Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File:                     bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier:          SadVIsUxBef4EIgIkFID1Ba89cy2MWbx9dBYKuyFIiM=
Subject key identifier:   6C:2A:87:E3:C4:E3:E8:4E:56:91:0C:81:D5:10:47:1B:6A:AD:C1:4C
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer:       /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial:       01A0016F6E4D93BAD7CA7DAC13DAE6225D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number:          17E5
Signing time:             Fri 14 Aug 2026 18:01:14 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:14 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:14 +0000
Files and hashes:         1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: ABDGOR1oUfboGfa0gxqBqIhPD116+IvoBUMF4ddOcVU=)
                          2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
                          3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:6e:4d:93:ba:d7:ca:7d:ac:13:da:e6:22:5d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
        Validity
            Not Before: Aug 14 18:01:14 2026 GMT
            Not After : Aug 15 18:01:14 2026 GMT
        Subject: CN=6c2a87e3c4e3e84e56910c81d510471b6aadc14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:6f:33:ad:1b:55:d5:1d:ca:3d:2a:26:e9:
                    a1:d8:c8:30:05:6f:59:10:fc:ed:08:7f:b1:3e:31:
                    ef:df:8c:48:61:3b:f8:83:3d:aa:61:6b:0f:fd:2d:
                    37:bf:a0:dc:4d:3f:e8:d1:e1:15:71:b6:29:a6:cc:
                    92:ec:05:7a:50:c1:8a:5c:17:02:1c:61:06:47:b0:
                    75:27:98:61:5c:44:10:25:c3:53:62:cd:3a:00:fa:
                    8d:fe:44:90:f7:25:43:1e:c3:b8:34:9f:b7:bb:59:
                    64:b2:20:0b:a7:e9:d4:44:2d:96:b6:a8:9e:04:19:
                    5c:0e:2f:09:06:a0:a8:96:c3:8e:6d:42:35:61:50:
                    9f:27:e5:06:87:e6:3d:4a:ca:8a:04:94:93:10:67:
                    9d:ea:df:33:65:1e:85:9a:d9:9c:e9:ea:85:49:80:
                    07:68:89:e9:f7:b7:76:c8:62:19:66:10:88:f1:5d:
                    55:06:37:c8:58:7a:75:3f:30:ee:ce:8d:16:c4:3a:
                    2b:08:b3:9c:03:ec:70:48:2d:53:d4:6e:71:5f:26:
                    80:24:69:af:f4:c3:1d:91:3d:6f:a2:22:99:3b:c9:
                    aa:5f:70:e2:d2:b5:b3:d3:5b:8b:0d:8f:ed:1e:2d:
                    2f:5d:c5:bb:b8:f5:97:8f:12:c2:57:42:7f:8e:20:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2A:87:E3:C4:E3:E8:4E:56:91:0C:81:D5:10:47:1B:6A:AD:C1:4C
            X509v3 Authority Key Identifier:
                keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7c:7d:64:4b:39:0b:cb:fb:19:b8:ad:23:70:e3:b1:0c:5e:
         80:dd:e8:37:30:7c:ab:7a:40:37:52:5c:ab:9f:94:d3:39:6a:
         df:4e:4e:f3:3d:83:4e:92:26:dc:ba:a3:6a:54:93:74:c9:02:
         9d:96:61:c5:09:80:78:f3:35:43:29:5d:23:30:06:d0:1b:28:
         34:5b:b4:de:8e:ca:d1:01:61:f5:1a:26:87:4f:e3:17:ed:28:
         26:aa:3e:d4:d1:b6:23:d2:19:b5:92:7f:35:63:ce:7b:70:56:
         26:48:f7:e4:74:f6:db:fe:00:65:c7:4a:b8:03:80:cb:fa:29:
         bd:48:c3:6b:42:49:2a:4d:17:b0:e1:67:f3:b2:41:e7:0f:f5:
         5c:4f:5d:92:bd:32:d1:0f:66:f4:87:4f:bb:d9:75:fb:e8:56:
         e9:a8:8e:b4:53:c9:de:07:cb:91:b2:8a:04:e2:de:bd:ec:44:
         d9:2a:97:a0:18:4d:e7:e1:3d:41:fc:e0:a5:b1:4a:69:0a:7c:
         73:b5:48:df:ca:59:72:e4:38:af:d4:b8:57:b4:a8:86:21:06:
         5f:f9:c1:3f:a8:ac:4f:43:91:e1:35:c8:b9:91:01:c6:d7:37:
         a6:79:40:34:32:d7:a6:03:f7:b7:46:66:d7:3d:06:96:df:a0:
         d5:04:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:33:02 2026 by rpki-client