Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft
File:                     BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft (raw, json)
Hash identifier:          eY0MlWX7Jg7g7kd2XNU/7/JoFxG9kyBDxT2EkciXCQE=
Subject key identifier:   70:F4:52:FC:56:D7:25:99:30:3D:7B:13:20:2B:7F:9B:55:C7:B3:04
Authority key identifier: 04:B3:69:61:7B:5D:F2:A5:CF:C6:E3:C9:EC:1B:70:39:DF:54:B8:C3
Certificate issuer:       /CN=04b369617b5df2a5cfc6e3c9ec1b7039df54b8c3
Certificate serial:       01A0404DAFE77AC7DFB0B8AD0809A0356E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft
Manifest number:          7E
Signing time:             Wed 26 Aug 2026 23:00:28 +0000
Manifest this update:     Wed 26 Aug 2026 23:00:28 +0000
Manifest next update:     Thu 27 Aug 2026 23:00:28 +0000
Files and hashes:         1: BLNpYXtd8qXPxuPJ7BtwOd9UuMM.crl (hash: rekq3Zhov4q03RPtB9tpQ2WHjIyNFNzhQrxN5d2p2xI=)
                          2: hT9HthKgWyq8q-rVTBF9p1k9TLA.roa (hash: McToG8l4SQVqpZGlyPlZlL8W9BAUD58LKc6OEh1ORDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4d:af:e7:7a:c7:df:b0:b8:ad:08:09:a0:35:6e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b369617b5df2a5cfc6e3c9ec1b7039df54b8c3
        Validity
            Not Before: Aug 26 23:00:28 2026 GMT
            Not After : Aug 27 23:00:28 2026 GMT
        Subject: CN=70f452fc56d72599303d7b13202b7f9b55c7b304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a7:08:d1:10:46:c4:1b:21:a8:c5:0b:0a:f6:
                    da:e3:77:59:d9:90:ff:7f:4a:e6:df:59:a5:6a:22:
                    0b:c3:f6:fd:b9:6f:21:10:7c:04:0c:47:6b:da:61:
                    e3:5c:e3:e4:21:b5:cc:fb:5c:3c:3b:c4:b9:e6:48:
                    ab:df:ee:0e:bd:21:15:c3:10:29:1c:1a:28:01:02:
                    8b:7c:1c:b8:f1:66:0f:87:90:e3:18:7b:c8:2b:e4:
                    cd:ce:e0:0a:b4:8e:4f:ab:82:26:8d:be:6b:0f:15:
                    42:21:40:c5:34:a7:0e:7f:c1:c2:83:87:6c:67:f0:
                    39:6c:25:fa:3b:c4:95:e2:13:7c:1c:36:92:e7:f7:
                    f2:35:8c:d7:61:eb:88:8f:46:1b:9b:41:e1:d6:4f:
                    1c:35:8f:a9:b7:eb:ab:63:44:63:f7:d8:7f:2c:22:
                    61:20:df:85:36:71:84:5f:90:d8:e0:03:65:4a:56:
                    f0:45:1b:5f:56:c7:8d:73:3d:cd:bd:0d:4a:e7:35:
                    05:3d:c1:e7:2e:ee:ac:52:e4:fc:96:90:50:bb:19:
                    89:00:f5:25:41:e8:60:3e:f4:65:6a:9c:e8:1a:67:
                    44:6d:ca:8e:27:09:c3:6f:7e:c9:0c:d4:a2:f8:57:
                    b7:3e:0a:d0:59:d6:3f:6e:ec:97:af:b4:2e:93:bf:
                    8a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F4:52:FC:56:D7:25:99:30:3D:7B:13:20:2B:7F:9B:55:C7:B3:04
            X509v3 Authority Key Identifier:
