Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
File:                     Ben594wsu8X6CLm4nwoR0rC6Rzw.mft (raw, json)
Hash identifier:          ZDZ9dB2RlF3/3gJHiHj+CGVKz8yf+oFEMASS92QmRvA=
Subject key identifier:   0D:1F:26:EF:AD:D8:AC:04:12:CD:A7:41:22:F2:5B:E9:C8:DE:88:6F
Authority key identifier: 05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C
Certificate issuer:       /CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
Certificate serial:       01A026C4E9F0E95C702E8DF2F7F271E6BCCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
Manifest number:          039C
Signing time:             Sat 22 Aug 2026 00:00:34 +0000
Manifest this update:     Sat 22 Aug 2026 00:00:34 +0000
Manifest next update:     Sun 23 Aug 2026 00:00:34 +0000
Files and hashes:         1: Ben594wsu8X6CLm4nwoR0rC6Rzw.crl (hash: owYewoa3oJGgndrdHz8pySMSU7tH0CtblVo0KEAk0L8=)
                          2: mhgKCJ1nvE6DH7QXTMvKJR_CaeI.roa (hash: oPOgwFYCUJXYrzGTQdio35gdM00ehjCiR2syxxKZ+aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:c4:e9:f0:e9:5c:70:2e:8d:f2:f7:f2:71:e6:bc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
        Validity
            Not Before: Aug 22 00:00:34 2026 GMT
            Not After : Aug 23 00:00:34 2026 GMT
        Subject: CN=0d1f26efadd8ac0412cda74122f25be9c8de886f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:a6:d3:71:45:20:cc:5c:49:f3:e7:a0:f7:
                    74:c1:ea:c9:89:e9:97:04:cf:ea:6b:4c:3c:23:6e:
                    fd:de:3b:6a:9c:2f:e2:65:25:30:70:5f:d0:0e:b1:
                    2d:a6:ea:f4:ee:a8:a8:69:1f:87:36:56:ad:a6:ef:
                    36:9d:8a:25:33:48:c1:24:68:4f:bd:67:18:ea:91:
                    fa:41:b4:c1:da:05:b6:6f:7b:3a:e9:a5:cb:c2:b2:
                    a8:29:55:e4:1e:92:db:9f:1f:af:96:30:8f:8e:56:
                    9c:86:80:0b:27:51:6e:a2:f2:2d:00:45:59:9d:4e:
                    ca:31:12:35:aa:36:24:d7:ac:0e:81:6e:fd:ce:22:
                    09:c7:0b:3e:f3:80:2b:80:d8:62:b5:f8:d2:03:7f:
                    59:55:4c:ad:87:d7:c8:ed:9c:40:9c:fb:a7:b2:c4:
                    f5:82:17:91:d0:dd:75:6f:d3:30:79:c1:6b:0d:9b:
                    78:82:16:7f:51:38:65:b8:56:21:5a:87:07:be:0c:
                    53:6c:f4:48:2d:b9:99:cc:11:0c:b1:e1:7c:e5:4b:
                    2e:dd:93:60:75:96:1c:79:71:66:55:02:a4:6d:53:
                    dc:62:87:bb:0b:07:79:6f:7b:d4:ab:75:32:4a:ef:
                    2c:0a:9d:ed:37:82:a6:79:f3:38:d2:4d:a1:fd:32:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1F:26:EF:AD:D8:AC:04:12:CD:A7:41:22:F2:5B:E9:C8:DE:88:6F
            X509v3 Authority Key Identifier:
                keyid:05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d9:08:60:77:a5:72:26:4c:8a:bc:72:12:48:28:c1:d5:38:
         f4:56:a9:99:cc:f6:33:8c:66:a2:fb:3c:50:62:14:67:b8:f4:
         cc:90:97:9f:23:ec:bd:12:aa:a1:c4:65:25:f8:3f:d0:16:6a:
         d1:e4:59:c0:f2:28:e0:00:f4:77:1b:15:0e:99:eb:85:28:56:
         16:b6:66:e9:7a:e8:7e:c8:34:64:17:f9:f7:08:80:bf:83:42:
         d0:98:89:41:f4:a1:aa:62:bc:ed:c1:07:70:ea:de:cc:ac:9e:
         9d:02:7f:48:be:1d:6f:53:ba:3e:f3:a2:01:30:41:78:63:5c:
         58:3a:dc:37:e9:9a:0f:46:5a:de:53:05:f1:ca:38:d2:5f:53:
         d8:8d:99:cb:06:39:35:7d:ba:bd:50:86:cf:76:ea:a6:89:be:
         21:ad:48:cc:38:6c:11:b2:d7:82:7a:60:eb:8b:09:3b:e8:ec:
         3a:22:1a:67:c7:87:a4:a5:a4:85:bd:9b:f0:dc:2c:26:73:e3:
         ad:93:9e:99:ad:17:69:55:c5:36:de:80:23:89:c8:ef:09:11:
         ba:a9:64:e7:22:8e:09:14:36:00:c7:f8:b3:0b:4e:27:0a:8c:
         67:bd:c9:e0:01:6a:fa:d2:92:52:d5:6f:fc:71:cf:ad:de:a2:
         bc:f4:63:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:03:00 2026 by rpki-client