5:
         3a:1e:92:ea:05:f4:25:48:7d:45:f8:e6:a6:e2:1e:c1:e3:2c:
         bd:89:53:21:fa:a4:b5:e3:57:83:90:b7:e8:d0:d1:f5:79:f7:
         12:eb:bc:10:ca:ee:c1:39:df:d3:96:68:3c:5f:c7:bc:86:b3:
         c3:e9:3c:f0:fe:18:04:36:9b:bf:98:53:82:8d:8a:69:63:1c:
         19:9f:55:32:e7:68:d8:f2:ed:48:30:0f:02:63:c0:40:40:70:
         66:4f:6c:a7:68:4f:5d:32:cd:17:b8:a6:8f:c5:2e:7a:54:ea:
         09:7e:12:04:93:22:06:2f:56:57:72:df:41:07:27:d8:20:b0:
         d3:98:be:92:18:b2:f9:d4:16:96:36:0c:5e:b0:33:8f:3f:a5:
         5b:ce:21:bc:31:aa:1f:d3:64:bd:07:73:32:79:33:0d:35:f9:
         98:4d:d1:f0:f9:99:07:54:73:07:e9:92:2d:94:e3:1b:3e:70:
         f3:2e:1d:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAYCaezmAX889dWn42hrmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NWM5ZmVkYjViNTQ0ZjY5NmVkNGRhZjEzNWIwMmRlZTZk
OTdhZjYwHhcNMjYwODE0MTYwMTEwWhcNMjYwODE1MTYwMTEwWjAzMTEwLwYDVQQD
EygyMDI4MDM4MTVmMzRjMTJmMzVlYTE2MmUzOWU2MGYwNjQzODcxN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaNCQgTG6UjGMqO6NHmSUwH+vhfP
4A8o8eKVYl6DpDdiieLqBes++a47XfiLuhJQYHHAHpNKrbob3htW4vAnTRgPuccC
7A7aAGPD01p2WMWhD3H+P8MpbDICyd8f/nQIJZpCUkXYNqXfEQ+lZNHhjdmc7Ng8
9GGrqf1r25Fk0CJeIAId9PcrcdBuQtaKTB8G6mX9ULq35hZ/ifqguy1bCKXlklx/
R9cWKcMib5T3DwpatFCZIYyva/OeKZUcfcV6ISvpSmljQC7FHPkocfGIYtk40PiW
Vf8gHjG90bIImn1OmP3hBFmiBb5/nGTsRPx5M1/2b9J/5uZET+lEUfe2JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAoA4FfNMEvNeoWLjnmDwZDhxf5MB8GA1UdIwQY
MBaAFAZcn+21tUT2lu1NrxNbAt7m2Xr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTkt
MThkNjkwMzY3NTNiLzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTktMThkNjkwMzY3NTNi
LzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHF79/Q2l
KCSDN/0VMapn5iJVNJudGtREPTr4Grw+naPZ4N1nwg5SLmq3U0llIwSZo81gR+OG
zQNjRMDa6PH9l//ftbxtlQ31Oh6S6gX0JUh9RfjmpuIeweMsvYlTIfqkteNXg5C3
6NDR9Xn3Euu8EMruwTnf05ZoPF/HvIazw+k88P4YBDabv5hTgo2KaWMcGZ9VMudo
2PLtSDAPAmPAQEBwZk9sp2hPXTLNF7imj8UuelTqCX4SBJMiBi9WV3LfQQcn2CCw
05i+khiy+dQWljYMXrAzjz+lW84hvDGqH9NkvQdzMnkzDTX5mE3R8PmZB1RzB+mS
LZTjGz5w8y4dfw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:59 2026 by rpki-client