Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File:                     Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier:          hhllecO7xeZzKO6et4wV5i2hD2ToqCS3fT95a2jixqA=
Subject key identifier:   51:D9:A8:87:64:42:58:BA:64:D0:BF:D2:C4:E5:83:7D:5B:39:C9:F7
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer:       /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial:       019FF8A35F84C66CFAB35CAC0D34084D2DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number:          1A07
Signing time:             Thu 13 Aug 2026 01:01:24 +0000
Manifest this update:     Thu 13 Aug 2026 01:01:24 +0000
Manifest next update:     Fri 14 Aug 2026 01:01:24 +0000
Files and hashes:         1: 8t3JN_7LDw-CGs7GhP5-c9YQT3Q.asa (hash: vle8JAoc+z41qSzbAnkjsok+oNKxAJh14QSzgoReOFc=)
                          2: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: Ku4/pos98xQhI6qOzCnByL03KRPGcEbCghpb91G89F8=)
                          3: HlyeT63d_hTRQoUdqffq7QL-QuQ.roa (hash: x2NNm6m6wU3oFBfBTa5MizhpP5bdnw5qPXYrszPxhbc=)
                          4: MUhm7sf-jo5IKEGBGo0-Z-Y1dmw.roa (hash: 4wqf+3mVFGC07sq2JR8okYP1Xx2LwUoWzZSDpdV1+vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:a3:5f:84:c6:6c:fa:b3:5c:ac:0d:34:08:4d:2d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
        Validity
            Not Before: Aug 13 01:01:24 2026 GMT
            Not After : Aug 14 01:01:24 2026 GMT
        Subject: CN=51d9a887644258ba64d0bfd2c4e5837d5b39c9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:38:3b:b4:40:b6:56:33:41:91:f5:b8:cd:
                    26:8d:51:33:30:16:21:be:58:1e:a3:19:e8:4f:33:
                    6a:a4:e2:79:c1:0a:79:91:50:c8:96:e0:ff:51:61:
                    04:bf:cd:00:a4:85:3c:0b:de:b2:5f:e9:fb:49:96:
                    a7:bd:f6:fd:05:30:78:41:f5:44:b3:03:94:70:c2:
                    2b:bd:4c:92:29:c6:9d:1e:b0:49:a5:cb:9f:fb:bb:
                    ed:d5:8f:14:9b:c4:2e:3b:c0:1e:01:74:c2:b4:38:
                    fa:27:eb:ac:bd:4e:3d:d6:8a:ef:8c:2f:59:99:5f:
                    2e:d6:d6:dc:0b:dc:d4:30:ca:41:38:72:09:15:96:
                    55:95:10:b8:98:ed:4f:fe:57:49:c3:6a:f4:d2:e5:
                    44:d5:8d:4a:33:ca:b8:e9:2c:0f:71:b4:f4:d7:61:
                    95:7c:2a:e4:6e:04:7c:59:a4:24:e6:44:c5:86:89:
                    51:2a:cb:a6:6c:67:67:ec:d5:2a:e7:31:32:f4:8e:
                    8b:9c:b9:9a:bd:eb:78:65:dc:74:a1:8d:b9:27:48:
                    26:3d:82:f5:cc:42:4f:bb:fa:70:3f:4c:cd:ef:d5:
                    67:1b:86:31:fc:08:28:a2:3e:36:61:57:26:7b:25:
                    51:25:d8:59:d5:c6:35:f1:11:b9:2d:3a:d5:1f:5b:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D9:A8:87:64:42:58:BA:64:D0:BF:D2:C4:E5:83:7D:5B:39:C9:F7
            X509v3 Authority Key Identifier:
                keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b6:e7:2f:d3:34:cf:61:33:c4:3b:08:da:5d:6b:be:1b:30:
         d4:3a:0d:19:42:ae:29:e5:da:53:cf:e9:a5:89:5a:16:40:a8:
         0c:57:5a:96:db:ae:79:86:d3:81:b3:2d:86:b5:4f:27:0c:62:
         9c:3d:fb:22:04:e8:2a:2a:f8:89:1a:c7:98:0d:26:71:67:94:
         a7:1f:e6:ef:30:9d:bf:6b:fd:85:63:da:29:4a:f9:5f:2f:16:
         dc:f2:e0:b2:71:c1:8a:49:ef:dc:b6:88:ca:bc:63:a0:4b:5f:
         7d:e3:2c:83:2a:80:42:bb:12:c0:eb:e4:cc:37:43:1c:95:06:
         3f:36:d9:0f:7f:47:d7:8e:c8:dc:03:31:b0:63:13:b6:95:bf:
         be:b4:14:4e:42:af:80:25:c6:93:d1:3b:ab:d5:91:ec:2c:ad:
         a3:99:4d:ef:19:8a:dc:58:a4:73:5f:42:45:ca:05:03:82:af:
         37:64:50:5d:91:f9:35:e5:5c:24:9e:f7:4b:e0:b0:e7:d8:83:
         0e:30:54:44:db:79:a8:58:41:c4:d8:41:71:3b:1a:8e:9b:19:
         8a:d5:7e:c8:0a:42:89:de:c1:8b:27:0e:77:25:c9:85:12:e4:
         13:75:94:de:16:51:19:e5:95:ea:15:7d:ee:1c:65:9b:2f:dc:
         67:ff:18:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:05:36 2026 by rpki-client