Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
File:                     0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft (raw, json)
Hash identifier:          R0aLVRsPVDGWXTmi3el+FquIZ9BIJQp67Ryy3/5w+VE=
Subject key identifier:   18:96:B3:78:23:CB:4B:E1:DD:9A:B5:95:78:20:AB:7C:88:F4:C3:96
Authority key identifier: D0:19:F4:15:FC:29:CC:12:FA:02:6A:C8:3D:31:00:F6:E2:09:21:48
Certificate issuer:       /CN=d019f415fc29cc12fa026ac83d3100f6e2092148
Certificate serial:       019FCD4BA8848A965F4349DEA973D983C6F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
Manifest number:          5F
Signing time:             Tue 04 Aug 2026 15:01:55 +0000
Manifest this update:     Tue 04 Aug 2026 15:01:55 +0000
Manifest next update:     Wed 05 Aug 2026 15:01:55 +0000
Files and hashes:         1: 0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl (hash: WDtH9FAxE8n9OYYHYgKvCJdquxwL6az5aGC6a0AiK1E=)
                          2: k2lMS0v-8ZOf1E11BS_9RMujfm8.roa (hash: JibFIlzou9UGAFwxOZbWBeEjMFoRGWPGctFSJs0fRL0=)
                          3: tBJ6g2XuB0MmvtUrV3mMYaonUfs.roa (hash: jt5pW5SGqOIlEHsV/lDRSmGfV+5btvSi3I+Lq6T23f0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 15:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:4b:a8:84:8a:96:5f:43:49:de:a9:73:d9:83:c6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d019f415fc29cc12fa026ac83d3100f6e2092148
        Validity
            Not Before: Aug  4 15:01:55 2026 GMT
            Not After : Aug  5 15:01:55 2026 GMT
        Subject: CN=1896b37823cb4be1dd9ab5957820ab7c88f4c396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:fd:f2:e7:78:33:eb:cc:74:ec:e3:aa:88:
                    39:9b:0f:c4:ba:4c:a2:fe:4d:0b:a8:a2:2e:1b:67:
                    09:c6:b4:bb:76:ce:9d:7c:ae:d3:0d:62:87:c8:61:
                    48:29:07:df:78:9a:5a:bb:a2:bd:84:0c:fb:61:d8:
                    ac:b8:d5:08:29:6a:22:ff:5f:ab:02:3a:be:fe:42:
                    dd:76:c6:aa:47:5b:45:44:3b:b1:c1:91:6d:c8:26:
                    ca:80:c5:8f:b3:55:af:9f:50:ed:28:03:24:8e:ca:
                    d0:b7:90:4d:37:61:63:f7:b1:bc:65:d9:c2:af:74:
                    c1:ab:20:fa:3e:31:83:93:2c:66:0e:b3:f5:97:dd:
                    cd:83:77:cf:f9:cf:a7:74:81:42:61:2c:c6:78:24:
                    e2:25:da:80:4c:4a:f3:ce:80:9b:f9:67:73:30:31:
                    bb:21:36:b7:92:b9:61:fa:39:ff:96:29:32:b6:b9:
                    3c:39:e9:14:ff:da:ce:12:69:5d:9a:5f:99:de:30:
                    5e:30:c4:e7:0b:58:e3:5d:c7:0a:0f:6b:44:20:96:
                    91:d0:96:28:8f:d1:49:ac:a0:d9:56:41:72:60:1a:
                    99:d9:18:03:76:d3:dd:10:54:6d:ff:e8:bd:c0:3f:
                    5e:7d:02:e8:9c:c2:dd:7c:75:45:12:69:9f:2d:92:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:96:B3:78:23:CB:4B:E1:DD:9A:B5:95:78:20:AB:7C:88:F4:C3:96
