Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File:                     4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier:          Y2SzpNlbYJmsO2lV6LZpAY5ufol5HmOsFwD0WiuRf84=
Subject key identifier:   B2:B7:6E:13:44:9D:21:E9:A4:C3:83:DF:74:A3:73:48:07:99:85:EE
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer:       /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial:       01A040BC6AC47006029D866FBF06A9B003A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number:          05B7
Signing time:             Thu 27 Aug 2026 01:01:24 +0000
Manifest this update:     Thu 27 Aug 2026 01:01:24 +0000
Manifest next update:     Fri 28 Aug 2026 01:01:24 +0000
Files and hashes:         1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: wrDMAJhXD53Zysg1hoTw8DSYggTn+tO4GLLp06xAe9A=)
                          2: Xhzxh_1tEvbHh31P53cpofaJHAY.roa (hash: 31jnPeVemUW3b4ECC8z4gudFDjDHIoHHJ4mUtzZB8F8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bc:6a:c4:70:06:02:9d:86:6f:bf:06:a9:b0:03:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
        Validity
            Not Before: Aug 27 01:01:24 2026 GMT
            Not After : Aug 28 01:01:24 2026 GMT
        Subject: CN=b2b76e13449d21e9a4c383df74a37348079985ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:6d:ef:05:21:5a:6e:34:23:49:7e:b2:29:
                    ae:40:0e:ee:f2:7e:ce:e8:3c:a5:8e:c1:3a:2a:ed:
                    96:5c:f9:05:62:5b:2f:63:8a:1a:bd:0e:d6:6d:da:
                    80:cd:6e:2e:42:9c:af:d6:60:1e:7c:59:26:88:ef:
                    7c:2c:6d:f3:e2:15:6c:19:4e:63:f2:c0:ce:52:33:
                    cc:8b:ac:78:8e:f9:bd:ec:61:f9:07:8f:14:c2:f7:
                    bf:36:55:3f:4d:f6:8b:36:d3:11:50:44:12:08:18:
                    5d:bb:71:94:74:67:b3:d0:1f:97:26:72:c2:24:c7:
                    03:c1:d6:9d:73:21:15:bd:d2:48:31:f3:81:60:4b:
                    d3:ab:f2:f7:5f:c3:6e:31:6a:24:9c:24:6a:b1:09:
                    ac:c5:58:73:9b:bf:cd:f5:6e:05:5a:10:79:2e:37:
                    35:d5:9b:09:0e:4b:f7:9b:f0:0a:25:e0:79:6b:0a:
                    6d:52:a5:b0:52:8c:79:97:54:4f:23:24:86:d5:f6:
                    f8:b0:0b:9e:67:0c:8b:84:4e:f0:cd:6d:3b:81:91:
                    1e:00:12:51:a1:5b:81:82:a2:d8:5c:5a:40:ab:2f:
                    07:1d:90:1a:6f:a7:23:fe:de:9d:52:f8:0c:b2:35:
                    d1:83:fb:72:7f:df:16:19:ec:c8:03:d5:0e:9d:50:
                    3f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B7:6E:13:44:9D:21:E9:A4:C3:83:DF:74:A3:73:48:07:99:85:EE
            X509v3 Authority Key Identifier:
                keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:50:0e:0a:ef:f3:e0:f8:34:ca:23:a9:bc:67:a7:7b:55:45:
         08:f8:08:23:1f:23:b6:51:d2:1f:ee:25:9b:b4:82:04:5f:37:
         49:ce:9a:7d:d3:9a:50:da:f0:8d:4f:fe:3f:29:0c:fa:74:05:
         bc:ac:79:a1:01:ea:c9:7c:e7:f1:93:ff:4e:39:ea:34:b0:35:
         68:0d:46:42:9b:e5:82:3e:44:d5:04:6f:98:9c:85:47:a3:45:
         e1:6c:aa:36:bb:eb:94:85:1a:48:f5:2b:3a:57:83:10:a1:8e:
         4c:19:81:aa:55:36:8c:2a:3e:b4:cd:f7:0d:70:4e:6f:78:29:
         fb:0d:63:aa:40:ce:e9:ce:2b:8f:02:c1:38:65:cd:03:a0:8c:
         8f:81:ce:c0:6b:22:1c:fa:e5:73:18:57:b6:ac:7d:85:7b:3c:
         03:ba:ce:0e:85:01:a1:cb:4c:a3:03:75:ff:56:5e:9c:8c:35:
         5b:f3:f9:39:38:cc:32:fd:fd:34:7d:83:6f:39:8c:6a:eb:3b:
         7d:6d:1c:50:ce:d9:e8:7d:e1:2d:70:2d:f7:a9:a1:1e:f3:65:
         14:e7:62:9a:0d:17:2a:11:2f:04:98:97:95:ee:0d:93:d0:18:
         db:06:f9:7a:a3:a5:e3:39:6c:08:5f:1a:53:99:bd:49:3d:45:
         46:8d:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:02 2026 by rpki-client