Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
File:                     BJt80UY9tia6isf5o9hzPbDdgSQ.mft (raw, json)
Hash identifier:          +Xmf5S5AbuRgOtzgzIAUWdyS8jFa3BcNThoP+G1XF9k=
Subject key identifier:   72:16:38:68:44:16:23:66:21:4F:4C:94:F9:73:F7:DC:B6:77:12:E4
Authority key identifier: 04:9B:7C:D1:46:3D:B6:26:BA:8A:C7:F9:A3:D8:73:3D:B0:DD:81:24
Certificate issuer:       /CN=049b7cd1463db626ba8ac7f9a3d8733db0dd8124
Certificate serial:       01A04129BB4519EE0129B52CC31D594E1625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:00:48 +0000
Manifest this update:     Thu 27 Aug 2026 03:00:48 +0000
Manifest next update:     Fri 28 Aug 2026 03:00:48 +0000
Files and hashes:         1: 2P7SaJMcXsPyw8VXwK7lvJ92E84.roa (hash: De3uii83QPlU8l4wx/dhaSH5u2nnOc8fYmv6y+0gSd4=)
                          2: BJt80UY9tia6isf5o9hzPbDdgSQ.crl (hash: PF/iypHbcCJTDotC9y5qFa9M4Emr3jtnPXmqjoYtWcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:29:bb:45:19:ee:01:29:b5:2c:c3:1d:59:4e:16:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049b7cd1463db626ba8ac7f9a3d8733db0dd8124
        Validity
            Not Before: Aug 27 03:00:48 2026 GMT
            Not After : Aug 28 03:00:48 2026 GMT
        Subject: CN=7216386844162366214f4c94f973f7dcb67712e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:45:40:78:fa:78:8d:46:bd:41:2b:fd:b9:
                    43:eb:b9:74:22:36:8c:a4:1b:83:6c:fa:4d:6d:35:
                    9c:9a:1b:c1:f0:01:9a:59:37:a9:96:34:7c:21:f0:
                    ac:78:80:86:04:3c:c9:23:a5:ff:e9:36:c0:6f:07:
                    1a:30:cc:3f:87:1a:fa:86:fb:dd:fa:d2:e6:e6:b9:
                    46:75:01:ce:72:f6:59:d8:c3:f0:48:38:0e:2b:31:
                    19:d3:36:5b:c3:e3:96:11:a9:7e:8f:78:04:1b:f8:
                    6a:99:d2:cd:87:1a:9b:1e:8e:09:ae:47:95:64:3a:
                    c6:c5:13:f0:49:18:9b:7f:da:ce:b0:85:29:95:75:
                    8b:d8:ad:5a:50:f4:d1:75:57:23:78:6f:3f:78:e7:
                    11:f4:08:bc:c9:e7:22:53:93:a6:0a:56:a3:81:b0:
                    71:81:cc:48:08:e9:53:c5:25:83:26:82:21:6f:cb:
                    fc:5b:e3:dc:89:dc:e5:30:ae:3d:1f:aa:0a:78:48:
                    e5:6f:0b:95:79:2c:19:34:47:9d:79:d5:97:a6:f3:
                    e7:f2:d1:19:b9:32:b5:f3:c3:fe:36:32:d0:c9:4a:
                    ff:57:08:ab:d6:d5:9f:dc:d4:f4:3c:08:7c:d8:17:
                    7e:b5:54:95:3b:53:d1:dd:da:d9:57:f8:86:ab:61:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:16:38:68:44:16:23:66:21:4F:4C:94:F9:73:F7:DC:B6:77:12:E4
            X509v3 Authority Key Identifier:
                keyid:04:9B:7C:D1:46:3D:B6:26:BA:8A:C7:F9:A3:D8:73:3D:B0:DD:81:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a7:f5:eb:2f:89:43:48:5a:95:11:c4:48:18:15:d1:41:ec:
         60:3e:71:ae:8a:d7:ec:6c:8b:2d:47:6a:7b:b6:9a:e9:9c:53:
         b8:4b:e5:53:c1:07:b0:22:69:09:d8:96:5d:b4:6e:3e:0c:b0:
         0e:55:be:db:47:f3:05:54:e4:cb:4f:7b:7b:99:37:04:29:43:
         e9:2a:1c:5d:30:f2:3b:91:cf:90:9a:e1:12:ed:e3:7d:8b:2c:
         7d:c8:fb:c5:85:f5:23:39:19:08:e7:8e:1b:04:48:d1:f3:cb:
         f5:f6:a0:68:29:82:81:da:cb:39:37:54:c0:fc:71:23:32:39:
         f1:c5:61:89:8c:cd:d2:91:f4:30:01:a2:57:8c:ff:92:1a:e3:
         63:c8:9b:44:65:04:f5:a7:4a:f5:ba:89:25:d2:0e:54:f4:36:
         f0:b9:a0:45:55:97:69:35:7a:8b:07:65:8e:97:c0:15:95:ae:
         e6:bb:e1:b9:9e:66:7d:9a:39:9e:17:09:9a:e7:90:62:ab:74:
         0d:ff:82:17:d7:52:52:ec:93:bd:66:c2:4e:92:0b:8c:ca:e2:
         3a:0b:07:5d:a8:70:90:df:b8:94:32:28:eb:c2:9a:ae:33:58:
         67:5b:da:9c:b1:fe:f5:81:70:0f:f0:99:77:fa:f1:0b:07:fb:
         17:94:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:08:38 2026 by rpki-client