Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          rBuQ+Nq2q9Pr2PgLNmSDNQfMb8RXmKyOOed2fk+fEyk=
Subject key identifier:   06:1B:F4:38:5B:B3:B5:6E:1C:DC:48:8E:F8:A9:78:A2:BB:05:83:99
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       01A002B8D0ECA2154A230DB6279AC9554AC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          1A09
Signing time:             Sat 15 Aug 2026 00:01:01 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:01 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:01 +0000
Files and hashes:         1: 6MLGeDuttKLHmwjE_YPGG7vZqNI.roa (hash: xpTof2JHX21v/k79XQ8lsV/BL0epT0Yvy5Nz69a9itI=)
                          2: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: we8On3Hxzq65MB+hK3Hvz0fvcUv6WT7zu7XPLB+p9EI=)
                          3: Z_L2k8DCyYPXTdYIoY3nfdijg64.roa (hash: ivL6lpqNY3Dw4m+rwt+54sqsIUCex6KJIoQEKHYKmZk=)
                          4: dToYhaIhncI2M7qUF8E5Z-MUY1M.roa (hash: i3+aszgM830eFR0OQiZivcXRqqvq84jEAI5IvwlypUE=)
                          5: mKqPJjGRZ0H6YrO1beoh-YgmSrw.roa (hash: b1Fd2JbvZA0tfjGHdD2N1uDoKNQWOj5U77gTuCVwBwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:d0:ec:a2:15:4a:23:0d:b6:27:9a:c9:55:4a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Aug 15 00:01:01 2026 GMT
            Not After : Aug 16 00:01:01 2026 GMT
        Subject: CN=061bf4385bb3b56e1cdc488ef8a978a2bb058399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:87:cf:70:ef:a9:0b:c9:aa:ac:4a:f3:07:
                    cf:00:0f:d3:d3:e3:32:cf:b8:71:1b:f4:95:fb:91:
                    a4:a5:75:ea:e1:a2:2c:1b:c5:9f:73:82:50:e2:e7:
                    29:6d:40:65:7c:13:ee:f7:ec:9d:ca:36:2f:8b:da:
                    af:1b:7c:c4:40:f0:8e:a6:05:fa:c2:5e:b8:bd:d2:
                    21:5a:90:48:c3:c7:ed:cc:97:53:c3:1b:60:c2:ee:
                    55:27:2e:78:80:fb:08:91:ce:01:95:1a:26:d7:30:
                    dc:fb:73:7d:e2:92:83:08:fa:b6:da:a4:5b:82:8d:
                    ef:d4:3b:91:a3:91:5c:42:ae:ec:4d:4c:c6:be:66:
                    7e:c1:87:3c:6b:1c:35:b0:4c:96:19:ae:02:33:29:
                    fc:04:74:d5:fb:33:c3:b7:9b:e4:e0:dd:e3:ae:a8:
                    4c:7d:68:63:0a:e2:c4:b4:7b:f6:b4:86:62:35:7e:
                    14:41:c8:59:bd:a4:65:c4:14:24:f8:b0:f5:3c:88:
                    70:ce:85:97:94:e8:cf:f2:26:b0:72:d9:c8:6a:4b:
                    6b:1f:ac:e4:f9:28:4c:b1:7e:67:55:a0:dc:b9:e6:
                    45:b6:43:63:c2:25:10:c3:33:c1:46:ac:34:1a:85:
                    24:60:42:2e:c6:f3:3b:31:93:d3:d2:d1:97:18:ab:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1B:F4:38:5B:B3:B5:6E:1C:DC:48:8E:F8:A9:78:A2:BB:05:83:99
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:98:d8:66:a0:8f:a5:46:25:00:cc:c5:2f:48:3e:2d:0c:5b:
         8a:13:c4:69:9a:03:82:ee:a8:4f:e6:f1:15:15:1f:43:9d:1f:
         ba:a7:c1:df:a8:f3:bf:bf:f5:7b:06:bb:9e:24:d7:90:13:ec:
         a0:b6:ad:b1:bb:76:37:b5:d0:3a:dd:74:05:a5:a0:82:43:8a:
         8e:0d:94:a3:66:4f:0e:a6:e0:84:77:ec:94:08:d6:bc:f2:3b:
         c5:e8:f4:ce:d4:e0:5c:53:cf:c8:2b:1c:8b:59:f2:5b:43:28:
         47:3e:f0:ad:c9:77:09:56:14:99:10:c0:d8:30:d9:29:65:59:
         71:40:fd:f6:97:1c:f6:3d:d0:09:f7:2f:8b:8c:b1:af:67:c3:
         02:9c:61:83:57:10:f8:fd:c5:d8:0a:c8:df:bb:7b:0f:2a:7b:
         bd:56:e0:94:37:46:4b:4c:4a:a5:01:44:fa:91:e0:7d:8f:c3:
         44:9e:5b:75:de:a8:5f:1e:6d:34:f2:ca:19:31:ea:8c:83:53:
         c3:8e:f9:bb:e9:4c:7d:bb:ce:ee:af:f1:26:7f:27:02:ba:07:
         ec:dd:1b:ac:a9:09:0b:f6:95:6a:69:59:f2:da:f4:7b:6e:ff:
         3a:86:ca:c4:e0:3e:17:17:76:d7:9c:4f:cb:8b:3d:fa:7e:a3:
         ff:d6:a8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:16:52 2026 by rpki-client