Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
File:                     BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft (raw, json)
Hash identifier:          d1MSd3MJk6tpxgtkgNODW9XnRdQswIo8v4RrqfR3MuQ=
Subject key identifier:   51:86:62:A1:56:4A:62:C5:B8:63:06:4D:10:A2:75:0D:0C:3B:64:63
Authority key identifier: 04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
Certificate issuer:       /CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Certificate serial:       01A0010210DEEA14178EAF05B2580F97AD7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
Manifest number:          0EE5
Signing time:             Fri 14 Aug 2026 16:01:47 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:47 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:47 +0000
Files and hashes:         1: BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl (hash: TX57RFEvzHzxaYAcJK6klH+ucNDtstormXVVCOyDAJU=)
                          2: we5jn01Cx98OQV43_9pqKOC3HXA.roa (hash: s+Xsw2hTwbHWmllV0HmHTjp9ztGy7bm5p6ULJLREmd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:02:10:de:ea:14:17:8e:af:05:b2:58:0f:97:ad:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
        Validity
            Not Before: Aug 14 16:01:47 2026 GMT
            Not After : Aug 15 16:01:47 2026 GMT
        Subject: CN=518662a1564a62c5b863064d10a2750d0c3b6463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2b:f0:b6:7a:c6:4a:a4:85:02:44:50:c9:34:
                    74:30:7d:71:bb:a5:ea:c7:52:e6:08:57:1c:f0:58:
                    f9:8c:02:8c:97:43:53:18:70:90:a7:e4:83:fe:bf:
                    e4:5f:c4:30:9f:c4:49:42:ed:22:f5:f0:9d:3f:7b:
                    d3:88:f2:b9:eb:77:44:e7:f8:42:85:80:97:ca:56:
                    55:9f:09:7f:54:9f:e7:02:45:88:71:3b:44:7a:0c:
                    e0:05:72:1c:60:1e:ae:e5:75:dc:14:3f:17:f0:f3:
                    b5:d3:f9:9a:c9:98:3f:f6:74:9a:0f:7c:fb:ec:79:
                    31:92:3c:77:e4:36:d6:ca:ee:aa:a6:d4:97:7d:12:
                    76:03:07:5b:17:a0:a3:e0:45:3d:88:b5:cb:8b:79:
                    9b:9f:59:b1:08:fb:73:93:a6:b4:21:93:b1:a6:63:
                    8d:f9:66:de:42:e5:df:9a:4c:9f:5d:71:87:b7:d1:
                    25:95:81:71:f7:f9:d3:10:e9:f7:f6:a2:b9:4e:ff:
                    3e:8a:89:e5:48:0b:45:91:5f:a8:fe:da:79:3a:1b:
                    14:ce:5b:23:66:72:64:e7:5d:60:c2:d0:83:d7:5c:
                    11:2d:31:30:e4:02:f1:12:f2:df:68:5f:59:8b:54:
                    0c:51:4b:ed:66:89:81:92:4e:70:80:82:af:bb:54:
                    05:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:86:62:A1:56:4A:62:C5:B8:63:06:4D:10:A2:75:0D:0C:3B:64:63
            X509v3 Authority Key Identifier:
                keyid:04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:95:b9:ea:19:80:c4:60:40:18:3d:72:bf:f7:ad:ee:92:58:
         f5:20:ff:35:69:73:8f:53:e3:2e:72:b7:50:62:79:b7:5d:45:
         56:dd:c1:bf:b8:fb:31:61:ae:fe:9c:bf:d4:04:99:54:36:ff:
         92:e1:87:47:24:9f:cd:70:b0:66:8b:27:c4:90:bb:5c:92:4a:
         65:01:9e:f1:e1:89:f2:84:48:cc:6e:91:a4:79:1d:e7:1b:b1:
         af:92:11:ef:72:c6:99:e7:80:3a:01:7f:66:24:10:51:da:e4:
         a3:8d:c7:77:80:27:4f:a8:14:a9:bf:9a:c8:6b:d5:de:4c:4f:
         21:7f:0b:f5:83:73:97:e1:e7:fb:f5:4a:10:1b:08:e5:82:5e:
         d7:81:c8:0e:8b:84:b4:70:3b:01:21:19:ae:74:70:6d:b9:30:
         38:2b:68:6d:65:2b:da:cb:17:0b:b9:91:a9:f4:96:60:d4:29:
         7d:8f:10:11:eb:8b:c6:87:13:43:95:1c:a7:11:81:22:b9:1a:
         78:d5:23:7b:eb:9b:0f:5e:b2:4d:3f:02:49:79:2b:24:58:9f:
         e8:47:38:9c:9f:0a:bc:2a:42:c8:97:b1:03:be:fd:c0:ae:39:
         7f:90:c0:f3:d8:7a:8e:b8:4d:0a:b6:79:f0:26:9c:dd:16:e8:
         3c:99:e5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:28 2026 by rpki-client