Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
File:                     bwVF620H5D0m7IQAymTMUbuVZv8.mft (raw, json)
Hash identifier:          qFv/9s/WurkNC1U2YdVuQq63EmjILCIRbYtFWF7+YEE=
Subject key identifier:   C7:45:35:9A:17:C8:02:A8:29:E8:65:50:8A:FA:51:F2:B4:52:2C:9E
Authority key identifier: 6F:05:45:EB:6D:07:E4:3D:26:EC:84:00:CA:64:CC:51:BB:95:66:FF
Certificate issuer:       /CN=6f0545eb6d07e43d26ec8400ca64cc51bb9566ff
Certificate serial:       01A0016FF2BC5F7E603EC989E6B0BF70AE19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
Manifest number:          7A
Signing time:             Fri 14 Aug 2026 18:01:48 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:48 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:48 +0000
Files and hashes:         1: bwVF620H5D0m7IQAymTMUbuVZv8.crl (hash: WNOEt8EVWWOs+R48NK1r+USP7xnXhdMBp5MJ90dtJOw=)
                          2: crSSmpcLdnTcx2ovWO2MVlxTArU.roa (hash: L7ZtPmmnI2aRhLMmMXfjqnVphR0y7J0Vd8zHZ1iyQFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:f2:bc:5f:7e:60:3e:c9:89:e6:b0:bf:70:ae:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0545eb6d07e43d26ec8400ca64cc51bb9566ff
        Validity
            Not Before: Aug 14 18:01:48 2026 GMT
            Not After : Aug 15 18:01:48 2026 GMT
        Subject: CN=c745359a17c802a829e865508afa51f2b4522c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:b2:f8:8a:c4:19:7a:b4:09:77:7a:94:c8:
                    5a:6a:c9:3b:71:f9:4f:1d:df:fb:88:d8:71:ca:0f:
                    71:c6:68:ca:06:03:dc:61:1f:ee:57:23:48:6f:1f:
                    69:a4:8a:09:ec:23:b2:d7:90:30:86:cd:33:63:96:
                    37:33:bf:7b:c8:e5:4f:c6:69:aa:e4:ea:7d:f1:fc:
                    ca:9e:ab:4d:3e:c3:5c:af:66:be:b6:0b:7c:8d:8d:
                    73:1c:18:a1:ce:f4:f7:15:95:66:17:c9:b4:f0:f3:
                    9d:c7:16:6c:db:5d:e6:7c:c0:1a:2d:8f:68:b0:96:
                    9b:05:e8:a5:f8:28:8a:b6:a4:e2:10:1c:17:ca:b0:
                    54:83:5f:04:cd:c0:6d:5a:00:bf:cc:34:f9:e1:33:
                    db:f8:5d:b6:ac:6b:5e:05:6e:53:ca:3c:81:3d:5f:
                    2b:40:ad:9e:ef:57:f4:ba:43:2a:61:20:78:86:25:
                    77:bd:97:9d:a6:7f:a1:b5:d9:aa:cf:76:9d:dd:49:
                    74:ff:22:a4:85:ee:49:67:13:ac:f0:11:4b:94:86:
                    4a:4a:c9:7f:83:e0:14:65:64:19:34:c7:a2:00:b6:
                    05:f7:c4:85:3a:20:4d:92:dd:7b:d1:29:6e:36:2e:
                    d0:ca:ef:1d:4a:99:64:04:22:a8:46:2f:f7:21:86:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:45:35:9A:17:C8:02:A8:29:E8:65:50:8A:FA:51:F2:B4:52:2C:9E
            X509v3 Authority Key Identifier:
                keyid:6F:05:45:EB:6D:07:E4:3D:26:EC:84:00:CA:64:CC:51:BB:95:66:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:00:37:ce:83:c7:8f:87:e9:ed:71:64:cd:7e:e4:d7:88:21:
         0d:7f:90:a7:ba:f0:8a:7d:e1:6f:b5:d6:6f:4a:61:4c:91:46:
         0d:f2:92:af:fa:71:3f:3e:a1:73:92:8c:07:a6:01:13:e7:e8:
         e5:94:10:8d:8d:34:e1:da:fe:cd:f0:51:c3:52:2b:80:af:83:
         53:1b:34:17:cc:15:5e:ab:7b:7f:a2:cf:71:a0:92:a5:49:5f:
         3a:90:68:55:8f:6e:39:1a:02:b6:69:99:39:05:5e:73:33:4f:
         1b:fa:ac:fc:1d:9f:27:0d:31:d7:cb:29:e7:c3:76:ab:00:3c:
         59:3b:48:24:79:15:9e:a4:4c:5d:db:36:16:b3:30:18:76:bd:
         24:e0:6a:76:db:c4:f4:ec:3a:d6:69:dd:d0:1b:c0:4d:c7:a2:
         77:7e:c8:a2:8a:bc:a9:c3:17:b8:24:d6:bf:c3:16:f8:7e:32:
         50:af:f8:5f:f7:80:67:21:76:4d:1a:67:f6:e5:bb:60:d6:d5:
         b6:6f:c1:ac:46:f9:50:ec:eb:20:51:89:81:dd:87:5c:3b:10:
         92:e6:ed:03:f5:62:5c:91:09:89:19:17:17:cb:14:59:6d:9e:
         d2:af:b9:d3:c0:37:79:b8:70:db:f0:5e:2e:bd:ff:e7:7c:52:
         df:ac:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:11:29 2026 by rpki-client