Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File:                     u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier:          Re/TalYGEv93EZSaF8Hft4AGfHsQA0ZeIXLb+bZ6GQ0=
Subject key identifier:   49:22:36:EF:8F:0B:9B:82:EE:98:A3:B7:BA:2D:EA:FB:82:5C:12:8D
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer:       /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial:       01A00281802AAD617609394CA1D6AE8E390B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number:          1A05
Signing time:             Fri 14 Aug 2026 23:00:36 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:36 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:36 +0000
Files and hashes:         1: dK7BHFnWg4Ak5BA73uAKBbgJyrU.roa (hash: h8SstddteIMfyTQvh7qKg5ql0pCJQQ+o3Yc6Ve2+nJo=)
                          2: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: c9ZkLfZ/9moSe7HPIBbUVpRLqdbqG23/eEK3NKAcgNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:80:2a:ad:61:76:09:39:4c:a1:d6:ae:8e:39:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
        Validity
            Not Before: Aug 14 23:00:36 2026 GMT
            Not After : Aug 15 23:00:36 2026 GMT
        Subject: CN=492236ef8f0b9b82ee98a3b7ba2deafb825c128d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:f1:75:24:14:e4:52:20:95:ce:2f:6b:f7:
                    af:0c:c2:95:da:47:a3:f3:a7:dc:7a:b8:a2:09:83:
                    63:b8:54:f0:5b:d9:fd:f2:a1:6f:8e:4f:fb:39:b0:
                    98:c3:1e:87:3e:e9:fe:58:61:f3:af:6b:11:52:82:
                    21:f1:ee:88:ac:6b:cd:3f:fe:ef:a7:9f:b2:c8:8b:
                    41:ed:93:11:c6:24:d0:e5:1e:e7:1b:71:b1:f5:bd:
                    e9:46:29:4e:e0:e9:51:ae:4d:b7:5e:9e:2d:17:91:
                    fb:f0:09:4f:72:01:fd:74:a2:97:61:5f:20:28:86:
                    aa:09:05:1a:e7:54:c3:72:04:0d:d1:a4:be:99:5a:
                    ab:87:27:46:5e:73:8b:5f:82:a9:e5:94:96:48:1c:
                    86:ae:6a:fc:0a:8e:32:40:6d:78:94:ec:63:cc:cd:
                    15:92:47:57:6b:6c:00:d0:38:85:56:75:c5:9e:f6:
                    ba:d8:29:33:17:27:2d:ab:a4:0a:42:35:fc:d5:bf:
                    41:1c:eb:a6:82:d4:02:4e:10:c5:df:26:67:c8:ee:
                    22:2b:53:1b:53:bc:24:d9:12:9b:78:2d:fd:5a:e1:
                    e5:46:49:b6:57:17:2f:f7:4c:e6:27:fd:60:be:39:
                    4c:1f:7f:1f:81:ec:84:1b:c4:ac:14:06:1d:10:51:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:22:36:EF:8F:0B:9B:82:EE:98:A3:B7:BA:2D:EA:FB:82:5C:12:8D
            X509v3 Authority Key Identifier:
                keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:04:64:17:09:97:6a:63:d6:58:ff:58:b0:89:65:48:87:
         70:cf:15:69:17:6c:b4:df:cc:e3:36:29:fe:98:75:89:66:40:
         2f:e3:e5:ea:fe:ca:e2:fc:6f:a7:b5:f6:e8:42:ca:4b:a1:e2:
         2a:f9:eb:73:3d:e2:4f:e2:7d:01:ba:d8:ed:58:30:fe:6b:53:
         b8:8a:90:d0:99:2b:b6:14:66:c1:24:3a:c9:f4:b7:31:8a:e0:
         d4:ea:9b:4b:ac:71:a7:74:64:a7:08:26:66:bc:36:5f:2e:1d:
         d7:4c:bb:ba:8f:0e:f0:c6:3d:c1:b7:76:27:f0:e7:55:b8:90:
         fb:e2:0f:94:0a:62:ce:fb:af:8f:3f:b9:bc:b3:a0:a5:47:a0:
         d1:ba:5a:b8:b8:10:cb:77:09:c8:54:db:25:da:3b:9e:4b:2e:
         24:fb:98:90:69:50:64:62:b5:39:b6:b3:72:2e:eb:83:f4:19:
         51:58:75:a7:d2:ef:43:9e:cd:ab:27:9a:02:f0:12:72:41:90:
         fd:2b:c3:90:46:6b:a8:bc:b9:c5:17:6e:c4:20:33:74:38:87:
         61:1f:c6:25:d3:13:ec:5b:f3:b9:f1:80:5d:a9:58:ae:e5:3a:
         f0:26:63:c9:cb:28:6d:da:d4:1f:60:48:0c:4b:f0:ec:5a:0f:
         2a:0b:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:07 2026 by rpki-client