Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File:                     bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier:          iCgVrlsUej3eE+hbAwKMSVxYYWbljG6QgqdhkWIFZC4=
Subject key identifier:   F8:28:1A:AA:6F:A4:BB:0A:26:B6:3E:86:0A:A1:52:14:74:A0:1F:73
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer:       /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial:       01A002B9494CDA0FF0B9E79B20EDD0B33E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number:          16ED
Signing time:             Sat 15 Aug 2026 00:01:32 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:32 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:32 +0000
Files and hashes:         1: Oon2IIrGkbnZaP-hb1ZNPn5crpM.roa (hash: aV6nVsAigskV1T2EnkJOb7mIfcRM6nE2dCNvULEtGlA=)
                          2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: tLj/l/S4F2qEpy9fdX56Omh8l1aXcqJJ3pydFSux5j0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b9:49:4c:da:0f:f0:b9:e7:9b:20:ed:d0:b3:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
        Validity
            Not Before: Aug 15 00:01:32 2026 GMT
            Not After : Aug 16 00:01:32 2026 GMT
        Subject: CN=f8281aaa6fa4bb0a26b63e860aa1521474a01f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:db:12:ff:48:d0:9c:73:e9:4b:0a:e6:42:
                    75:49:be:e6:32:aa:f6:44:bc:8e:86:79:97:b1:d8:
                    6a:e4:85:38:34:c7:81:bf:8e:fc:e4:76:5f:f6:de:
                    ef:a6:bf:fa:9b:97:81:4b:d4:f8:5e:e3:9c:5a:67:
                    7d:b8:a5:1c:87:63:73:f7:2d:4f:c3:c5:d1:38:09:
                    40:45:63:d4:f5:2f:5f:8a:37:75:40:d6:80:2e:d2:
                    a0:fa:a2:dd:ad:29:cc:7d:75:55:f2:5e:e1:fd:dc:
                    09:5a:39:d2:90:18:c7:c3:56:25:64:36:79:13:ff:
                    91:a0:96:93:7a:11:ed:af:4c:8e:1a:b1:5c:15:ce:
                    a3:5b:f5:67:31:44:5a:2f:09:d7:fa:c1:f2:be:b2:
                    ee:28:82:aa:45:f9:21:bd:ee:99:d5:d6:d9:50:71:
                    e7:4f:35:6d:7e:0b:14:d8:9b:41:56:2b:16:89:29:
                    f6:3a:46:92:03:9f:a7:29:6a:da:60:be:38:cf:60:
                    25:1c:b2:f0:58:b1:9b:d4:fe:35:78:48:1a:69:be:
                    a2:d0:71:1d:e9:f7:6a:98:2d:df:67:64:7c:b1:0d:
                    32:e0:89:dc:5e:0e:30:50:aa:28:e1:e9:36:03:10:
                    dc:f6:38:a3:4b:21:bc:66:1e:2e:eb:9b:43:e2:31:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:28:1A:AA:6F:A4:BB:0A:26:B6:3E:86:0A:A1:52:14:74:A0:1F:73
            X509v3 Authority Key Identifier:
                keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c5:06:d7:d9:ea:80:d7:cf:aa:8c:69:68:5b:2e:02:0a:06:
         cf:19:af:b6:a6:e9:32:12:21:aa:e8:98:4c:a7:cc:3c:5b:37:
         6f:c7:c6:20:05:2c:a3:5d:12:1e:95:5b:7d:bf:2e:d4:6a:ab:
         2c:a3:2a:a6:b2:0e:13:b8:95:ba:64:16:a7:9a:5e:57:32:63:
         ca:90:8a:06:73:01:46:08:42:d7:83:59:9f:7f:26:06:03:b0:
         97:e3:2c:60:b0:dd:1c:83:14:7a:06:99:87:ce:10:68:d2:cf:
         3e:95:db:e8:b9:a2:6b:50:4b:33:58:fe:0e:6b:6a:2c:08:4f:
         d7:e8:ff:70:3d:38:8b:c0:c0:e4:69:8f:e7:af:c7:53:54:ed:
         03:c5:2d:60:36:a4:79:bf:a7:27:c8:76:36:4a:c6:56:a2:88:
         87:dd:3d:1e:4c:83:91:29:fc:78:10:14:cc:c2:ac:19:c5:6e:
         47:73:78:ce:bf:29:d3:29:ef:ce:01:44:a4:b4:68:b3:6b:c8:
         df:d0:b0:42:b2:f0:e2:df:10:78:93:c7:3e:65:e4:02:f7:97:
         c1:6b:74:4b:94:3b:31:99:32:2b:29:1d:e3:d7:e8:b9:03:02:
         65:8d:ba:c7:8a:ae:b6:fb:97:71:4d:10:ca:4e:20:58:0d:af:
         b3:8f:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:04 2026 by rpki-client