Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
File:                     B6GfRqF7nUhp32ZJPPsF19golKY.mft (raw, json)
Hash identifier:          XvB8MbfY5aCsGyH/yfLqE74JXmwPHoEF2PI6M4Z5kzM=
Subject key identifier:   33:1F:5C:59:24:33:3E:33:D9:68:62:34:CB:F7:1F:D7:80:E6:9E:85
Authority key identifier: 07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6
Certificate issuer:       /CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
Certificate serial:       01A001DCE7944110A2E07399C6A451DB7F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 20:00:49 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:49 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:49 +0000
Files and hashes:         1: B6GfRqF7nUhp32ZJPPsF19golKY.crl (hash: GNKp1E65OzQks8aIjpQJ8Sp4d74bSCri7S+FbRcpNSE=)
                          2: z0RxzKUmGvdiXVqo5YVLQIA15ao.roa (hash: +26ezE/PG8fzSDohvHnBiXyXfPXqiwQfhlM6I+79ozE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:e7:94:41:10:a2:e0:73:99:c6:a4:51:db:7f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
        Validity
            Not Before: Aug 14 20:00:49 2026 GMT
            Not After : Aug 15 20:00:49 2026 GMT
        Subject: CN=331f5c5924333e33d9686234cbf71fd780e69e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9d:10:01:eb:2f:7a:79:35:07:2a:d5:ac:39:
                    7b:2c:37:27:0e:78:5c:d5:5a:60:43:a6:01:4f:60:
                    19:83:93:8a:82:0c:16:86:c2:43:17:1a:03:27:cb:
                    00:09:53:f9:d6:7f:e1:f4:b4:50:0b:dd:7f:3f:19:
                    8d:b0:45:21:77:33:49:d3:de:3a:6f:91:65:39:f4:
                    ae:6f:65:13:34:31:1c:0b:3f:91:c0:7d:d5:f4:9b:
                    ce:29:d8:03:76:47:61:86:f4:27:75:b7:5e:c8:4a:
                    19:a9:9f:26:26:78:6c:e6:f3:48:13:df:cb:a5:6e:
                    ee:fd:9b:69:42:3f:41:04:63:11:7b:53:95:bc:a3:
                    a2:9c:ba:a6:31:05:bf:bd:7b:36:b2:12:f9:3f:f9:
                    e8:8b:cb:fa:9a:44:ab:07:f7:17:b4:10:ad:b7:c5:
                    aa:0f:96:d3:fa:a5:f0:27:b6:15:c9:76:ea:b4:87:
                    a8:a3:17:79:f7:ca:ab:06:4b:d3:5f:55:20:82:6b:
                    24:92:27:1c:e7:18:0c:fd:6f:2c:e3:36:54:35:6d:
                    cf:94:20:3b:31:f0:18:4c:b7:bd:bf:79:4d:77:3e:
                    a0:0f:61:5f:e6:fa:55:80:a5:b7:06:97:78:28:55:
                    7f:7a:66:4b:6b:7f:45:98:34:30:4c:4f:94:56:5f:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1F:5C:59:24:33:3E:33:D9:68:62:34:CB:F7:1F:D7:80:E6:9E:85
            X509v3 Authority Key Identifier:
