Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File:                     1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier:          NBwa+fwVGmwOfAezqBCsdKBTFkV2/xcL8mnM3s1kBVI=
Subject key identifier:   BF:BC:9B:18:10:E2:13:E0:F3:44:27:90:CD:4E:DE:56:9C:18:4E:A3
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer:       /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial:       01A001A622EA182A2D14963A5465A2FBF6D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number:          10D9
Signing time:             Fri 14 Aug 2026 19:01:00 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:00 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:00 +0000
Files and hashes:         1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: 1RDrMEq4skT//GcE7B3sNN4SbVw1Zh9YcqvdyJyEl0w=)
                          2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:22:ea:18:2a:2d:14:96:3a:54:65:a2:fb:f6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
        Validity
            Not Before: Aug 14 19:01:00 2026 GMT
            Not After : Aug 15 19:01:00 2026 GMT
        Subject: CN=bfbc9b1810e213e0f3442790cd4ede569c184ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:ca:f6:1b:f9:2e:68:32:37:98:6c:63:af:
                    ab:6b:2c:23:03:50:9e:8c:53:0f:32:85:b5:ad:d3:
                    f0:ae:05:2a:7d:8f:60:f4:9d:b5:0b:84:3d:06:ab:
                    6c:70:01:51:07:a2:e0:49:fa:fd:df:df:38:f9:82:
                    32:7e:0f:f7:0f:3e:04:ba:12:da:d3:ac:2e:58:46:
                    65:4c:68:f2:9a:73:40:71:ab:29:41:62:39:24:f8:
                    70:53:12:87:bf:8e:fe:02:88:43:7e:9e:37:91:b5:
                    e5:91:b9:a2:a3:54:7a:c9:e9:30:9f:37:37:c5:65:
                    70:ea:2e:ff:95:f0:70:b0:ac:6d:0c:64:81:89:cc:
                    81:5a:cc:80:e8:85:1c:92:a4:47:50:87:52:01:2b:
                    eb:bf:03:70:6f:45:69:04:55:98:e2:c4:69:1b:2c:
                    a1:ed:91:7c:94:2e:17:80:01:1b:4b:a9:48:e1:47:
                    22:0b:8a:96:02:86:7b:34:e5:df:6a:df:f7:d5:bb:
                    b9:e3:c9:0c:db:20:5e:e8:4d:1d:38:36:5f:1c:58:
                    78:7e:33:90:f1:de:98:80:8d:46:0b:9e:35:76:49:
                    1e:93:ec:9d:e6:a8:06:ff:9a:ed:43:7b:0e:dd:6b:
                    fa:3c:9b:30:a1:91:42:4a:b0:ac:ec:1a:a2:07:2d:
                    fc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BC:9B:18:10:E2:13:E0:F3:44:27:90:CD:4E:DE:56:9C:18:4E:A3
            X509v3 Authority Key Identifier:
                keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:47:16:67:97:d2:b3:8c:3e:1d:35:b0:c1:f3:c8:6f:12:5f:
         0c:34:75:db:dd:5f:c5:e7:30:68:1a:46:51:12:1d:18:34:80:
         76:f2:08:d0:31:6b:fc:82:be:1f:c7:68:25:b4:f5:f8:b2:da:
         d3:2f:3b:0b:32:2a:f8:c7:82:6b:18:19:12:69:8e:40:2b:fe:
         99:8f:c3:79:9a:31:2f:9b:95:5e:fc:68:30:51:39:81:39:b7:
         dc:27:5f:a2:e1:74:dc:f3:12:27:01:cc:80:94:22:e1:c0:26:
         89:98:0d:49:3e:29:07:3c:d9:c1:d9:80:a4:7d:c5:6d:1d:5b:
         3b:f8:74:ee:4d:1d:3d:b6:c2:6f:2b:55:9e:3c:e5:f1:b8:a7:
         01:39:ea:2f:33:51:a0:80:0a:8d:91:0e:4e:47:f2:4d:69:59:
         68:16:fa:1f:c4:bf:cb:21:23:3c:85:3a:0e:ab:6c:8e:fa:10:
         1b:d2:66:cb:89:ee:d5:59:6e:10:de:24:dd:58:43:9e:a1:6c:
         ae:b8:08:ef:b1:7a:44:13:ff:47:9f:7b:30:6e:26:87:d4:49:
         74:a6:37:7d:93:81:05:cf:fa:34:40:3d:f6:26:59:b3:89:c9:
         08:1c:10:95:68:92:9f:0b:5c:7b:fb:9e:44:e5:e6:9c:9c:7c:
         e5:b8:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:42 2026 by rpki-client