Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File:                     BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier:          jyG5U75cMtF/e5OsngOKeMt+7rxEFyio0j5ZJAvO9ao=
Subject key identifier:   3D:BA:31:F8:57:E2:3D:6C:2E:B5:C0:6D:04:8B:E5:D7:19:43:B3:93
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer:       /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial:       019FCB25D894173E82978EA54F3EFC08D1DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number:          0C5E
Signing time:             Tue 04 Aug 2026 05:01:22 +0000
Manifest this update:     Tue 04 Aug 2026 05:01:22 +0000
Manifest next update:     Wed 05 Aug 2026 05:01:22 +0000
Files and hashes:         1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: IW9QqZJavMllPEAM57iOb6GlqmbeqYcLUD/Ga6Yt5sc=)
                          2: wPZBSgFASeM9SaWJvAkRGk-7twQ.roa (hash: R3wosEg+LuaaoBj4e/mPNIMyKN6NLJP5v9wAW4ICOrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 05:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:25:d8:94:17:3e:82:97:8e:a5:4f:3e:fc:08:d1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
        Validity
            Not Before: Aug  4 05:01:22 2026 GMT
            Not After : Aug  5 05:01:22 2026 GMT
        Subject: CN=3dba31f857e23d6c2eb5c06d048be5d71943b393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:20:a1:82:d1:7d:60:c1:eb:71:ac:32:44:
                    7a:81:14:b7:b0:47:01:c8:89:bd:66:fc:7a:93:83:
                    67:8f:b6:a0:7f:92:48:41:db:d1:67:c5:40:92:55:
                    73:3b:32:86:21:68:70:fd:f9:e4:f3:70:16:b2:bb:
                    2e:03:41:aa:ff:9d:fb:de:29:d8:2d:ee:1e:e5:07:
                    45:7b:5a:52:fc:8e:45:dd:4a:f1:3d:6a:f7:06:c4:
                    eb:5e:54:f7:b0:18:8f:94:e7:ac:28:ff:a6:11:18:
                    76:40:60:16:b8:de:45:08:db:db:d9:d5:7f:71:ca:
                    80:b1:bb:f0:21:65:12:55:f6:92:16:e9:9c:74:c1:
                    87:06:19:41:63:6c:0b:b7:13:29:a1:93:f9:de:f7:
                    10:b2:b6:82:47:28:f1:de:37:92:d1:04:cb:70:58:
                    6b:34:62:e7:d2:10:ae:65:d2:b1:14:56:dd:a2:08:
                    b0:85:4d:dd:30:17:11:dd:b8:08:ea:41:5b:69:9c:
                    ac:57:8a:a1:12:aa:af:f8:76:6a:ad:52:af:df:ad:
                    e2:f0:41:bd:46:f0:81:3c:d2:f7:6a:94:5a:c7:85:
                    5b:20:8c:ec:d3:e6:fb:3a:83:fe:a5:dd:39:fe:74:
                    1d:39:b8:48:16:7b:1a:b9:98:4a:b4:ee:fe:59:fc:
                    db:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BA:31:F8:57:E2:3D:6C:2E:B5:C0:6D:04:8B:E5:D7:19:43:B3:93
            X509v3 Authority Key Identifier:
                keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:44:b4:8a:db:bd:28:63:b2:ba:91:e6:91:87:b7:c7:47:d8:
         95:c7:a0:de:7c:67:73:1b:25:44:4c:09:0c:a8:9f:6e:8a:c2:
         f3:ae:49:5c:27:2c:8a:38:1a:85:5b:89:e8:b0:70:94:46:79:
         79:83:1d:09:cb:7f:04:16:c4:a7:05:dc:55:05:9c:ef:54:24:
         a9:87:fe:b8:50:4c:e5:b2:ea:bc:c7:2f:d4:f1:89:b4:31:04:
         77:47:7c:f1:b0:31:d0:55:ae:e4:59:48:55:5b:4c:93:14:c4:
         ac:dd:6f:7c:06:1c:d0:a1:aa:68:1b:a7:c3:a5:94:85:93:7f:
         1b:e3:be:61:df:98:ae:14:12:8e:7e:ff:17:8a:51:c9:dd:d2:
         3c:35:7b:05:9a:f5:fd:2f:2e:40:97:54:63:d8:a4:3b:4a:64:
         31:e4:96:b3:e0:78:56:cb:78:51:f1:ed:11:a2:e1:e4:76:1f:
         d9:89:dd:1f:ad:1d:11:6e:bd:c0:26:bc:31:a0:32:69:f5:31:
         65:e2:76:09:41:a6:51:fc:b5:3b:ff:47:e6:81:c2:f3:98:ad:
         64:c8:bc:0d:dd:6f:e0:e1:e6:94:fa:89:53:02:99:38:14:c6:
         e2:7e:f4:43:77:aa:e2:01:1d:31:54:63:e9:f0:ae:df:a6:94:
         d4:92:cc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:57:27 2026 by rpki-client