Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File:                     bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier:          DYzbjzikeBx4GfqTTDHym/u7yCyb9+P39MrQGV16Rlo=
Subject key identifier:   0C:44:F6:24:D5:09:6D:7B:C5:02:F4:AD:FF:13:A3:D1:C6:58:1C:BC
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer:       /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial:       01A03AF0DC9CF8ECE96A51147E9EB7BF408F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number:          05C4
Signing time:             Tue 25 Aug 2026 22:00:58 +0000
Manifest this update:     Tue 25 Aug 2026 22:00:58 +0000
Manifest next update:     Wed 26 Aug 2026 22:00:58 +0000
Files and hashes:         1: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: S5jmjPDuvMxP3HPvqG1DeZkrJ3+SEzuXUDT/UrLHwDM=)
                          2: m4kYecQvosDEbgzFUfKOmbMpQHc.roa (hash: Qzj75bvQYH3AqSh7xgbB5Q2jMsStMjrkOv+BsYSia7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3a:f0:dc:9c:f8:ec:e9:6a:51:14:7e:9e:b7:bf:40:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
        Validity
            Not Before: Aug 25 22:00:58 2026 GMT
            Not After : Aug 26 22:00:58 2026 GMT
        Subject: CN=0c44f624d5096d7bc502f4adff13a3d1c6581cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5b:d1:f7:ce:60:9b:27:62:9b:21:c2:fd:d9:
                    8a:99:a3:0e:d4:f8:b2:3b:04:06:fe:b5:d1:0f:d3:
                    33:bd:f2:68:f8:07:c3:4e:20:be:6b:c2:9e:65:5b:
                    e5:fb:da:f5:ba:23:e9:d7:c2:f0:d1:a3:33:e4:94:
                    48:ef:90:70:29:03:97:92:67:c7:19:1d:66:0b:4a:
                    d8:8f:ce:1c:ef:63:62:0b:1e:6d:95:ac:1d:80:dd:
                    d4:e7:bc:ef:66:c8:38:a7:e5:00:67:30:65:22:27:
                    d2:0a:70:c8:67:86:47:c6:55:02:91:e7:2a:db:17:
                    f6:42:43:4c:b1:90:06:fc:63:4f:70:47:f0:6b:70:
                    8d:c7:69:83:ba:e4:2f:8c:4c:b9:58:51:e8:e6:e1:
                    e8:91:0f:17:d3:f6:08:35:43:54:80:51:c1:7d:6f:
                    7a:29:7f:a7:9a:bd:6a:ec:f0:f6:81:15:5c:fb:3f:
                    d5:92:71:a1:98:e0:c8:f3:1d:d4:a5:89:70:83:24:
                    bf:81:63:a7:53:af:3f:85:2f:f0:e3:c0:61:21:41:
                    06:1a:47:f4:c4:d4:a2:35:78:15:6d:e7:55:f7:62:
                    b1:6a:09:b4:80:61:b9:75:f2:f1:24:f2:2e:5e:5b:
                    a8:16:f0:81:b9:2a:c4:f7:89:69:99:75:69:43:3d:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:44:F6:24:D5:09:6D:7B:C5:02:F4:AD:FF:13:A3:D1:C6:58:1C:BC
            X509v3 Authority Key Identifier:
                keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e3:4f:28:0c:48:0e:a5:ad:42:cb:c3:3b:09:db:18:77:df:
         e3:1b:a5:2d:71:0d:3d:69:5e:cb:42:a2:08:86:1b:c8:3a:f7:
         35:1c:47:7d:96:69:e3:43:be:1b:30:33:4b:b0:a4:23:20:33:
         cc:e2:d9:a1:60:e0:85:11:16:4c:8b:50:12:a1:6d:56:5b:89:
         f8:c7:e5:15:b3:69:df:a0:30:db:31:7c:be:40:76:23:c7:88:
         e9:73:af:b5:ae:a4:f4:de:f6:f3:05:64:c4:8e:c1:bc:62:97:
         49:0b:f3:74:d5:e5:32:a0:5e:cb:f0:dc:4a:c9:45:67:e2:5d:
         47:f4:78:d9:fd:34:fe:b8:14:5d:a7:bd:ad:a8:1c:20:94:d9:
         a6:51:6c:b5:08:21:9c:e0:f6:60:21:61:f3:23:42:1e:10:27:
         05:6f:d8:59:65:77:a8:7c:9f:24:11:cf:5a:ef:92:64:68:23:
         48:be:1e:50:84:56:50:96:e7:21:ef:aa:20:23:d7:50:3e:33:
         a1:5e:95:36:3d:c3:4f:cc:2f:de:2a:71:97:6b:c3:84:41:09:
         10:3c:5e:64:fc:31:bd:10:f0:3b:86:85:db:92:8a:19:3e:1c:
         36:2e:cc:f3:2e:2e:ef:31:39:ec:b5:ed:15:bf:b8:63:c5:fd:
         66:77:35:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:22:57 2026 by rpki-client