Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
File:                     y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft (raw, json)
Hash identifier:          VEDUj7rUZsJEkAAq9RK+j4ztytjFwSw7qSPV4cJ6Gj0=
Subject key identifier:   15:67:9C:BA:E2:A8:9D:3E:F8:32:4B:E4:F0:91:9E:2D:68:30:14:F9
Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Certificate issuer:       /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Certificate serial:       01A02A6B9FA64163D4F3C4002024F34470FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
Manifest number:          1A15
Signing time:             Sat 22 Aug 2026 17:01:31 +0000
Manifest this update:     Sat 22 Aug 2026 17:01:31 +0000
Manifest next update:     Sun 23 Aug 2026 17:01:31 +0000
Files and hashes:         1: fuY0eZiF4-D_oLwAbv6Pt7dkgQ4.roa (hash: WEfF3aWq5wfrlLHXB6G+0nEFtQGvIp+E7rPqEt3iqlU=)
                          2: y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl (hash: nya9uSyS6mbdGcxQPbmBFR64QYYWIprqO9wXFPM774Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:2a:6b:9f:a6:41:63:d4:f3:c4:00:20:24:f3:44:70:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
        Validity
            Not Before: Aug 22 17:01:31 2026 GMT
            Not After : Aug 23 17:01:31 2026 GMT
        Subject: CN=15679cbae2a89d3ef8324be4f0919e2d683014f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:48:d4:39:de:50:36:fe:3a:14:7e:9b:15:df:
                    26:cf:35:3b:c8:74:80:dd:10:03:12:ce:24:c2:53:
                    dc:2a:80:6a:2b:af:14:da:61:04:c5:88:fa:43:60:
                    6a:c6:f5:e1:d2:a2:5e:e4:da:21:81:a8:33:04:86:
                    a5:22:49:24:6f:39:46:03:40:b4:ee:45:eb:34:ca:
                    ad:c6:ee:c3:0c:37:02:a1:19:39:22:7d:39:a0:68:
                    04:72:21:20:03:d4:1d:db:91:7f:ef:cc:8c:31:6f:
                    04:93:54:bd:96:9b:72:77:b7:5f:8c:f0:b1:64:bb:
                    ff:15:af:2e:d7:e2:c7:ab:1b:3f:21:0b:7f:99:47:
                    08:94:61:24:4c:4f:ec:9d:e5:76:f0:b6:cf:61:02:
                    9a:ec:5f:52:39:aa:ba:55:82:f2:33:65:82:bf:df:
                    6f:9b:03:01:0e:d5:b5:9a:03:7e:86:ff:df:cd:cb:
                    b3:9c:78:7e:00:f8:7d:be:56:29:7b:b3:90:bf:51:
                    20:dc:b3:19:60:98:6b:36:35:c2:70:39:0b:80:5a:
                    5b:60:7f:a7:d7:86:e0:d3:cb:9c:fd:b7:37:e6:df:
                    a7:b0:40:1b:a2:39:ce:64:d4:56:a7:52:6e:75:72:
                    42:c3:95:94:c4:f6:15:8a:39:e1:5c:c6:3e:df:58:
                    5e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:67:9C:BA:E2:A8:9D:3E:F8:32:4B:E4:F0:91:9E:2D:68:30:14:F9
            X509v3 Authority Key Identifier:
                keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1f:7e:b5:52:4b:d9:57:e5:78:e1:cd:5e:c2:c9:f8:a9:26:
         40:2c:6c:49:72:80:62:ab:43:8d:fa:08:a7:d3:46:85:86:51:
         54:bf:0c:d5:19:ef:46:c8:03:fe:b0:0d:5f:a5:b2:ef:a1:0b:
         dd:99:92:e8:98:44:e2:7e:33:4d:bb:b1:57:ba:1e:b3:bb:4b:
         74:e3:87:65:40:20:7b:d3:a5:35:be:bb:0b:86:1c:f6:11:86:
         b0:57:1e:b8:e9:32:56:0e:06:fd:5a:5e:8e:8e:57:6a:1a:a5:
         61:d5:ba:6a:2d:bb:65:48:93:87:44:20:2f:b2:17:5c:95:df:
         4c:db:b5:b5:1f:93:8e:2d:23:1a:73:26:cc:37:82:d2:21:a1:
         83:aa:d1:c5:e7:03:34:31:da:74:54:d9:9f:ed:f8:9f:52:58:
         c0:01:04:18:0b:a0:cd:13:54:5e:0e:10:2d:64:58:ff:4f:0b:
         d6:69:dd:4c:6a:c1:49:a5:e5:94:02:05:de:31:0b:f7:bb:0f:
         86:88:3b:51:20:9d:c2:db:fc:fb:da:aa:31:06:9f:79:65:fb:
         6a:43:f2:9d:42:e9:db:e7:73:d3:f9:f3:d4:ce:8d:7b:61:62:
         40:19:2d:9f:40:c0:4d:b9:2a:ba:95:37:c1:d0:ca:a2:c5:f2:
         8f:c0:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:22 2026 by rpki-client