                keyid:07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:28:9a:f3:9e:19:38:99:cd:c9:27:71:c7:dc:49:bb:26:8f:
         8a:28:e9:20:50:ce:05:d0:33:9b:9d:32:d7:8f:93:50:aa:f4:
         be:f0:fb:86:4c:63:e1:35:58:b1:fa:61:53:de:44:f1:f7:46:
         99:c4:9b:8a:d3:01:5c:04:b0:3b:7e:ed:95:da:13:a0:32:89:
         a0:44:3e:be:08:2f:fd:3d:45:7f:c3:0d:dd:23:2f:92:df:a3:
         97:1b:5f:e0:4d:b2:60:e8:f8:d8:0b:ad:ad:6a:49:db:e3:53:
         95:12:3b:91:b4:c5:30:49:1b:52:60:c0:36:d6:ed:10:82:c7:
         1e:6e:c8:4e:60:1d:27:5a:03:e1:38:0a:e0:8e:1b:e2:29:88:
         71:9e:b0:26:7e:37:57:9b:b2:01:a5:97:cf:43:06:2a:68:43:
         af:9b:75:41:85:81:27:17:e1:88:2a:8f:b4:ed:11:b6:fb:81:
         f6:01:5b:14:ca:c6:5a:bd:9c:7f:7d:4a:09:cb:0a:c0:dd:15:
         36:2e:c5:73:ce:80:f4:e9:19:16:16:cb:82:91:c4:20:7f:32:
         96:18:37:f7:dc:58:fd:db:bb:d4:f1:9c:52:e8:88:71:1b:97:
         f6:94:51:1b:8b:cd:44:cd:60:d1:6c:9d:69:51:09:f3:16:85:
         d4:a7:87:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3OeUQRCi4HOZxqRR238wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YTE5ZjQ2YTE3YjlkNDg2OWRmNjY0OTNjZmIwNWQ3ZDgy
ODk0YTYwHhcNMjYwODE0MjAwMDQ5WhcNMjYwODE1MjAwMDQ5WjAzMTEwLwYDVQQD
EygzMzFmNWM1OTI0MzMzZTMzZDk2ODYyMzRjYmY3MWZkNzgwZTY5ZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J0QAesvenk1ByrVrDl7LDcnDnhc
1VpgQ6YBT2AZg5OKggwWhsJDFxoDJ8sACVP51n/h9LRQC91/PxmNsEUhdzNJ0946
b5FlOfSub2UTNDEcCz+RwH3V9JvOKdgDdkdhhvQndbdeyEoZqZ8mJnhs5vNIE9/L
pW7u/ZtpQj9BBGMRe1OVvKOinLqmMQW/vXs2shL5P/noi8v6mkSrB/cXtBCtt8Wq
D5bT+qXwJ7YVyXbqtIeooxd598qrBkvTX1Uggmskkicc5xgM/W8s4zZUNW3PlCA7
MfAYTLe9v3lNdz6gD2Ff5vpVgKW3Bpd4KFV/emZLa39FmDQwTE+UVl8+ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMfXFkkMz4z2WhiNMv3H9eA5p6FMB8GA1UdIwQY
MBaAFAehn0ahe51Iad9mSTz7BdfYKJSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZHZlJxRjduVWhwMzJaSlBQc0YxOWdvbEtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hMGI2MDUtNTZmYi00Y2JhLThkZGMt
YjU4NTQxNzkxMGViLzEvQjZHZlJxRjduVWhwMzJaSlBQc0YxOWdvbEtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9hMGI2MDUtNTZmYi00Y2JhLThkZGMtYjU4NTQxNzkxMGVi
LzEvQjZHZlJxRjduVWhwMzJaSlBQc0YxOWdvbEtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzyia854Z
OJnNySdxx9xJuyaPiijpIFDOBdAzm50y14+TUKr0vvD7hkxj4TVYsfphU95E8fdG
mcSbitMBXASwO37tldoToDKJoEQ+vggv/T1Ff8MN3SMvkt+jlxtf4E2yYOj42Aut
rWpJ2+NTlRI7kbTFMEkbUmDANtbtEILHHm7ITmAdJ1oD4TgK4I4b4imIcZ6wJn43
V5uyAaWXz0MGKmhDr5t1QYWBJxfhiCqPtO0RtvuB9gFbFMrGWr2cf31KCcsKwN0V
Ni7Fc86A9OkZFhbLgpHEIH8ylhg399xY/du71PGcUuiIcRuX9pRRG4vNRM1g0Wyd
aVEJ8xaF1KeHfQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:04 2026 by rpki-client