Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File:                     s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier:          Xu+krSZVppTksQ5btmj9daJVERDbCGUCsK5i4EXEkuM=
Subject key identifier:   EF:DA:11:1C:8A:CC:2A:0C:71:39:A5:93:4A:AA:77:26:6D:BC:86:4E
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer:       /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial:       019FF8DAB54E684327CC1444485E0B18C70F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number:          1569
Signing time:             Thu 13 Aug 2026 02:01:50 +0000
Manifest this update:     Thu 13 Aug 2026 02:01:50 +0000
Manifest next update:     Fri 14 Aug 2026 02:01:50 +0000
Files and hashes:         1: VjVnMCIpJllowS-mUdPKmibH_s4.roa (hash: RkAjCgTxoEP9Ub/dSw/Wwxp7BKhfppLg+6NL3UVv1Zg=)
                          2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: hq2TIl1zhgG4cRezrZ15jOaoTbAK3bA4v9RtZsESnBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:da:b5:4e:68:43:27:cc:14:44:48:5e:0b:18:c7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
        Validity
            Not Before: Aug 13 02:01:50 2026 GMT
            Not After : Aug 14 02:01:50 2026 GMT
        Subject: CN=efda111c8acc2a0c7139a5934aaa77266dbc864e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:6c:7a:23:b0:85:9c:31:d7:78:53:80:9e:53:
                    b4:4d:80:be:03:9e:e0:28:f9:60:ce:24:81:30:4e:
                    86:00:03:74:83:f9:af:29:8c:85:73:ce:e0:28:36:
                    d0:83:c6:3d:95:e5:87:d8:2c:6e:35:9f:0e:01:f1:
                    e6:a2:70:f7:93:38:b6:00:ab:36:c9:d7:f0:42:c1:
                    f6:ee:ff:62:05:cc:82:ef:ab:bf:7d:c9:04:62:9c:
                    86:c2:1c:e0:24:06:2f:ac:05:3b:16:a5:a0:30:de:
                    77:c7:8f:5a:eb:5e:bd:bc:6a:0d:e2:58:f4:6c:9c:
                    52:14:1c:6f:39:76:50:3a:0b:4a:45:ea:71:9c:7a:
                    32:1d:c1:0a:b4:50:a0:39:16:56:95:cf:b4:de:8e:
                    f9:76:81:10:c5:55:65:c5:32:20:da:f0:81:ae:43:
                    42:36:70:5e:f0:a4:3d:40:cf:f5:58:56:12:c6:fe:
                    03:9b:b9:dd:b0:3e:28:34:b0:74:a7:0e:56:46:50:
                    ea:ba:e6:3e:3b:28:c0:1e:fc:bd:b5:80:9b:f2:c7:
                    a9:2a:dd:cb:09:4d:0d:79:63:f1:e7:70:80:1c:ac:
                    e3:a6:f3:95:35:5e:bd:1c:81:cf:18:f6:84:17:a2:
                    09:76:0c:ee:9b:a4:99:fe:84:76:ae:41:dd:97:01:
                    c3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DA:11:1C:8A:CC:2A:0C:71:39:A5:93:4A:AA:77:26:6D:BC:86:4E
            X509v3 Authority Key Identifier:
                keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e3:99:56:00:fd:75:4e:81:c1:23:c6:1b:6c:40:72:e3:ea:
         a3:a6:2b:43:f9:75:80:72:ca:05:f3:f0:12:c8:1d:66:4b:ac:
         ef:34:8f:56:0f:25:c1:76:43:f0:22:54:f2:77:3b:26:b3:45:
         30:39:47:24:10:f0:bf:03:f4:99:ae:83:14:8d:7e:db:43:78:
         07:29:06:9a:a4:92:16:e6:93:a8:3e:cc:37:33:ba:08:92:11:
         cc:b8:cb:6c:87:24:da:22:74:82:b9:3d:1b:2b:28:c0:91:46:
         a1:1d:5d:7e:16:95:29:61:ab:76:4f:8b:8c:6f:20:ec:ee:13:
         f0:f7:35:bd:21:22:47:a4:8c:30:12:30:d1:95:21:22:1c:91:
         5b:b5:f0:37:e0:94:c4:11:9d:f4:33:4c:2b:87:7c:f6:d9:c6:
         00:cc:cd:b2:2b:29:1d:1a:d9:45:7d:01:02:ed:99:0e:23:f6:
         ff:21:3e:8c:37:aa:83:2b:93:8c:dd:9f:df:e6:52:a1:95:4a:
         dd:ea:4a:66:ef:a4:a1:69:65:bf:20:ec:a9:32:bc:67:dc:bb:
         f3:e1:61:4b:94:01:da:11:cc:90:54:f6:65:07:3d:70:bc:af:
         ef:1d:33:08:d5:94:a7:4f:2f:8d:90:83:8b:7d:69:dc:c8:47:
         df:0a:1e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:36:39 2026 by rpki-client