Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File:                     Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier:          ZHu5x9gY5zALXgRavCnXwtliWAW738d3/3ZL5RzqChA=
Subject key identifier:   0D:52:36:7D:3F:F4:D8:C6:43:F2:5D:EB:3F:59:A1:26:E5:8B:1A:EF
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer:       /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial:       01A000256A3323A1B6E70BDF72D50FDB2118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number:          16DB
Signing time:             Fri 14 Aug 2026 12:00:47 +0000
Manifest this update:     Fri 14 Aug 2026 12:00:47 +0000
Manifest next update:     Sat 15 Aug 2026 12:00:47 +0000
Files and hashes:         1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: E2Iy1fpwtc4w/21FkGRB5mFLD14ky6mVZagD42LaLeQ=)
                          2: TM2u3nE4U4gt579zKk1egxcYwGw.roa (hash: XOA83pwjmnyrd8JcXEc6+qU+kfl85cy7kc2/rS23hZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:25:6a:33:23:a1:b6:e7:0b:df:72:d5:0f:db:21:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
        Validity
            Not Before: Aug 14 12:00:47 2026 GMT
            Not After : Aug 15 12:00:47 2026 GMT
        Subject: CN=0d52367d3ff4d8c643f25deb3f59a126e58b1aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:72:17:7e:3e:ef:c8:92:a2:29:3b:6a:2c:
                    35:fb:df:4b:99:2e:8d:7b:f9:45:16:4d:56:47:c3:
                    93:74:ac:e5:9d:0d:ef:7b:3b:93:53:06:8d:9e:7e:
                    68:aa:fc:f3:c6:c0:da:64:92:d2:0a:a4:15:b6:9a:
                    9e:a6:0e:9f:36:15:39:fd:16:a3:91:25:26:29:95:
                    27:48:58:65:8e:6f:05:0a:d6:9b:f4:b8:9b:64:3a:
                    da:45:18:c1:81:54:2d:c5:1d:04:b8:83:5f:ae:92:
                    b6:5d:1d:f9:74:b9:b3:55:3c:99:8d:b6:92:52:6d:
                    f3:58:6a:0c:78:45:bd:58:e8:8c:7a:cf:da:17:93:
                    96:e1:36:bb:16:dd:ba:52:7e:1a:52:7e:cb:2b:49:
                    75:87:ae:ba:b9:d4:43:bb:3d:b5:21:be:e0:dd:15:
                    b0:14:b5:b2:26:09:35:fa:eb:a3:b9:8e:71:08:71:
                    54:58:d1:04:af:c6:41:53:33:e8:2b:a6:90:df:5b:
                    d1:39:28:12:a7:06:08:24:41:4d:43:9c:2d:c2:84:
                    89:4d:9a:6f:0a:a0:79:c8:bc:7c:c2:4d:d9:b9:10:
                    53:71:ff:dd:75:72:12:51:dd:68:c6:03:c5:27:34:
                    5f:4e:6c:58:1e:2b:a0:7b:ee:a4:88:00:7e:1e:6d:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:52:36:7D:3F:F4:D8:C6:43:F2:5D:EB:3F:59:A1:26:E5:8B:1A:EF
            X509v3 Authority Key Identifier:
                keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:44:51:56:b4:c6:4e:42:cf:45:6b:0e:4a:91:21:68:7a:b0:
         5f:bc:76:92:72:68:ad:aa:d7:88:64:30:d3:48:cb:38:ea:e2:
         87:32:1d:68:f6:28:a8:50:1b:b5:62:af:09:b9:fc:3c:a9:19:
         ac:4c:f1:cd:ed:62:49:13:ab:30:b9:70:5c:8a:12:02:8f:dd:
         ed:af:3b:03:5d:01:2e:35:a1:bf:e1:93:e1:eb:2d:8c:38:ad:
         7f:7d:4e:75:8f:58:7c:7b:11:76:e3:b9:f4:6d:98:2a:df:76:
         f5:51:f5:d1:39:57:15:33:5f:79:cd:55:4e:c2:f8:03:c3:da:
         c3:13:4d:f5:ae:01:63:52:d0:2e:30:1a:ac:aa:1b:a8:06:78:
         35:d5:97:37:ea:ec:91:6f:0e:de:55:b4:84:87:0b:ff:fa:4c:
         4c:af:84:9c:67:ca:4b:75:94:4b:7b:23:55:80:80:8b:67:80:
         7e:cd:be:64:fd:fa:5b:51:90:e9:ff:d4:f4:3d:8b:fa:a3:6b:
         ca:03:82:7c:bf:5c:2a:1c:83:e1:5a:df:30:36:99:0e:4b:87:
         27:bb:76:55:58:20:13:6f:65:c3:54:f8:e3:b8:e5:ce:f6:e4:
         26:f5:80:bb:76:15:50:ad:ad:db:e2:b3:0c:9a:7a:25:f5:31:
         8b:3e:44:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAJWozI6G25wvfctUP2yEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OGNiODViYzRlOWU0YjczMmU5NTdmMDhhYTFjMDIzN2Fh
ZGM0N2YwHhcNMjYwODE0MTIwMDQ3WhcNMjYwODE1MTIwMDQ3WjAzMTEwLwYDVQQD
EygwZDUyMzY3ZDNmZjRkOGM2NDNmMjVkZWIzZjU5YTEyNmU1OGIxYWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPByF34+78iSoik7aiw1+99LmS6N
e/lFFk1WR8OTdKzlnQ3vezuTUwaNnn5oqvzzxsDaZJLSCqQVtpqepg6fNhU5/Raj
kSUmKZUnSFhljm8FCtab9LibZDraRRjBgVQtxR0EuINfrpK2XR35dLmzVTyZjbaS
Um3zWGoMeEW9WOiMes/aF5OW4Ta7Ft26Un4aUn7LK0l1h666udRDuz21Ib7g3RWw
FLWyJgk1+uujuY5xCHFUWNEEr8ZBUzPoK6aQ31vROSgSpwYIJEFNQ5wtwoSJTZpv
CqB5yLx8wk3ZuRBTcf/ddXISUd1oxgPFJzRfTmxYHiuge+6kiAB+Hm3XkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1SNn0/9NjGQ/Jd6z9ZoSblixrvMB8GA1UdIwQY
MBaAFAaMuFvE6eS3MulX8IqhwCN6rcR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xOGM4NTYtMThiMS00Mzc1LWJjYWMt
MTlmMjJlZDYxM2E1LzEvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8xOGM4NTYtMThiMS00Mzc1LWJjYWMtMTlmMjJlZDYxM2E1
LzEvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFERRVrTG
TkLPRWsOSpEhaHqwX7x2knJorarXiGQw00jLOOrihzIdaPYoqFAbtWKvCbn8PKkZ
rEzxze1iSROrMLlwXIoSAo/d7a87A10BLjWhv+GT4estjDitf31OdY9YfHsRduO5
9G2YKt929VH10TlXFTNfec1VTsL4A8PawxNN9a4BY1LQLjAarKobqAZ4NdWXN+rs
kW8O3lW0hIcL//pMTK+EnGfKS3WUS3sjVYCAi2eAfs2+ZP36W1GQ6f/U9D2L+qNr
ygOCfL9cKhyD4VrfMDaZDkuHJ7t2VVggE29lw1T447jlzvbkJvWAu3YVUK2t2+Kz
DJp6JfUxiz5ElQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:55 2026 by rpki-client