Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
File:                     B2OUhFMlCEu573jU9xf8S1Rfp-0.mft (raw, json)
Hash identifier:          OZqwvPMe5eGRgI7jXHWbTMaFoodwapAJbWapKrorHok=
Subject key identifier:   B8:62:DC:94:FE:05:78:0E:A5:BF:16:54:32:FF:D8:50:5B:0F:2D:CD
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Certificate issuer:       /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial:       01A000CA6DB957D8A68BE9AB3BE5E8A447E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
Manifest number:          0DED
Signing time:             Fri 14 Aug 2026 15:01:01 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:01 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:01 +0000
Files and hashes:         1: B2OUhFMlCEu573jU9xf8S1Rfp-0.crl (hash: iIM8hF6ds6aS5GXMwVRmPF5B0r2wPnMbLEc/Ew8/SgI=)
                          2: Us3lx6O95lVOsiWVeNzq7dgC-04.roa (hash: +176HDuPnTiKXa7XvMrd7Iut2ICH6A4vQDi3FgDZZS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:6d:b9:57:d8:a6:8b:e9:ab:3b:e5:e8:a4:47:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
        Validity
            Not Before: Aug 14 15:01:01 2026 GMT
            Not After : Aug 15 15:01:01 2026 GMT
        Subject: CN=b862dc94fe05780ea5bf165432ffd8505b0f2dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:47:04:fe:a6:34:e1:c3:c1:bd:15:a9:57:
                    47:d7:7c:bc:5b:42:b4:b3:86:0a:e0:56:56:ad:85:
                    cb:f2:16:b0:fb:dc:7c:2b:4d:bd:32:5f:cc:49:ab:
                    15:8f:aa:6d:7b:6b:10:81:93:d9:c0:ce:b8:d5:62:
                    03:49:ef:94:c7:56:39:4b:ed:9e:7c:12:53:2f:8a:
                    a4:5d:39:da:99:33:e2:7b:8b:7b:47:77:2d:d1:23:
                    dd:70:79:b9:96:cf:f0:3b:cb:25:0f:8c:fd:c3:be:
                    ed:a8:37:00:d0:6f:9e:3d:f9:a9:50:a0:aa:ba:67:
                    7a:78:f9:ad:f6:33:70:73:47:5b:a4:3f:f4:45:2f:
                    e3:4f:67:4a:d3:15:49:a2:54:e7:ad:91:18:b4:d0:
                    e1:65:3a:10:14:02:b9:2b:0f:7b:65:05:97:fa:c5:
                    03:d5:a3:26:c5:60:b1:ea:36:94:4f:eb:5e:f1:50:
                    bc:f0:40:b0:1e:0b:c9:8d:79:11:58:30:64:cb:b0:
                    0a:db:0a:f2:4a:64:45:1d:34:4f:78:4b:2f:c6:95:
                    fa:15:dc:be:21:0d:96:ab:1b:0d:52:9a:9b:18:18:
                    a5:c3:d3:91:26:d1:4f:7a:c2:53:4b:71:58:21:9e:
                    71:9c:ae:93:17:d6:0e:b3:8e:86:4e:c5:22:59:cf:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:62:DC:94:FE:05:78:0E:A5:BF:16:54:32:FF:D8:50:5B:0F:2D:CD
            X509v3 Authority Key Identifier:
                keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f4:16:e6:f7:67:ea:3c:58:42:66:02:92:23:04:1d:54:27:
         5e:6d:94:87:27:87:8b:d6:f2:72:7c:21:20:67:0e:fd:80:71:
         3e:88:1b:2a:f7:6d:fa:e9:68:93:9f:74:82:96:04:a7:e8:50:
         72:89:8f:8c:5c:00:e3:42:74:b3:19:d1:75:f1:cb:d5:6c:99:
         dd:52:6f:80:ae:88:2b:10:58:4c:56:8c:da:17:7d:e5:ce:ff:
         35:57:b9:4d:fc:e2:cb:b2:f3:a8:a0:9a:8e:3c:b5:36:62:dd:
         2d:3b:e8:4e:d5:d6:f6:f7:d8:c4:b7:10:1c:33:07:e7:d2:68:
         99:8a:35:d3:5c:61:eb:70:29:d5:4e:20:2f:b8:37:ad:06:b3:
         be:ba:9a:ad:60:87:f6:9d:d9:3f:65:8f:bc:e1:96:95:44:a9:
         71:38:eb:cd:8c:cd:cc:af:11:06:9a:64:83:0c:a8:bc:c2:cf:
         d7:e4:d2:37:28:9a:31:d8:09:9d:cb:58:28:42:86:f2:e6:05:
         c0:97:2e:79:c8:1e:09:5b:6f:27:c7:15:88:48:6a:b2:9e:bb:
         1a:d2:18:0d:aa:01:da:08:e7:0e:f1:70:c7:39:89:73:08:64:
         92:b0:a0:28:0c:74:4c:c2:f8:3f:5a:18:76:a8:08:b2:7a:79:
         b0:32:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:36 2026 by rpki-client