            X509v3 Authority Key Identifier:
                keyid:D0:19:F4:15:FC:29:CC:12:FA:02:6A:C8:3D:31:00:F6:E2:09:21:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:24:cc:92:bf:b4:28:a1:14:07:47:70:87:4c:7c:9d:ca:21:
         46:9d:c1:e3:3b:d7:1c:d6:4c:a2:08:02:2f:0f:76:44:63:29:
         74:fc:db:ce:ef:20:4b:a5:98:7e:f6:f2:19:f5:57:c1:f4:65:
         73:f4:2f:5b:56:61:e3:a2:e1:6a:73:a3:bc:93:65:52:ba:d0:
         33:6b:84:d3:59:22:06:b0:a3:73:21:08:5f:55:88:67:4b:84:
         5c:bf:4b:00:a1:5b:ba:72:15:92:fa:45:b6:55:67:dc:88:80:
         5f:6b:07:7c:37:ec:1e:ed:23:38:ec:db:d8:93:bc:ac:66:21:
         78:41:ff:f2:38:26:15:7f:08:7d:eb:5d:a3:1b:b9:ed:a3:a9:
         b0:dd:f0:11:64:bd:42:f3:ec:a1:44:14:58:8c:0c:88:d3:55:
         cc:5e:af:0b:5b:af:46:2f:e1:08:ce:9d:8a:0e:52:a1:94:a6:
         b8:cb:1f:a3:8b:3e:83:3f:2d:bb:b6:66:de:d2:51:e2:5b:fc:
         e7:cc:0e:9a:53:ea:29:a1:27:79:e2:eb:24:0c:34:53:0c:61:
         68:f9:fb:35:bb:a0:5d:4f:3b:25:2b:26:c0:2e:20:97:48:18:
         76:67:a5:a7:33:bc:11:3e:ec:01:39:b7:ac:53:15:ee:fa:f3:
         c2:d7:2f:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/NS6iEipZfQ0neqXPZg8b4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMTlmNDE1ZmMyOWNjMTJmYTAyNmFjODNkMzEwMGY2ZTIw
OTIxNDgwHhcNMjYwODA0MTUwMTU1WhcNMjYwODA1MTUwMTU1WjAzMTEwLwYDVQQD
EygxODk2YjM3ODIzY2I0YmUxZGQ5YWI1OTU3ODIwYWI3Yzg4ZjRjMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslr98ud4M+vMdOzjqog5mw/Eukyi
/k0LqKIuG2cJxrS7ds6dfK7TDWKHyGFIKQffeJpau6K9hAz7YdisuNUIKWoi/1+r
Ajq+/kLddsaqR1tFRDuxwZFtyCbKgMWPs1Wvn1DtKAMkjsrQt5BNN2Fj97G8ZdnC
r3TBqyD6PjGDkyxmDrP1l93Ng3fP+c+ndIFCYSzGeCTiJdqATErzzoCb+WdzMDG7
ITa3krlh+jn/likytrk8OekU/9rOEmldml+Z3jBeMMTnC1jjXccKD2tEIJaR0JYo
j9FJrKDZVkFyYBqZ2RgDdtPdEFRt/+i9wD9efQLonMLdfHVFEmmfLZKt0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiWs3gjy0vh3Zq1lXggq3yI9MOWMB8GA1UdIwQY
MBaAFNAZ9BX8KcwS+gJqyD0xAPbiCSFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEJuMEZmd3B6Qkw2QW1ySVBURUE5dUlKSVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYjM2NzMtNzQxOS00OWQ4LWI2ZjYt
MDkxZjdmOWI5NzYxLzEvMEJuMEZmd3B6Qkw2QW1ySVBURUE5dUlKSVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYjM2NzMtNzQxOS00OWQ4LWI2ZjYtMDkxZjdmOWI5NzYx
LzEvMEJuMEZmd3B6Qkw2QW1ySVBURUE5dUlKSVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCTMkr+0
KKEUB0dwh0x8ncohRp3B4zvXHNZMoggCLw92RGMpdPzbzu8gS6WYfvbyGfVXwfRl
c/QvW1Zh46LhanOjvJNlUrrQM2uE01kiBrCjcyEIX1WIZ0uEXL9LAKFbunIVkvpF
tlVn3IiAX2sHfDfsHu0jOOzb2JO8rGYheEH/8jgmFX8Ifetdoxu57aOpsN3wEWS9
QvPsoUQUWIwMiNNVzF6vC1uvRi/hCM6dig5SoZSmuMsfo4s+gz8tu7Zm3tJR4lv8
58wOmlPqKaEneeLrJAw0UwxhaPn7NbugXU87JSsmwC4gl0gYdmelpzO8ET7sATm3
rFMV7vrzwtcvMA==
-----END CERTIFICATE-----
Generated at Tue Aug 4 19:10:48 2026 by rpki-client