Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File:                     cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier:          ZuUs1/OK2C+rKnqWKNsjy8lYSpPycuSJFQYySVMicyA=
Subject key identifier:   93:E0:AE:23:23:20:0F:72:50:E2:2E:0C:67:86:B0:F3:C7:CD:7D:C9
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer:       /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial:       01A0412A18C8D6DA0E30442463E048D7EDCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number:          1A28
Signing time:             Thu 27 Aug 2026 03:01:12 +0000
Manifest this update:     Thu 27 Aug 2026 03:01:12 +0000
Manifest next update:     Fri 28 Aug 2026 03:01:12 +0000
Files and hashes:         1: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: HOFVn9T9qm5xaEyyBSDJrobDXid5zmXs35CAWun97xs=)
                          2: pJjBMVgjU8TU3lF8ocox453j5Jw.roa (hash: GXNU56VqxczP2JIPD5AYPnfq2TU7EH3n/lf3ph9JEPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Aug 2026 03:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:2a:18:c8:d6:da:0e:30:44:24:63:e0:48:d7:ed:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
        Validity
            Not Before: Aug 27 03:01:12 2026 GMT
            Not After : Aug 28 03:01:12 2026 GMT
        Subject: CN=93e0ae2323200f7250e22e0c6786b0f3c7cd7dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:f4:58:51:52:9f:1b:7a:a3:f1:c1:12:c8:
                    15:97:a8:9e:01:fc:48:8f:20:87:a4:7b:b5:2a:83:
                    64:29:a1:81:66:59:94:2d:2e:0f:fe:cb:33:a9:19:
                    cf:73:c0:05:61:5f:70:97:65:5a:bc:c1:7d:0c:71:
                    92:65:a5:73:ab:0c:f8:c8:c5:72:eb:93:10:13:51:
                    0e:5c:37:7c:fd:3d:1a:af:a4:2d:89:1f:5f:78:e6:
                    1e:9c:63:70:18:dc:c4:a9:a4:9a:18:47:2b:1d:5a:
                    14:36:7e:f8:ca:61:ce:42:c2:19:1f:d3:76:90:0e:
                    8e:f9:47:0a:e4:7f:1e:62:02:b4:5c:34:3a:17:21:
                    97:70:11:34:be:cf:60:37:43:b9:ed:da:6b:b5:59:
                    99:07:86:b7:24:ff:96:d9:19:d2:68:ae:86:5d:75:
                    25:5f:33:8d:a4:c8:da:40:72:31:aa:55:1e:b2:f6:
                    f5:a8:0f:7d:cd:95:fd:47:78:8b:70:69:2f:ee:66:
                    f5:8e:c1:0e:5a:a4:04:ad:aa:72:7f:59:3c:66:12:
                    33:a9:e7:76:2b:8f:44:0f:99:b7:15:a0:8a:e8:6c:
                    d0:c4:0a:91:b7:28:50:1c:8a:c4:0b:5e:00:d2:a5:
                    2a:b7:56:60:4d:ad:4f:d5:bd:9b:a1:40:f0:56:09:
                    29:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E0:AE:23:23:20:0F:72:50:E2:2E:0C:67:86:B0:F3:C7:CD:7D:C9
            X509v3 Authority Key Identifier:
                keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:54:b9:dc:37:69:fa:f5:21:2f:75:36:57:19:b0:96:28:f3:
         92:51:84:f9:c9:f7:37:60:d5:71:8c:8b:fd:0c:10:71:f7:c8:
         83:c7:9c:fe:8a:8f:c9:cd:ec:83:99:3a:85:cb:4a:bc:43:09:
         72:81:b4:34:1e:a3:fa:95:78:99:e0:69:24:08:c5:99:3d:02:
         d0:c4:7a:82:7b:29:d9:57:c8:14:ea:10:aa:27:7b:10:07:d4:
         05:f5:27:76:2c:df:a5:34:86:06:f8:cf:36:67:c3:c2:23:4f:
         58:ef:a4:66:08:29:4a:e9:b9:8d:85:79:f0:56:d4:66:7f:af:
         25:bb:b2:df:53:c8:4e:4c:0b:5a:93:e1:dd:96:5b:12:f0:45:
         80:ef:b1:8f:fe:90:4b:4b:28:6b:9c:c9:a5:b4:fe:72:d1:73:
         5d:8f:c9:29:ff:05:17:da:cc:36:84:3a:aa:56:28:8d:44:23:
         86:e9:3e:50:18:fe:b1:47:6a:cd:43:b1:36:b6:c8:8f:8c:fb:
         a1:db:a8:8e:08:df:7c:74:c8:76:80:ef:e4:a9:cc:43:f9:9d:
         1b:fe:95:78:32:56:ee:ea:fa:41:e5:f7:95:9c:c9:26:c4:76:
         61:60:3b:bb:ff:db:dc:99:0c:a1:6e:5f:a0:35:a9:e3:9d:13:
         d0:89:c7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:29:14 2026 by rpki-client