Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
File:                     BNhWAsroYaFGaoWobO-1rLA4qxI.mft (raw, json)
Hash identifier:          AOn0WqEUwyrVfGOgfY3ER8r9VNrySKPg26KXYyLLI6M=
Subject key identifier:   B6:F8:8B:C6:2B:EB:C8:AB:47:13:FF:93:A8:C3:5E:DA:66:F0:1A:F2
Authority key identifier: 04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12
Certificate issuer:       /CN=04d85602cae861a1466a85a86cefb5acb038ab12
Certificate serial:       01A0024B3337EFF1508EBCF70A4D90610B40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
Manifest number:          0101
Signing time:             Fri 14 Aug 2026 22:01:17 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:17 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:17 +0000
Files and hashes:         1: BNhWAsroYaFGaoWobO-1rLA4qxI.crl (hash: qHvTIGCrwKlzii4tvaBvB5ew91T4hxxdyBrSO7pUpik=)
                          2: W4Jd97wklYPbtC1yRMX3CKRKmZA.roa (hash: 1Sm8Xnqv2nrDhx2KEVkLvXTxHHoxXzQJhfn447Uj43I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:33:37:ef:f1:50:8e:bc:f7:0a:4d:90:61:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d85602cae861a1466a85a86cefb5acb038ab12
        Validity
            Not Before: Aug 14 22:01:17 2026 GMT
            Not After : Aug 15 22:01:17 2026 GMT
        Subject: CN=b6f88bc62bebc8ab4713ff93a8c35eda66f01af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:04:e7:3c:d7:2b:51:b3:b9:40:48:93:08:
                    95:cd:ac:75:8f:d3:bf:0b:28:46:31:dc:fd:a3:3a:
                    1e:d5:3e:d9:b0:b7:0a:56:33:9c:49:3a:ae:71:08:
                    4c:4e:a4:54:c1:ac:72:38:29:a0:e7:ee:2c:b1:29:
                    82:35:cc:a3:36:77:df:e6:75:74:e4:ac:25:f3:03:
                    b1:16:c7:dc:a8:36:a5:95:e2:cb:aa:4b:c8:ac:10:
                    d8:bf:b7:e1:7b:c1:d9:b9:f7:c9:bf:0a:60:3f:a1:
                    a3:85:1a:ce:d5:54:90:7f:e4:a7:ce:8a:e1:e5:44:
                    84:35:ee:29:e7:e9:b9:45:f3:f0:96:e4:f8:c0:89:
                    5f:5d:cc:ec:4a:bc:d7:a1:52:03:41:1d:a2:9b:40:
                    21:9b:3f:39:58:0b:69:64:f8:b3:eb:40:4d:19:6f:
                    43:27:46:ad:d5:61:f7:8f:6e:b9:db:b3:ff:a1:29:
                    37:fd:dc:fb:4c:0e:09:4d:6e:f6:b3:be:3e:20:94:
                    57:f5:60:ff:30:d2:bf:2e:3c:56:48:96:3d:c0:60:
                    45:44:a7:71:6f:41:b5:c1:23:76:20:3f:9a:9b:94:
                    65:c2:f2:27:62:97:6c:5c:b9:ff:c5:60:a6:a6:d8:
                    af:9b:a7:48:1f:14:a8:f7:bd:cc:64:23:a8:10:72:
                    78:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F8:8B:C6:2B:EB:C8:AB:47:13:FF:93:A8:C3:5E:DA:66:F0:1A:F2
            X509v3 Authority Key Identifier:
                keyid:04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:33:cb:b8:21:22:21:81:0a:17:bf:1b:46:8f:04:ce:a2:ec:
         b1:ff:6d:8c:f1:6a:3b:d0:d8:7a:ca:c6:f9:36:4e:1a:aa:b1:
         ad:41:b7:fd:9e:0d:7c:1a:c4:3e:05:20:9d:f6:bf:7f:ac:2b:
         70:9f:e7:0c:1f:30:48:a6:57:29:40:aa:7e:8b:f3:a9:ec:e6:
         af:db:ff:55:e3:46:f4:07:0d:24:6e:90:44:02:90:ff:93:d5:
         4f:ed:69:15:d8:e6:5f:42:44:e0:7a:13:c5:a7:9d:e3:b5:58:
         25:01:7b:ed:da:95:5e:7a:24:1c:8a:06:b3:1a:a1:50:62:21:
         98:e8:a5:1b:a0:4d:40:49:b3:72:7b:a0:03:fe:55:d3:cc:b8:
         4b:55:c0:bc:40:fb:c6:9c:dd:5d:b2:10:32:30:8c:69:a1:12:
         64:78:15:82:a4:20:ed:00:d6:9d:ef:a2:bf:0f:d5:46:59:84:
         9d:53:08:33:27:af:87:ec:8c:3d:f2:10:49:bd:cd:ca:a5:6f:
         03:1f:a2:06:84:07:17:bb:db:5f:0b:bb:9b:69:98:87:58:94:
         53:20:0e:38:a2:e4:28:fa:0e:32:25:e0:65:e3:48:c8:12:dc:
         26:a3:f3:6c:0a:d1:27:7d:38:b3:e4:43:61:f2:32:80:27:55:
         1f:54:c4:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSzM37/FQjrz3Ck2QYQtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDg1NjAyY2FlODYxYTE0NjZhODVhODZjZWZiNWFjYjAz
OGFiMTIwHhcNMjYwODE0MjIwMTE3WhcNMjYwODE1MjIwMTE3WjAzMTEwLwYDVQQD
EyhiNmY4OGJjNjJiZWJjOGFiNDcxM2ZmOTNhOGMzNWVkYTY2ZjAxYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDQE5zzXK1GzuUBIkwiVzax1j9O/
CyhGMdz9ozoe1T7ZsLcKVjOcSTqucQhMTqRUwaxyOCmg5+4ssSmCNcyjNnff5nV0
5Kwl8wOxFsfcqDalleLLqkvIrBDYv7fhe8HZuffJvwpgP6GjhRrO1VSQf+Snzorh
5USENe4p5+m5RfPwluT4wIlfXczsSrzXoVIDQR2im0Ahmz85WAtpZPiz60BNGW9D
J0at1WH3j26527P/oSk3/dz7TA4JTW72s74+IJRX9WD/MNK/LjxWSJY9wGBFRKdx
b0G1wSN2ID+am5RlwvInYpdsXLn/xWCmptivm6dIHxSo973MZCOoEHJ4rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLb4i8Yr68irRxP/k6jDXtpm8BryMB8GA1UdIwQY
MBaAFATYVgLK6GGhRmqFqGzvtaywOKsSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5oV0Fzcm9ZYUZHYW9Xb2JPLTFyTEE0cXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iZjRlYWUtNmNhOS00ZmI1LTk0YWIt
ZTVmZmZhZjNhNGY3LzEvQk5oV0Fzcm9ZYUZHYW9Xb2JPLTFyTEE0cXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iZjRlYWUtNmNhOS00ZmI1LTk0YWItZTVmZmZhZjNhNGY3
LzEvQk5oV0Fzcm9ZYUZHYW9Xb2JPLTFyTEE0cXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjPLuCEi
IYEKF78bRo8EzqLssf9tjPFqO9DYesrG+TZOGqqxrUG3/Z4NfBrEPgUgnfa/f6wr
cJ/nDB8wSKZXKUCqfovzqezmr9v/VeNG9AcNJG6QRAKQ/5PVT+1pFdjmX0JE4HoT
xaed47VYJQF77dqVXnokHIoGsxqhUGIhmOilG6BNQEmzcnugA/5V08y4S1XAvED7
xpzdXbIQMjCMaaESZHgVgqQg7QDWne+ivw/VRlmEnVMIMyevh+yMPfIQSb3NyqVv
Ax+iBoQHF7vbXwu7m2mYh1iUUyAOOKLkKPoOMiXgZeNIyBLcJqPzbArRJ304s+RD
YfIygCdVH1TEUg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:14:02 2026 by rpki-client