Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File:                     v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier:          keuV58i6Q4hkxMLE7tHxSGZQwFwA3PZ1wPeJ74/h1tw=
Subject key identifier:   29:C7:18:B2:DF:B3:49:27:72:D2:05:13:05:57:D3:A2:E8:CB:BF:CE
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer:       /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial:       01A010AB0DE12AD6FE8223143248D9B1BE03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number:          11B9
Signing time:             Mon 17 Aug 2026 17:00:40 +0000
Manifest this update:     Mon 17 Aug 2026 17:00:40 +0000
Manifest next update:     Tue 18 Aug 2026 17:00:40 +0000
Files and hashes:         1: GQ7W42EsElCP2Qj0UZVoRC5t9II.roa (hash: /UuepQO5GWEwYKHxizYeXgs9DYCR+SoHKZBIXXza2Jk=)
                          2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: PVdzSoNKDsd4FRhnuIdpARQD/3NrUpQuV9td+Z3S+rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 17:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:10:ab:0d:e1:2a:d6:fe:82:23:14:32:48:d9:b1:be:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
        Validity
            Not Before: Aug 17 17:00:40 2026 GMT
            Not After : Aug 18 17:00:40 2026 GMT
        Subject: CN=29c718b2dfb3492772d205130557d3a2e8cbbfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:49:e0:24:09:b3:8a:7d:50:f7:da:94:ee:27:
                    9b:32:59:48:b6:a7:87:8a:dc:69:31:33:fd:02:8f:
                    48:d5:fd:67:da:87:c7:ea:d6:f9:22:b3:d7:80:80:
                    ae:8c:62:93:5e:47:7a:4f:05:ff:cf:f3:b9:11:f8:
                    21:e3:1a:af:f5:1f:2a:19:fe:67:26:45:b3:62:ac:
                    11:f9:fd:26:32:db:f9:8c:09:51:c0:45:18:8a:60:
                    4f:94:d9:0c:ed:63:d3:69:2a:9d:0b:84:9f:5e:30:
                    eb:9b:19:7f:68:cb:5e:6f:ab:cb:0b:9b:be:0f:af:
                    61:8d:c5:5d:2a:90:4e:a0:3a:ba:c8:32:cd:8b:06:
                    c0:fb:f2:6f:bd:84:6e:a2:f1:82:bc:a9:42:b1:2d:
                    50:8e:b2:e6:8d:55:54:cb:2f:b7:6e:5e:47:df:ae:
                    65:1a:98:e1:89:f9:9c:aa:f2:7e:93:53:f1:83:48:
                    59:5b:4b:93:f0:30:85:24:37:57:3d:71:4e:72:62:
                    fb:78:5e:15:51:66:91:19:04:30:d1:1c:05:dd:60:
                    48:93:4a:f7:62:b3:70:de:84:55:d3:31:81:ea:f6:
                    d0:c6:07:60:73:11:35:c0:c9:6f:01:21:06:17:61:
                    c7:ea:08:4c:3f:27:f5:b4:30:36:fa:65:43:c3:cc:
                    ce:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C7:18:B2:DF:B3:49:27:72:D2:05:13:05:57:D3:A2:E8:CB:BF:CE
            X509v3 Authority Key Identifier:
                keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:61:4e:ae:66:22:a2:db:36:7e:a8:1d:19:46:ac:cf:7a:5c:
         0e:d8:a2:54:62:12:f9:a4:f7:3d:89:57:84:21:21:a4:56:f6:
         32:d6:86:f0:3b:ee:e0:b6:ee:1c:d5:06:5a:df:9a:40:18:66:
         de:e4:b9:03:80:4a:ec:f5:dc:38:40:a0:42:df:d2:8b:a4:99:
         7f:ed:a9:48:0a:64:68:6b:cd:9f:9d:49:b5:9c:83:53:5e:a8:
         80:04:af:f8:80:b6:4d:2c:f4:b9:f3:c6:c7:ff:1e:a2:64:38:
         88:2b:2a:a9:f8:92:ce:55:03:a2:c2:e4:54:6e:a3:60:85:09:
         98:c4:19:6d:4d:6f:f7:73:4e:e2:2a:7d:95:53:12:52:e9:e1:
         e9:29:35:f8:84:18:7c:08:5d:66:c0:a5:fb:b8:e6:61:f7:d7:
         9d:97:70:d4:fe:d0:1b:11:5b:2d:f6:21:44:8c:7f:75:63:94:
         5d:8e:cd:4c:08:3d:ee:55:62:34:1c:13:47:f0:73:5c:71:d6:
         60:38:30:e3:11:cf:d2:89:49:73:71:ea:42:84:9c:ba:1b:d6:
         d8:af:e4:92:f4:3d:fc:f7:60:53:62:0f:4f:87:eb:26:26:7b:
         99:71:bb:58:a0:93:9e:b5:3c:0a:69:ed:b1:bf:40:3d:1c:f8:
         37:06:b8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 01:07:35 2026 by rpki-client