Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File:                     B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier:          AklAcld4OwMPjmzkDBzIZg8t+zv0rDL4B7/YMjtVz90=
Subject key identifier:   A4:3B:C8:95:A8:99:FD:3E:3B:FE:12:88:10:AA:1E:C0:62:4B:2B:8F
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer:       /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial:       01A0005C84138F50EB92862764B068394434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number:          1570
Signing time:             Fri 14 Aug 2026 13:00:58 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:58 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:58 +0000
Files and hashes:         1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: 8fnKN7NGnOs0dj+UHP3IVigzolZv6zD22EyRON0l6+M=)
                          2: aj-7Q6-jz1X5ml3Zo_ezji9nyp0.roa (hash: ctiS31QHzRCLWu4eXUhOOHg5pxlmeJ2+c2/2FvVGuLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:84:13:8f:50:eb:92:86:27:64:b0:68:39:44:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
        Validity
            Not Before: Aug 14 13:00:58 2026 GMT
            Not After : Aug 15 13:00:58 2026 GMT
        Subject: CN=a43bc895a899fd3e3bfe128810aa1ec0624b2b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:6b:81:26:bf:e5:6a:eb:e6:97:46:50:7f:
                    ca:aa:64:fd:d8:7e:ff:e2:ef:51:01:6f:30:1c:f6:
                    b0:e5:67:e4:b1:dd:e9:4d:6b:bf:6b:fd:3b:dd:b2:
                    cb:48:19:31:fb:f3:51:f2:59:9e:39:24:01:af:09:
                    a8:c3:0a:c7:e6:c1:25:e2:5b:f2:74:d6:68:d7:39:
                    f9:13:89:47:e1:12:d2:d0:ce:3b:9e:ec:9c:e7:65:
                    49:4d:64:ed:3f:02:35:99:7f:eb:0a:71:6e:42:af:
                    b3:64:d7:6e:95:20:74:8e:b4:a5:93:27:5f:55:e8:
                    02:93:db:16:3b:18:7f:41:04:ee:3e:2b:72:99:c4:
                    4c:8b:b9:7c:b2:8d:c7:fb:e7:cc:3a:af:61:0c:67:
                    af:f2:76:47:18:4d:80:07:43:d5:8d:c5:81:ae:c6:
                    94:65:c5:20:db:ab:12:55:14:e0:12:bc:2e:b7:50:
                    b9:e1:81:d9:98:b5:4b:d0:e4:23:04:f7:b8:61:76:
                    d7:18:a5:12:ea:50:3a:6d:49:12:bb:53:86:27:69:
                    f0:d2:ca:4c:37:0b:ba:2d:a5:92:12:d8:3c:6a:e5:
                    19:c4:e7:23:bf:ad:8f:22:49:67:50:cd:46:f8:b8:
                    cf:4e:5c:5e:43:cb:fd:02:6d:f3:9d:d5:c3:d2:b4:
                    f0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3B:C8:95:A8:99:FD:3E:3B:FE:12:88:10:AA:1E:C0:62:4B:2B:8F
            X509v3 Authority Key Identifier:
                keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:9b:4d:97:18:57:9f:7b:07:a3:4f:5c:de:3e:5d:83:55:
         9d:ba:e9:fe:4d:79:88:3c:5c:f6:67:9e:c3:fd:d6:16:a4:c4:
         a0:c1:3d:47:29:df:b0:57:eb:74:f5:87:79:7e:79:70:71:58:
         c2:14:91:32:dd:94:01:7e:12:00:aa:03:11:bd:e2:cb:fa:5f:
         2c:0c:b7:83:f0:c2:18:56:fc:c4:61:aa:61:a1:05:b2:34:40:
         ea:96:2a:2e:c1:ff:05:34:9b:d0:03:1c:f9:bf:39:f8:0a:c5:
         4c:e4:f6:ac:c9:c1:b8:04:a2:80:a3:b5:15:2d:73:c9:5f:bd:
         49:ac:6c:cd:d7:fb:62:07:c1:26:22:b3:ac:63:6e:1e:f7:54:
         a2:44:a4:0a:2a:68:ce:bb:ca:3f:7c:63:de:92:2a:27:5b:e8:
         f6:5e:71:91:fa:c6:fe:ab:f3:89:e8:e8:a9:62:93:95:c5:0a:
         bd:66:25:b0:3f:0d:32:fe:c1:b8:34:2b:d8:10:ef:5a:18:b7:
         d5:c7:40:91:4f:a4:0b:4f:40:2e:1c:61:71:ae:aa:ea:5e:5d:
         73:e5:c6:bb:c4:8b:3b:33:96:82:44:12:ab:9b:32:6b:5a:85:
         c9:72:65:b7:db:b9:83:ab:ec:35:f7:df:2c:12:19:f6:87:ef:
         61:92:13:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXIQTj1DrkoYnZLBoOUQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OGVkMWEwMTUzNzYyYTkyMmU1NWUwZjk0OGNkMWE1NDEx
YzdhODkwHhcNMjYwODE0MTMwMDU4WhcNMjYwODE1MTMwMDU4WjAzMTEwLwYDVQQD
EyhhNDNiYzg5NWE4OTlmZDNlM2JmZTEyODgxMGFhMWVjMDYyNGIyYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh05rgSa/5Wrr5pdGUH/KqmT92H7/
4u9RAW8wHPaw5Wfksd3pTWu/a/073bLLSBkx+/NR8lmeOSQBrwmowwrH5sEl4lvy
dNZo1zn5E4lH4RLS0M47nuyc52VJTWTtPwI1mX/rCnFuQq+zZNdulSB0jrSlkydf
VegCk9sWOxh/QQTuPitymcRMi7l8so3H++fMOq9hDGev8nZHGE2AB0PVjcWBrsaU
ZcUg26sSVRTgErwut1C54YHZmLVL0OQjBPe4YXbXGKUS6lA6bUkSu1OGJ2nw0spM
Nwu6LaWSEtg8auUZxOcjv62PIklnUM1G+LjPTlxeQ8v9Am3zndXD0rTw2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQ7yJWomf0+O/4SiBCqHsBiSyuPMB8GA1UdIwQY
MBaAFAeO0aAVN2KpIuVeD5SM0aVBHHqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85MmQzM2MtOGE2OS00ZGIzLWI2Mjgt
YjYyZGI3NzJiYmZhLzEvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85MmQzM2MtOGE2OS00ZGIzLWI2MjgtYjYyZGI3NzJiYmZh
LzEvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+mbTZcY
V597B6NPXN4+XYNVnbrp/k15iDxc9meew/3WFqTEoME9RynfsFfrdPWHeX55cHFY
whSRMt2UAX4SAKoDEb3iy/pfLAy3g/DCGFb8xGGqYaEFsjRA6pYqLsH/BTSb0AMc
+b85+ArFTOT2rMnBuASigKO1FS1zyV+9Saxszdf7YgfBJiKzrGNuHvdUokSkCipo
zrvKP3xj3pIqJ1vo9l5xkfrG/qvziejoqWKTlcUKvWYlsD8NMv7BuDQr2BDvWhi3
1cdAkU+kC09ALhxhca6q6l5dc+XGu8SLOzOWgkQSq5sya1qFyXJlt9u5g6vsNfff
LBIZ9ofvYZITbA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:11 2026 by rpki-client