Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
File:                     BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json)
Hash identifier:          fZBau7xlmLbYLKH3iitQONWV7wS++4ZScyJhgqGfwPg=
Subject key identifier:   45:B3:FE:0A:33:DC:38:AC:0C:76:CE:E3:D6:86:F6:CB:3A:37:B9:1C
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Certificate issuer:       /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial:       01A00138273568906ADF35E2FB5062803F10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
Manifest number:          157D
Signing time:             Fri 14 Aug 2026 17:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:52 +0000
Files and hashes:         1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: lxJ+DJRg9wKyraYfLKRTBrU4XcG4yvoGIUHIheLF1OM=)
                          2: aOp5hrahbo0DudvEr6ppbcclIIw.roa (hash: ot52KZc899CUKbyUZFqNVx6u88DCcjOJWawepQpzrNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:27:35:68:90:6a:df:35:e2:fb:50:62:80:3f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
        Validity
            Not Before: Aug 14 17:00:52 2026 GMT
            Not After : Aug 15 17:00:52 2026 GMT
        Subject: CN=45b3fe0a33dc38ac0c76cee3d686f6cb3a37b91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:2f:d8:8f:f2:e4:5c:9e:7a:7e:9e:18:4c:
                    d8:a8:13:5d:ed:db:40:14:f7:0b:3f:ac:f6:6e:30:
                    31:16:aa:f3:42:60:8f:38:c9:ec:07:8b:7b:18:8d:
                    87:f7:62:9c:0c:e0:07:8e:a5:1a:d6:88:77:cb:d0:
                    bf:5e:2b:d7:0e:cf:dd:ba:49:e1:22:85:cf:52:c0:
                    ce:17:79:4b:67:85:b6:34:90:26:9d:fe:da:45:b3:
                    ae:95:3f:44:e7:33:12:f5:dc:b0:0d:db:cc:f3:4c:
                    8d:42:dd:6f:8c:13:02:67:e9:9e:72:56:da:90:9f:
                    58:6c:58:22:34:1f:66:87:0c:2a:64:6c:a3:3a:7a:
                    76:b1:ae:29:75:88:3a:e5:0b:ff:1f:4b:62:15:3e:
                    03:05:9e:2a:4b:0c:c5:00:cd:3e:6f:70:7c:27:9e:
                    e2:3b:fe:3d:49:c2:7f:ef:00:64:fd:15:22:1b:2c:
                    ef:4f:7a:af:09:29:7a:2f:46:4e:f9:f6:2d:58:a8:
                    f0:d1:39:17:50:61:36:86:54:db:da:bc:8c:80:cb:
                    63:0f:1a:4f:b1:6e:d8:d7:38:2c:b0:d4:09:6e:92:
                    7a:02:f6:86:af:5d:3f:35:b5:8b:d0:dd:9c:63:f6:
                    a7:3f:22:97:b8:a9:0b:dd:0b:7c:67:e6:7b:29:2e:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B3:FE:0A:33:DC:38:AC:0C:76:CE:E3:D6:86:F6:CB:3A:37:B9:1C
            X509v3 Authority Key Identifier:
                keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:01:0e:72:a0:7a:ca:0c:75:f0:db:ff:9d:bf:ce:26:a2:a8:
         9f:c8:bf:16:5a:25:2f:7d:7d:94:10:fc:93:05:6b:f4:2f:17:
         b1:09:3a:0a:86:0f:63:c4:80:0f:37:5c:93:4d:98:8f:23:06:
         e1:63:f4:08:93:d5:68:02:3e:c2:74:ec:cf:5a:63:77:40:50:
         7f:08:bd:4b:39:a4:39:57:46:da:7b:7d:96:e0:7c:de:83:b1:
         e9:ee:dd:a0:6a:1f:ee:4d:96:ac:20:45:c7:d0:b2:d3:c3:e6:
         83:fd:33:51:a6:e9:be:d7:a8:3b:10:ae:27:31:7c:a2:65:51:
         08:61:6c:e0:ed:75:0b:73:2e:ee:5d:54:bc:54:66:9a:4d:a8:
         57:a9:8b:f9:22:c6:9e:ed:64:7b:71:9f:26:41:1a:03:66:d3:
         41:b2:60:da:b7:dd:f8:9c:43:a1:91:b0:e6:57:89:f2:9c:00:
         31:60:b9:d0:32:54:7c:d1:5d:46:52:9b:95:a8:33:84:21:ff:
         cc:9e:28:c8:d0:d7:16:16:ba:ad:fe:e6:f1:88:67:96:c4:89:
         b9:af:8b:f5:9c:d7:8a:8b:e8:77:fd:09:44:87:b3:7d:1d:c2:
         8c:19:a9:b3:23:3c:89:31:59:5a:52:d1:4d:66:52:08:d7:2c:
         1f:a7:11:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOCc1aJBq3zXi+1BigD8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MTVjMTU1ODNiOWNjZmY5NDJjZmIzZWVlMDRlMmRlOTU2
NDI2NjIwHhcNMjYwODE0MTcwMDUyWhcNMjYwODE1MTcwMDUyWjAzMTEwLwYDVQQD
Eyg0NWIzZmUwYTMzZGMzOGFjMGM3NmNlZTNkNjg2ZjZjYjNhMzdiOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFUv2I/y5Fyeen6eGEzYqBNd7dtA
FPcLP6z2bjAxFqrzQmCPOMnsB4t7GI2H92KcDOAHjqUa1oh3y9C/XivXDs/duknh
IoXPUsDOF3lLZ4W2NJAmnf7aRbOulT9E5zMS9dywDdvM80yNQt1vjBMCZ+meclba
kJ9YbFgiNB9mhwwqZGyjOnp2sa4pdYg65Qv/H0tiFT4DBZ4qSwzFAM0+b3B8J57i
O/49ScJ/7wBk/RUiGyzvT3qvCSl6L0ZO+fYtWKjw0TkXUGE2hlTb2ryMgMtjDxpP
sW7Y1zgssNQJbpJ6AvaGr10/NbWL0N2cY/anPyKXuKkL3Qt8Z+Z7KS5WKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWz/goz3DisDHbO49aG9ss6N7kcMB8GA1UdIwQY
MBaAFAUVwVWDucz/lCz7Pu4E4t6VZCZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAt
YmUzZTdhOWNlMTViLzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAtYmUzZTdhOWNlMTVi
LzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAEOcqB6
ygx18Nv/nb/OJqKon8i/FlolL319lBD8kwVr9C8XsQk6CoYPY8SADzdck02YjyMG
4WP0CJPVaAI+wnTsz1pjd0BQfwi9SzmkOVdG2nt9luB83oOx6e7doGof7k2WrCBF
x9Cy08Pmg/0zUabpvteoOxCuJzF8omVRCGFs4O11C3Mu7l1UvFRmmk2oV6mL+SLG
nu1ke3GfJkEaA2bTQbJg2rfd+JxDoZGw5leJ8pwAMWC50DJUfNFdRlKblagzhCH/
zJ4oyNDXFha6rf7m8YhnlsSJua+L9ZzXiovod/0JRIezfR3CjBmpsyM8iTFZWlLR
TWZSCNcsH6cRRw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:49 2026 by rpki-client