Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File:                     BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier:          IjzQ8uQxGEhsa/0kngjoZEjWakY2xtkHlHjDq8p3WOI=
Subject key identifier:   21:B9:85:19:20:E7:C6:1E:95:C2:8C:61:F8:66:9C:E1:A2:31:72:92
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer:       /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial:       01A00213E883B89B2562BD2194D42ADD4FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number:          10EB
Signing time:             Fri 14 Aug 2026 21:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:54 +0000
Files and hashes:         1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: uKcoAM4mzYOPYpJf08LFqVqA/Gc2ObHJYqD1/PixW48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:e8:83:b8:9b:25:62:bd:21:94:d4:2a:dd:4f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
        Validity
            Not Before: Aug 14 21:00:54 2026 GMT
            Not After : Aug 15 21:00:54 2026 GMT
        Subject: CN=21b9851920e7c61e95c28c61f8669ce1a2317292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:0e:55:7f:6e:3a:f3:0d:5e:35:17:9e:7a:
                    85:45:96:0f:2f:71:7f:29:de:5b:a7:58:d7:04:cb:
                    eb:86:a2:66:68:75:a2:46:53:b5:79:0e:a7:c9:f7:
                    1b:75:e5:71:0c:40:cf:ec:4b:89:2e:53:06:36:8d:
                    38:e5:17:11:66:e3:c0:c3:eb:c5:34:cb:3a:3a:e4:
                    e1:73:7a:70:64:b2:32:1c:bf:d5:11:05:50:0e:25:
                    36:4e:e0:70:64:08:32:a1:6f:fb:8e:e6:8c:5d:50:
                    08:4d:af:01:4b:02:71:45:ed:2e:8b:12:7a:e3:55:
                    a0:26:20:0e:7e:ff:aa:df:01:2f:b0:4c:4b:be:cd:
                    d1:7e:84:dc:85:14:21:81:81:c2:37:79:a3:ec:5c:
                    d5:df:e5:a6:74:35:58:97:be:25:51:b8:fe:a8:7d:
                    d5:00:10:53:dc:00:64:84:fe:b2:4f:eb:b3:47:c2:
                    cc:fc:b7:4b:4b:89:df:46:0e:2a:03:7c:29:65:24:
                    8f:3a:e0:ac:42:25:6e:67:40:64:29:6d:45:ff:4d:
                    60:7a:09:d0:e1:fe:eb:20:7f:a6:31:c2:5d:cb:58:
                    a1:cb:cb:b2:e0:6e:7d:93:f4:c6:8e:df:9b:bc:5a:
                    8a:0b:3e:db:9f:ad:bb:8f:54:e5:3f:5c:03:38:b8:
                    75:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B9:85:19:20:E7:C6:1E:95:C2:8C:61:F8:66:9C:E1:A2:31:72:92
            X509v3 Authority Key Identifier:
                keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6e:27:18:45:af:c5:7b:48:a4:a3:75:34:41:e6:e8:1d:0e:
         ac:4d:62:8e:79:d7:86:67:2e:c0:52:68:ef:f6:39:b1:22:97:
         35:e6:3f:9c:91:92:62:2a:31:d2:89:8b:15:e7:29:24:2e:1c:
         bd:d0:23:a9:9b:6f:b7:db:71:5a:b8:56:79:ad:60:1a:ee:44:
         41:63:62:c5:f7:a2:2e:77:67:6b:9e:0a:b7:26:a0:d5:ce:1a:
         f3:15:08:de:04:9a:f7:ea:a4:9d:32:ef:39:5e:7d:0b:18:0c:
         a2:53:8a:cb:b1:b9:b1:7d:18:67:e5:31:5b:ce:2a:5d:35:2e:
         c7:85:2f:29:95:cf:3c:60:c9:6d:84:57:19:8c:99:45:47:b3:
         b3:e8:18:5a:7c:ef:6f:02:92:cc:cf:7c:9d:4e:be:0c:93:9a:
         3f:1e:b6:49:d2:0a:4f:b8:f6:c8:f9:f1:ff:98:4f:b0:1b:ea:
         9e:01:e2:ca:54:6f:31:59:70:88:8c:f5:b0:e4:a1:04:f2:ec:
         75:53:ab:84:78:8f:84:58:15:2c:27:1e:7e:36:57:5e:1a:d8:
         03:ec:07:d5:97:6d:11:fb:1d:76:d5:c1:70:76:fc:d4:66:68:
         71:9a:28:68:62:62:a2:9b:e1:00:0c:99:c2:a5:52:f9:82:06:
         4c:fe:f6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:10 2026 by rpki-client