Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File:                     BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier:          4dYyFs5oqrjxapg9NvaplSVj5g6R1LxUmE8qHCSXIac=
Subject key identifier:   45:10:C7:AF:A6:D8:9E:B7:5E:4E:77:2A:AE:3D:E5:5A:C9:2A:18:04
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer:       /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial:       01A001011DE96571E4A76237636E788B05DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number:          0934
Signing time:             Fri 14 Aug 2026 16:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:45 +0000
Files and hashes:         1: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: LnZDXEX0VT/FNuJ9gUcBse4YoyJNfccWCH3tSGNN5DA=)
                          2: D11DDtRSfUPKIJoObwE0ulcCyHA.roa (hash: 8G0oMjv0ep8YMr6bTxIdYNKBAAbfLyPFVH5h489dkok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:1d:e9:65:71:e4:a7:62:37:63:6e:78:8b:05:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
        Validity
            Not Before: Aug 14 16:00:45 2026 GMT
            Not After : Aug 15 16:00:45 2026 GMT
        Subject: CN=4510c7afa6d89eb75e4e772aae3de55ac92a1804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b2:9c:a4:7d:4a:ab:de:a5:1e:a5:ca:73:2b:
                    e9:97:4e:10:80:f4:bb:58:39:8b:f6:25:db:01:5e:
                    9b:f9:31:43:fa:82:8d:f7:59:72:53:63:a2:f7:63:
                    b5:18:d3:87:98:8a:0f:c6:37:e0:a8:dd:22:16:79:
                    97:f9:9b:46:49:8c:c3:d6:ef:18:14:c4:1e:8c:25:
                    f6:0f:e7:26:ce:ab:40:69:2d:7f:dd:7f:ad:d7:6e:
                    93:c9:bb:65:5a:2d:d9:9b:21:ad:1b:cf:3e:8d:92:
                    2d:e9:0a:e6:29:91:ff:b9:bc:e7:77:21:0f:25:8d:
                    c4:ec:ca:75:36:2c:e5:56:71:79:23:fc:f4:fe:79:
                    c5:fc:2b:4e:fe:f4:bc:88:2f:12:48:7c:7c:c5:77:
                    41:0f:f1:b4:ea:e1:f3:07:1f:8e:37:63:cb:81:60:
                    1d:cd:68:4a:99:63:99:23:ef:18:6f:b2:8a:7f:aa:
                    6c:81:23:97:21:93:17:08:41:9e:90:9c:14:92:5c:
                    c1:45:d1:34:0e:2a:0d:d8:c4:42:71:eb:48:56:5a:
                    15:a0:73:88:17:f5:6d:03:dc:56:d0:23:fd:2f:33:
                    99:f8:ce:aa:b6:a0:04:0b:a1:0c:b3:c0:c2:3b:70:
                    e3:3c:1b:93:de:b0:1c:c6:04:88:71:16:46:83:bb:
                    ef:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:10:C7:AF:A6:D8:9E:B7:5E:4E:77:2A:AE:3D:E5:5A:C9:2A:18:04
            X509v3 Authority Key Identifier:
                keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:07:2a:a6:82:4f:73:36:9a:ae:b4:20:0c:dc:14:e2:9c:
         41:4e:8d:25:78:36:6b:6a:3a:12:b9:c0:59:03:8d:96:70:f3:
         51:b2:86:ef:cf:73:44:63:a9:27:f1:67:c1:41:78:b5:bc:b6:
         a1:4e:c3:6c:e9:56:2c:d5:06:5d:a3:53:90:0b:3b:87:88:14:
         c6:50:d6:a2:b1:b2:76:a7:a3:5b:25:e7:f3:02:84:11:f6:17:
         54:00:f8:e2:bb:8f:1f:74:f2:a3:f7:47:c8:74:1d:cb:af:9d:
         db:be:12:ca:ee:a4:19:b5:40:03:6b:92:d6:bc:62:18:56:6c:
         3d:8d:05:b6:f0:1f:ae:b9:81:5c:d8:c6:05:1d:01:67:ad:e7:
         12:46:b7:ab:c1:7f:f6:0d:15:d2:6d:68:13:16:c0:da:9b:d1:
         0d:f7:f2:64:17:8f:ea:de:12:07:53:c5:85:7e:0a:f9:9c:c2:
         c4:eb:a7:bc:1c:26:b4:7f:23:d6:4f:36:07:5e:3c:1c:ce:d2:
         f2:af:1a:fc:b9:4b:ec:0b:ca:0b:f9:27:68:da:49:32:89:4b:
         6b:50:08:36:19:5d:7c:8d:a5:47:4a:3e:32:81:17:e4:7e:74:
         0c:b7:38:5e:f2:3c:47:6d:f5:e1:37:d3:a6:8b:39:dd:e4:3a:
         27:81:85:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAR3pZXHkp2I3Y254iwXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzQ1Yjc2MzhkZTlkMmQyOTY2NTI3Y2IzNjNlMzdjMzFk
NGExODgwHhcNMjYwODE0MTYwMDQ1WhcNMjYwODE1MTYwMDQ1WjAzMTEwLwYDVQQD
Eyg0NTEwYzdhZmE2ZDg5ZWI3NWU0ZTc3MmFhZTNkZTU1YWM5MmExODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7KcpH1Kq96lHqXKcyvpl04QgPS7
WDmL9iXbAV6b+TFD+oKN91lyU2Oi92O1GNOHmIoPxjfgqN0iFnmX+ZtGSYzD1u8Y
FMQejCX2D+cmzqtAaS1/3X+t126TybtlWi3ZmyGtG88+jZIt6QrmKZH/ubzndyEP
JY3E7Mp1NizlVnF5I/z0/nnF/CtO/vS8iC8SSHx8xXdBD/G06uHzBx+ON2PLgWAd
zWhKmWOZI+8Yb7KKf6psgSOXIZMXCEGekJwUklzBRdE0DioN2MRCcetIVloVoHOI
F/VtA9xW0CP9LzOZ+M6qtqAEC6EMs8DCO3DjPBuT3rAcxgSIcRZGg7vvtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUQx6+m2J63Xk53Kq495VrJKhgEMB8GA1UdIwQY
MBaAFAQ0W3Y43p0tKWZSfLNj43wx1KGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xOTQ4NzMtN2E5My00NWQwLTk0NjUt
MjJhN2QyZTc0NTNjLzEvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8xOTQ4NzMtN2E5My00NWQwLTk0NjUtMjJhN2QyZTc0NTNj
LzEvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuAHKqaC
T3M2mq60IAzcFOKcQU6NJXg2a2o6ErnAWQONlnDzUbKG789zRGOpJ/FnwUF4tby2
oU7DbOlWLNUGXaNTkAs7h4gUxlDWorGydqejWyXn8wKEEfYXVAD44ruPH3Tyo/dH
yHQdy6+d274Syu6kGbVAA2uS1rxiGFZsPY0FtvAfrrmBXNjGBR0BZ63nEka3q8F/
9g0V0m1oExbA2pvRDffyZBeP6t4SB1PFhX4K+ZzCxOunvBwmtH8j1k82B148HM7S
8q8a/LlL7AvKC/knaNpJMolLa1AINhldfI2lR0o+MoEX5H50DLc4XvI8R2314TfT
pos53eQ6J4GF6g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:37 2026 by rpki-client