                keyid:04:B3:69:61:7B:5D:F2:A5:CF:C6:E3:C9:EC:1B:70:39:DF:54:B8:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:92:ef:66:0b:ec:c0:85:fe:72:86:17:2a:67:fa:e2:be:c9:
         98:ae:67:83:53:af:96:cf:46:a0:6e:18:54:df:39:71:d3:b9:
         a6:fd:d5:00:97:5a:c7:b2:88:15:04:d8:31:7c:64:a2:a0:7b:
         d5:19:fd:bf:bd:fb:62:ac:0a:aa:ba:4e:f0:d6:a8:be:f3:d7:
         a4:d9:cc:f8:ca:2f:22:d6:28:26:75:9b:6f:e2:24:ff:75:ac:
         99:e3:c6:2c:4a:bf:3c:c3:7f:15:c7:5e:b3:aa:7b:95:a5:b9:
         2f:47:b7:d5:d5:78:22:ad:ad:ea:2c:35:3b:ca:2c:88:dd:e1:
         77:95:66:19:e7:74:76:ae:cc:6c:b2:47:73:ea:28:f8:a5:ff:
         6e:bc:95:a8:ce:01:f7:0e:53:61:9c:5d:6d:22:fc:e7:f8:48:
         81:a9:b8:47:20:73:db:50:48:fb:a5:cb:43:fd:f8:f5:7c:94:
         c9:7c:b5:62:71:03:b3:50:cf:34:16:49:6d:d0:b8:59:d8:40:
         77:fd:53:7f:94:58:bc:9d:34:4c:70:50:a7:f4:31:f2:04:23:
         38:16:8a:53:5f:86:83:a2:af:08:00:68:c6:d8:c2:5e:a0:7b:
         6b:24:eb:36:d4:92:f3:75:89:55:0e:d9:67:b1:d6:af:26:74:
         26:0a:d9:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATa/nesffsLitCAmgNW5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YjM2OTYxN2I1ZGYyYTVjZmM2ZTNjOWVjMWI3MDM5ZGY1
NGI4YzMwHhcNMjYwODI2MjMwMDI4WhcNMjYwODI3MjMwMDI4WjAzMTEwLwYDVQQD
Eyg3MGY0NTJmYzU2ZDcyNTk5MzAzZDdiMTMyMDJiN2Y5YjU1YzdiMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKcI0RBGxBshqMULCvba43dZ2ZD/
f0rm31mlaiILw/b9uW8hEHwEDEdr2mHjXOPkIbXM+1w8O8S55kir3+4OvSEVwxAp
HBooAQKLfBy48WYPh5DjGHvIK+TNzuAKtI5Pq4Imjb5rDxVCIUDFNKcOf8HCg4ds
Z/A5bCX6O8SV4hN8HDaS5/fyNYzXYeuIj0Ybm0Hh1k8cNY+pt+urY0Rj99h/LCJh
IN+FNnGEX5DY4ANlSlbwRRtfVseNcz3NvQ1K5zUFPcHnLu6sUuT8lpBQuxmJAPUl
QehgPvRlapzoGmdEbcqOJwnDb37JDNSi+Fe3PgrQWdY/buyXr7Quk7+KPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHD0UvxW1yWZMD17EyArf5tVx7MEMB8GA1UdIwQY
MBaAFASzaWF7XfKlz8bjyewbcDnfVLjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkxOcFlYdGQ4cVhQeHVQSjdCdHdPZDlVdU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83NzJiYWQtZWNlYS00ZmUyLWJjNTQt
NmNmOWRkNWRlODQ3LzEvQkxOcFlYdGQ4cVhQeHVQSjdCdHdPZDlVdU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83NzJiYWQtZWNlYS00ZmUyLWJjNTQtNmNmOWRkNWRlODQ3
LzEvQkxOcFlYdGQ4cVhQeHVQSjdCdHdPZDlVdU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpLvZgvs
wIX+coYXKmf64r7JmK5ng1Ovls9GoG4YVN85cdO5pv3VAJdax7KIFQTYMXxkoqB7
1Rn9v737YqwKqrpO8NaovvPXpNnM+MovItYoJnWbb+Ik/3WsmePGLEq/PMN/Fcde
s6p7laW5L0e31dV4Iq2t6iw1O8osiN3hd5VmGed0dq7MbLJHc+oo+KX/bryVqM4B
9w5TYZxdbSL85/hIgam4RyBz21BI+6XLQ/349XyUyXy1YnEDs1DPNBZJbdC4WdhA
d/1Tf5RYvJ00THBQp/Qx8gQjOBaKU1+Gg6KvCABoxtjCXqB7ayTrNtSS83WJVQ7Z
Z7HWryZ0JgrZnA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:45:58 2026 by rpki-client