Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
File:                     BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json)
Hash identifier:          kU9BSEhF0Le0cusLfCLOenbKljm7ZgSqmjHCA1Ri/IM=
Subject key identifier:   E0:28:D1:86:90:98:1B:16:3F:95:B5:D5:47:E9:E1:67:72:F1:D6:32
Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
Certificate issuer:       /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Certificate serial:       01A001DCAE6E551E8D947ECA47AAB21F1408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 20:00:34 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:34 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:34 +0000
Files and hashes:         1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: KAcNVizt/Vnsc3ytDx9LNp43SX2xlYBDteVchalzthU=)
                          2: RV6tXj6W0nE7aN2FDSjnLLCyX9g.roa (hash: WdrE3hN0kAlM8z4J7L3E1iNI3SXMCvpVCPSlTiuP6e8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:ae:6e:55:1e:8d:94:7e:ca:47:aa:b2:1f:14:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
        Validity
            Not Before: Aug 14 20:00:34 2026 GMT
            Not After : Aug 15 20:00:34 2026 GMT
        Subject: CN=e028d18690981b163f95b5d547e9e16772f1d632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:cf:4e:cf:ff:11:06:a6:ca:13:36:ed:76:
                    53:87:51:84:da:5c:a5:28:e3:ae:db:cf:ae:11:94:
                    41:ba:df:1a:f2:d2:2b:cc:b2:42:16:17:89:57:63:
                    e5:c0:69:07:57:80:65:63:37:d6:b9:74:96:66:19:
                    73:6a:86:08:25:7f:de:ba:cb:85:25:c2:7c:6c:07:
                    68:3b:86:52:80:d6:30:9f:32:24:4e:41:58:66:88:
                    76:e7:4d:fa:c6:e5:2b:85:68:20:a5:d3:a9:d8:f9:
                    b0:6d:0e:2c:15:da:f6:03:60:eb:3f:38:af:b7:3c:
                    40:e6:59:5e:db:6f:ce:7e:5a:41:72:cc:85:1c:05:
                    84:99:9d:a8:cd:90:bd:84:98:dc:9e:43:df:8a:c1:
                    db:9c:a4:2a:74:18:d8:2f:ec:b6:1f:54:6c:49:b5:
                    08:1a:99:f2:22:77:0a:90:21:14:a1:49:9a:4c:1a:
                    fe:57:05:ec:80:b4:09:27:75:09:eb:4c:7a:08:c3:
                    4b:2c:11:51:14:e0:43:42:12:ab:ef:6d:9b:01:75:
                    96:7d:29:62:be:69:4b:62:6e:98:34:2b:2c:d5:75:
                    9c:2f:78:ff:86:4a:a2:98:7c:20:68:f4:71:0d:92:
                    61:aa:96:ea:ad:b5:c0:0a:27:b8:08:d2:db:ce:9f:
                    c8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:28:D1:86:90:98:1B:16:3F:95:B5:D5:47:E9:E1:67:72:F1:D6:32
            X509v3 Authority Key Identifier:
                keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ff:d8:76:56:72:72:6a:c6:70:35:ad:87:5b:8b:bc:04:02:
         24:a5:13:b8:33:c0:43:68:af:bc:f8:9f:0f:93:24:47:00:43:
         8f:d2:78:62:01:4a:50:46:29:ec:2b:d1:18:9f:b9:83:9b:c6:
         63:17:62:bf:81:da:80:a6:9b:0b:36:6a:5f:c3:ee:8b:81:55:
         cd:66:49:f4:f8:94:4d:f6:bb:9c:8b:07:e2:4c:89:10:da:33:
         f8:f9:b5:5a:c9:26:15:d6:79:fe:2b:1d:64:af:e2:eb:c5:15:
         86:83:22:5e:42:d8:64:dc:0f:25:37:7c:4c:2f:5a:a0:68:b8:
         36:c7:ce:31:39:4a:13:3a:c6:81:38:35:89:bc:b6:dd:8c:ca:
         7e:45:72:2f:97:84:93:4f:54:0c:11:e4:91:ec:ba:67:1e:b6:
         b3:01:97:b9:04:c6:19:66:88:bb:f3:3b:9d:cf:15:68:f9:0c:
         3f:87:18:3a:fa:d7:b8:49:47:fa:79:f2:5f:25:a5:f2:af:b6:
         06:cf:6f:f8:02:cd:db:85:b7:bf:47:b1:e5:71:da:f3:a7:25:
         99:80:67:52:8a:6e:ed:73:d8:9c:26:71:2c:da:ef:ba:d5:c8:
         09:b8:96:c5:52:fe:76:70:f7:02:d8:2e:c4:03:95:80:62:af:
         a6:b2:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:07:22 2026 by rpki-client