Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
File:                     BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json)
Hash identifier:          9UmJbEFHZr/cXU770rhlwJYoSRMyTRpfwohJYHUpJDk=
Subject key identifier:   B0:3C:3B:30:3A:FE:D0:B1:54:6B:92:B7:DC:C3:0D:6E:11:E4:6B:BB
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Certificate issuer:       /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial:       01A001DCA0531435BC3109540FC4D7A90325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
Manifest number:          1A08
Signing time:             Fri 14 Aug 2026 20:00:30 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:30 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:30 +0000
Files and hashes:         1: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: T47d+/Y0ngsWetwj3mglD1OkeJPv6zaPeX+SXxgfjzA=)
                          2: C_AvtSnRCKwvl2SpLUtFVcIH_w8.roa (hash: Ey0Vszsa81W+PEv7/mryXgBI5kc8rCJJuGeJRL0U9AY=)
                          3: vRgORVIgzFbgx9kOiETjJtMLghA.roa (hash: Uf5SkSIOo28qZJtGrvXdFP718QNyditb6xU5BtcR6CQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:a0:53:14:35:bc:31:09:54:0f:c4:d7:a9:03:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
        Validity
            Not Before: Aug 14 20:00:30 2026 GMT
            Not After : Aug 15 20:00:30 2026 GMT
        Subject: CN=b03c3b303afed0b1546b92b7dcc30d6e11e46bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:52:29:cc:7f:15:6f:de:7e:2c:26:25:80:
                    aa:51:e0:9f:84:6d:2f:aa:9c:3d:33:02:ce:66:e6:
                    fb:14:99:35:c3:5a:af:b7:77:a9:39:86:6d:bb:30:
                    21:f8:e2:7a:fe:f1:bd:18:44:d5:6f:3d:7e:e6:f5:
                    f5:3e:3b:73:a6:11:b8:e4:f5:b8:98:f9:05:12:a6:
                    08:5c:aa:d9:3a:fd:ca:66:5d:54:6c:1f:cd:42:ed:
                    13:40:49:b8:45:1e:99:4d:9e:9e:bd:5b:45:f1:97:
                    ef:16:4e:86:62:c4:cf:6b:58:f0:cb:a9:aa:5d:64:
                    84:51:91:8c:c3:7c:b3:dd:be:93:33:a1:78:8c:2d:
                    77:08:58:05:41:88:ae:c8:63:95:ed:9c:5d:7e:f1:
                    a4:bf:d3:b5:34:bb:a5:9b:9f:e4:2d:4e:d2:46:0c:
                    c8:2e:81:a2:af:26:88:9c:c4:6a:e1:cb:8c:fd:ef:
                    80:8e:2b:f5:ce:1b:c1:89:b8:93:14:ec:83:08:84:
                    9e:4c:90:96:bf:95:2c:18:f6:4c:7f:ee:55:88:d5:
                    45:09:e7:86:ed:9e:b8:15:43:0c:c1:24:3d:fe:de:
                    6e:87:08:30:72:61:cd:8c:06:6d:00:dc:31:17:f7:
                    5d:1b:3d:9f:29:09:f6:84:dc:3b:80:a2:37:56:cf:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3C:3B:30:3A:FE:D0:B1:54:6B:92:B7:DC:C3:0D:6E:11:E4:6B:BB
            X509v3 Authority Key Identifier:
                keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:36:43:3a:0a:b6:74:77:22:52:fd:78:d7:82:1f:6e:97:bf:
         dd:f4:a7:d5:2f:f9:58:81:cb:18:8a:06:5e:66:76:6d:45:3a:
         16:28:dd:8d:74:92:04:5d:b8:4d:0d:df:c0:75:79:e6:0c:5d:
         11:f9:1f:95:8f:62:84:33:59:c7:d0:26:b4:eb:eb:04:6e:2e:
         1d:52:d5:f7:99:f4:f4:de:3f:ab:fa:1f:03:1f:3d:bb:25:e8:
         d3:75:02:ac:0f:fc:e2:91:ec:a1:fd:9a:02:9e:cb:51:00:7f:
         f3:ba:39:b7:1f:e6:a6:b2:01:f4:63:18:f2:1b:29:a5:3c:fb:
         d3:f0:18:4a:ec:94:8d:ab:3d:e2:e3:50:e3:3e:01:e3:d9:d1:
         5d:78:f0:0b:48:45:ce:27:c7:11:9c:19:78:c4:ca:e1:e8:a5:
         3a:d2:11:8d:36:72:a7:cc:62:84:48:16:89:9e:49:26:e4:d7:
         df:c4:fa:8d:d2:a5:d1:6a:54:a8:69:2e:46:e3:19:e3:86:15:
         51:4b:8a:99:16:de:a6:15:5f:75:8e:c5:b9:e1:b5:95:e6:98:
         ab:67:63:9a:52:a0:4b:c9:3f:1d:c7:e1:d4:58:0c:2f:7c:10:
         7a:7e:3e:a8:37:12:20:0e:8b:31:7e:1b:0f:fa:ea:fe:cc:8c:
         7e:2a:28:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:10 2026 by rpki-client