Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File:                     BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier:          nSc/r8yhW8UXeBaKXzWzFg9xdnyUcPZ+4VzVgykF4kU=
Subject key identifier:   D0:A1:B2:37:C7:7C:54:C5:61:C7:BB:5F:54:B3:A6:D5:B2:44:82:EC
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer:       /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial:       01A000932664AC388EE2B83563736204F1FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number:          0891
Signing time:             Fri 14 Aug 2026 14:00:38 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:38 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:38 +0000
Files and hashes:         1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: bVNgjXNBBYHGmAJFAW+KV2OENklNAGlc1R6eYUrtmHE=)
                          2: XiOLVjMMRIXjDwamXxHQaw_QW5M.asa (hash: j0uAz4SCp4axiJ6lvLbL24SoF2CItfFxlFx3BSZUkLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:26:64:ac:38:8e:e2:b8:35:63:73:62:04:f1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
        Validity
            Not Before: Aug 14 14:00:38 2026 GMT
            Not After : Aug 15 14:00:38 2026 GMT
        Subject: CN=d0a1b237c77c54c561c7bb5f54b3a6d5b24482ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:32:34:10:44:0f:4c:13:e4:f9:65:d0:6b:92:
                    dd:9c:d1:91:44:2a:6c:e2:74:ec:73:8f:b0:55:4c:
                    19:1e:6d:90:68:5e:93:38:7e:81:ce:3c:d9:26:5b:
                    6e:f9:c4:c4:cd:1c:e7:04:e4:ca:a0:0a:43:cf:29:
                    86:39:65:03:fa:4a:28:38:fd:d2:b9:a0:96:8f:7b:
                    e5:40:42:e2:70:b3:dd:bb:f3:61:11:0e:4f:a9:11:
                    fe:4d:d1:2e:5c:bc:70:a7:91:ee:63:1e:c6:ae:af:
                    07:d8:fe:58:e1:fe:3e:b6:bb:10:80:ed:23:72:21:
                    16:23:8f:8f:de:30:b4:b8:03:16:c8:b9:b7:f1:0a:
                    cd:54:bd:b3:b6:89:ae:7f:7e:88:95:ed:79:28:c6:
                    1c:d6:6f:4f:16:0f:1c:a0:01:48:7a:31:ca:f1:fb:
                    37:1b:88:d9:b4:85:df:82:a2:19:a6:65:5a:1d:e5:
                    22:65:59:8c:e5:e7:64:98:cb:23:af:3d:63:2a:aa:
                    31:7c:a0:c7:f2:52:ad:4e:54:16:a7:5b:96:65:18:
                    e7:b0:8c:11:f1:c6:d9:22:a1:c3:5b:e7:4b:42:1d:
                    37:d6:ea:49:df:6a:75:f9:bf:e5:5d:a0:bc:5d:79:
                    60:4d:9d:ee:a9:3a:96:7f:4a:8c:31:ac:8a:be:88:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A1:B2:37:C7:7C:54:C5:61:C7:BB:5F:54:B3:A6:D5:B2:44:82:EC
            X509v3 Authority Key Identifier:
                keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3c:bb:ae:52:b2:cb:50:7f:56:a3:15:6f:a5:fd:09:23:7d:
         78:f2:db:af:b1:2f:ea:63:b2:c5:51:10:fe:56:8f:b4:a7:0c:
         d8:5c:eb:dc:11:0b:55:d5:39:4b:99:b5:da:b5:80:49:e1:53:
         8e:bd:c4:95:40:5d:2d:5b:c1:8f:b1:12:05:9d:5a:84:03:bc:
         f9:73:73:57:dd:89:8a:86:0b:9e:d8:37:2a:17:a2:90:26:5f:
         0d:7b:38:6f:34:67:06:50:b0:1b:7b:03:72:79:be:b5:0e:ab:
         8d:28:02:81:ee:d7:4f:82:05:d9:3f:2f:92:a1:cd:72:ff:b5:
         01:72:fa:93:f6:50:ed:44:f7:79:5c:10:61:91:e5:3c:a4:75:
         57:2d:51:da:6a:78:06:ef:64:13:d7:36:57:a7:27:26:2a:93:
         4e:e7:fd:b4:c6:27:60:5d:2b:f6:64:96:73:57:5b:11:4a:b8:
         84:66:b0:5d:da:9e:7f:5a:17:51:d4:91:2f:9f:92:42:62:b9:
         e8:aa:38:8d:4c:86:d0:1e:e7:ad:82:d0:42:3f:98:34:e9:3b:
         13:73:84:c9:8c:e1:66:20:5a:3b:a7:b8:45:4a:4e:20:c0:de:
         58:49:e5:ec:94:be:85:a5:56:7a:df:b0:73:58:4e:6f:f4:a0:
         c9:5e:0d:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAkyZkrDiO4rg1Y3NiBPH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YmVkYjYxNTRhODc5NWRjNGNlZWZhNjdhMThmZWRmYzY1
MjE1OTQwHhcNMjYwODE0MTQwMDM4WhcNMjYwODE1MTQwMDM4WjAzMTEwLwYDVQQD
EyhkMGExYjIzN2M3N2M1NGM1NjFjN2JiNWY1NGIzYTZkNWIyNDQ4MmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTI0EEQPTBPk+WXQa5LdnNGRRCps
4nTsc4+wVUwZHm2QaF6TOH6BzjzZJltu+cTEzRznBOTKoApDzymGOWUD+kooOP3S
uaCWj3vlQELicLPdu/NhEQ5PqRH+TdEuXLxwp5HuYx7Grq8H2P5Y4f4+trsQgO0j
ciEWI4+P3jC0uAMWyLm38QrNVL2ztomuf36Ile15KMYc1m9PFg8coAFIejHK8fs3
G4jZtIXfgqIZpmVaHeUiZVmM5edkmMsjrz1jKqoxfKDH8lKtTlQWp1uWZRjnsIwR
8cbZIqHDW+dLQh031upJ32p1+b/lXaC8XXlgTZ3uqTqWf0qMMayKvoiTFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNChsjfHfFTFYce7X1SzptWyRILsMB8GA1UdIwQY
MBaAFAS+22FUqHldxM7vpnoY/t/GUhWUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkw3YllWU29lVjNFenUtbWVoai0zOFpTRlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zMTczZTItNmM2ZS00MjdmLTljYWQt
M2M4NzA4ODczNGY2LzEvQkw3YllWU29lVjNFenUtbWVoai0zOFpTRlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zMTczZTItNmM2ZS00MjdmLTljYWQtM2M4NzA4ODczNGY2
LzEvQkw3YllWU29lVjNFenUtbWVoai0zOFpTRlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjy7rlKy
y1B/VqMVb6X9CSN9ePLbr7Ev6mOyxVEQ/laPtKcM2Fzr3BELVdU5S5m12rWASeFT
jr3ElUBdLVvBj7ESBZ1ahAO8+XNzV92JioYLntg3KheikCZfDXs4bzRnBlCwG3sD
cnm+tQ6rjSgCge7XT4IF2T8vkqHNcv+1AXL6k/ZQ7UT3eVwQYZHlPKR1Vy1R2mp4
Bu9kE9c2V6cnJiqTTuf9tMYnYF0r9mSWc1dbEUq4hGawXdqef1oXUdSRL5+SQmK5
6Ko4jUyG0B7nrYLQQj+YNOk7E3OEyYzhZiBaO6e4RUpOIMDeWEnl7JS+haVWet+w
c1hOb/SgyV4NFA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:25 2026 by rpki-client