Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft
File:                     BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft (raw, json)
Hash identifier:          Rp6B8Eqio7jAvWAcdqdcSiEblL9u28G3JQnxb+Abhgo=
Subject key identifier:   CD:64:09:91:E6:78:4F:56:F2:EA:1A:9C:CA:DD:7C:AF:CF:4F:E1:8B
Authority key identifier: 05:96:1F:09:4A:0E:9C:8F:66:82:82:39:FC:C5:28:1D:8D:2F:8C:E3
Certificate issuer:       /CN=05961f094a0e9c8f66828239fcc5281d8d2f8ce3
Certificate serial:       01A05A0D653699C2538BEBF1329C016FDBF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft
Manifest number:          16
Signing time:             Mon 31 Aug 2026 23:00:22 +0000
Manifest this update:     Mon 31 Aug 2026 23:00:22 +0000
Manifest next update:     Tue 01 Sep 2026 23:00:22 +0000
Files and hashes:         1: 1-ugnk_ffMVB8wG0rW9yMH-zHHj8.roa (hash: 7Wndaz6zZT3fyizdw/fdXMeU4add/sMlZyEvogSeIM8=)
                          2: BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl (hash: l86dX8nXf0/69w1mnqQMznv22A3BJwRjeM2jMQ3EEhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:5a:0d:65:36:99:c2:53:8b:eb:f1:32:9c:01:6f:db:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05961f094a0e9c8f66828239fcc5281d8d2f8ce3
        Validity
            Not Before: Aug 31 23:00:22 2026 GMT
            Not After : Sep  1 23:00:22 2026 GMT
        Subject: CN=cd640991e6784f56f2ea1a9ccadd7cafcf4fe18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:6b:21:dd:47:07:d6:27:d4:a6:d5:cd:1c:
                    82:9e:d2:39:1b:eb:ca:00:1a:75:5d:9a:70:f6:58:
                    e6:1d:77:2b:09:c3:63:a1:1d:a0:6c:56:67:b4:34:
                    87:15:63:6c:0c:29:37:d5:35:3d:b6:2c:ed:23:c8:
                    32:1e:65:f9:e1:e3:df:f4:0d:79:b5:59:a5:68:ad:
                    32:67:d7:fe:9e:ae:dd:be:de:c9:bc:94:aa:59:3d:
                    15:04:40:94:a9:5a:49:99:75:b8:5e:5c:ca:95:6a:
                    60:2f:b9:86:92:cc:d3:fa:28:bc:26:2c:bc:0a:4c:
                    28:41:50:a5:29:16:6d:f1:8a:05:19:d9:88:57:35:
                    80:97:52:0b:0d:12:65:4d:28:f1:52:64:2f:b0:fd:
                    eb:51:41:42:8c:ab:60:e6:d2:40:a6:df:65:e0:b3:
                    d7:3a:02:d0:6d:0c:25:73:8c:3b:f9:e2:b9:fd:c8:
                    4a:e2:eb:60:62:dc:6e:9c:df:b7:75:f2:a0:ed:ca:
                    c4:25:58:36:0d:e8:01:c5:20:b8:05:8b:47:bb:4d:
                    06:af:17:42:4a:a2:3b:6b:a5:e0:60:ed:27:d3:ec:
                    43:92:bd:5f:81:40:55:b3:12:23:33:f0:9c:73:40:
                    cd:1f:8e:3c:96:15:27:08:15:ad:82:11:65:9d:a8:
                    a0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:64:09:91:E6:78:4F:56:F2:EA:1A:9C:CA:DD:7C:AF:CF:4F:E1:8B
            X509v3 Authority Key Identifier:
                keyid:05:96:1F:09:4A:0E:9C:8F:66:82:82:39:FC:C5:28:1D:8D:2F:8C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:ed:8a:4f:e4:f9:2e:46:57:b9:12:2d:bf:ec:5c:10:5a:
         e7:45:0e:cd:b6:f3:d8:a9:55:1d:db:63:b9:6f:b5:1f:fc:16:
         a2:23:ce:64:5a:e0:a2:e4:06:c2:c1:16:f6:a5:f9:fd:ef:6b:
         1c:b0:48:34:fb:07:85:87:b6:e7:77:88:7c:28:fd:3e:cf:ef:
         dc:e4:34:8a:35:47:22:4e:4c:74:e8:91:c9:7f:55:77:f6:48:
         e5:32:c2:d1:fa:6a:aa:ff:9a:11:ad:ad:3d:40:23:81:b9:f4:
         18:d7:40:05:0f:d4:5c:56:51:30:ee:e6:77:cf:ff:5a:ef:02:
         a1:fd:a9:02:35:f6:97:f0:8c:7f:4d:92:28:5e:32:3e:16:ec:
         54:33:e2:76:c9:71:2f:44:7f:da:81:33:09:46:23:46:9d:1c:
         65:7f:ad:89:03:9c:67:bf:60:69:c6:1c:31:95:3d:f0:3a:a8:
         77:8b:33:62:c0:96:34:0b:4e:a8:de:4c:96:11:5c:93:cd:74:
         dc:40:8a:67:82:66:1a:0d:4b:93:a8:05:57:f0:55:94:00:ba:
         0d:aa:15:58:df:ab:bd:e9:41:63:4c:eb:52:18:6c:f6:8f:57:
         0f:f8:b0:3f:22:48:0d:00:73:56:92:34:68:0e:a7:e1:e6:4d:
         26:78:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:49:53 2026 by rpki-client