Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
File:                     BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft (raw, json)
Hash identifier:          P/5YvWfP3VhxbqEXWPE6ClLwyp83wXQbsJUInHSoiKA=
Subject key identifier:   5A:88:95:04:E7:A9:25:A9:99:3B:E0:A8:BC:67:94:E2:11:2B:2B:E8
Authority key identifier: 05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
Certificate issuer:       /CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Certificate serial:       01A03FA95B5C90645B362EE9F166FFE2EEF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
Manifest number:          01E5
Signing time:             Wed 26 Aug 2026 20:00:58 +0000
Manifest this update:     Wed 26 Aug 2026 20:00:58 +0000
Manifest next update:     Thu 27 Aug 2026 20:00:58 +0000
Files and hashes:         1: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl (hash: QoipuBcdnElWv//ek89FhlYljAGFoOYLS/jFHaosjss=)
                          2: h0ixfocdnsQGjiEtpJ2Wa2m5vUk.roa (hash: SN3q0o2kLPMwCpmviBxq3GsO7Fw/63NA1TEskWpMh+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:a9:5b:5c:90:64:5b:36:2e:e9:f1:66:ff:e2:ee:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
        Validity
            Not Before: Aug 26 20:00:58 2026 GMT
            Not After : Aug 27 20:00:58 2026 GMT
        Subject: CN=5a889504e7a925a9993be0a8bc6794e2112b2be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:e7:91:dc:00:91:86:67:8e:18:36:ce:d7:
                    d2:4d:7e:f4:37:f2:1c:53:fc:22:97:5d:cb:ff:79:
                    0f:74:a9:31:09:66:c6:b4:df:cb:d8:2e:21:e9:c3:
                    44:80:f1:de:44:7f:af:67:92:9f:96:0a:bf:a3:a7:
                    a3:65:f0:99:2e:e3:fc:6a:ab:3b:ab:5b:5f:fc:5c:
                    ef:e9:16:39:c3:e0:18:88:59:8a:be:63:64:d3:7a:
                    c1:df:7e:1e:64:a9:f5:ec:8d:c7:8d:e7:c5:23:30:
                    47:03:73:8d:83:39:84:d1:eb:41:0d:03:13:60:66:
                    e9:ae:67:53:b3:ad:85:3c:af:0a:71:e5:56:ca:fd:
                    fa:a7:9f:ed:e1:d3:89:94:a8:b7:9e:d1:86:27:eb:
                    9d:7b:fd:94:d2:fd:77:19:d4:16:0f:c9:47:01:84:
                    ce:04:a2:24:c4:f2:2c:11:4b:45:79:5c:51:f8:5a:
                    3a:b3:3b:e6:ec:22:08:ae:19:69:58:13:13:6b:c8:
                    fd:79:cc:16:c1:fa:d0:69:90:b7:c5:82:76:31:98:
                    fb:46:0c:31:73:db:ea:2a:4b:b9:3d:e8:26:be:ba:
                    9a:31:74:09:a1:85:b4:a5:0c:28:01:58:48:d4:cd:
                    f2:c2:5b:e8:88:5a:48:95:9c:7d:94:92:7f:0a:38:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:88:95:04:E7:A9:25:A9:99:3B:E0:A8:BC:67:94:E2:11:2B:2B:E8
            X509v3 Authority Key Identifier:
                keyid:05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:56:54:78:83:31:d0:f8:d2:4a:f5:3e:f7:39:89:92:ba:5b:
         9b:bb:94:79:cd:70:cf:3c:89:29:15:33:59:2b:f9:fe:7b:09:
         75:1a:76:c2:2a:78:42:2a:2d:53:22:e2:37:0a:7e:45:d6:58:
         b7:45:55:a9:64:66:56:ce:db:5f:a2:85:c8:48:0b:5f:a6:5e:
         69:5b:12:e4:5d:bd:fc:d7:53:aa:8f:89:c5:f9:2e:15:3c:e7:
         cf:72:db:72:1c:8e:0b:c3:3b:3f:79:15:bf:0b:fe:a1:45:b9:
         fb:63:10:c0:5c:f9:4a:a7:1f:43:29:79:1a:a5:fc:e8:ce:8a:
         ce:dd:8f:44:33:d3:bf:84:20:f2:2c:81:eb:dd:f1:13:a7:cd:
         17:c9:a3:ac:09:c7:b9:c8:f0:29:65:37:02:1f:a0:79:ea:b6:
         7d:20:5a:11:19:ed:aa:24:c3:53:4b:8a:1f:5e:58:9c:47:10:
         34:27:ce:86:69:2a:fd:60:a9:7e:94:b7:71:0a:a7:05:fc:4b:
         bc:19:c2:f4:80:cd:56:69:47:1c:b3:04:c0:c6:7b:18:53:77:
         04:d7:55:c5:13:d8:1c:ca:5f:1b:c3:72:25:0f:03:fc:40:21:
         d9:ec:60:b6:e3:83:56:85:c1:ba:21:ca:50:10:51:10:2d:40:
         7b:0b:a1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:45 2026 by rpki-client