Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
File:                     B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft (raw, json)
Hash identifier:          htF3N9Bk5SDFayB/MYbgXcYkKmno24DioejMOuj9lP0=
Subject key identifier:   27:D8:39:0F:69:B4:7D:87:7B:C3:37:11:D5:5D:23:B3:14:7A:96:10
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Certificate issuer:       /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial:       01A00281936C07A51366893B829367D8C519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
Manifest number:          1A09
Signing time:             Fri 14 Aug 2026 23:00:41 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:41 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:41 +0000
Files and hashes:         1: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl (hash: +NBGCQu6umKy0EP8en+/BjIt11vdbW0GuN9YvgmVAAo=)
                          2: D_VQ3qcRrE1RcGz3L2hiZ5fs0q0.roa (hash: 3nNJVROdH+6QiOLIHdge07W05M5mKR5oevvpsKwNQMQ=)
                          3: R2U_cQMFZM4-GXgQbDyShKrCAGA.roa (hash: Ag9S/vdQiIdyQgvSbtnRDnW1NQNHuWeD+J3+pdenpE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:93:6c:07:a5:13:66:89:3b:82:93:67:d8:c5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
        Validity
            Not Before: Aug 14 23:00:41 2026 GMT
            Not After : Aug 15 23:00:41 2026 GMT
        Subject: CN=27d8390f69b47d877bc33711d55d23b3147a9610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:7a:6c:07:62:a3:b2:3b:f4:e9:64:67:ea:
                    bb:bb:94:ed:90:22:0c:1e:c0:4b:6f:eb:a2:61:2a:
                    1c:b7:a3:fd:f4:04:f5:e4:59:20:0e:33:0d:0f:8c:
                    c1:4b:ba:7c:2a:28:df:45:9e:5f:5b:be:37:e2:9e:
                    7a:54:f1:dd:15:2e:d6:bb:5a:26:4e:64:e5:ee:91:
                    c9:cd:eb:9c:56:ed:2c:01:9f:ae:f3:82:31:9b:26:
                    7c:5d:87:ec:a2:f3:23:2c:71:89:a0:dc:89:5e:f0:
                    92:36:8b:4d:7c:d4:5d:0b:f5:ff:21:b0:4e:6c:b2:
                    ee:c4:f9:ca:c2:f0:10:93:11:dc:42:be:19:dc:e0:
                    eb:e9:92:37:06:db:2c:e0:c7:df:78:84:e4:6d:d5:
                    bf:6d:e5:f0:a4:3f:89:4c:c7:25:21:ff:bf:f5:db:
                    62:f1:0e:e2:04:85:fc:a8:11:e5:a4:ac:ae:3b:2c:
                    38:fa:79:ff:ee:77:2e:6c:0c:32:db:94:a6:64:44:
                    fd:d9:d8:63:b2:ef:1c:67:cd:54:76:f8:5d:be:f8:
                    ba:0a:29:35:7f:60:e0:44:9d:13:41:96:c0:c3:75:
                    02:2a:5b:0c:0b:91:3d:9d:33:31:58:ff:71:c4:4f:
                    eb:f8:cf:3e:2e:f2:0f:2d:fa:1e:07:65:9e:64:f7:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D8:39:0F:69:B4:7D:87:7B:C3:37:11:D5:5D:23:B3:14:7A:96:10
            X509v3 Authority Key Identifier:
                keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:19:b1:8d:3a:56:d0:66:a8:40:e4:95:b9:82:d3:a6:14:c2:
         f1:d7:b2:09:12:72:e0:2f:1d:2e:09:b9:7b:31:f7:c8:15:b2:
         e9:cc:1e:ea:a8:b1:57:aa:75:0d:ac:05:c4:a7:90:f4:c2:b4:
         08:48:9a:29:ad:60:12:94:05:ae:b1:a0:ef:64:d1:18:7d:3a:
         a9:e7:38:77:dd:a7:22:5c:96:d4:bc:bf:e9:d2:de:44:13:ec:
         84:cc:d5:da:a8:82:c4:31:01:a1:ec:ab:72:29:6d:96:d9:86:
         30:da:46:10:7e:28:e6:e8:d6:c8:7a:11:4a:4c:e3:03:ef:6b:
         09:9d:72:57:3c:a5:dc:d2:8a:6c:e7:28:e2:34:85:dd:fd:8e:
         16:c1:3b:f0:b0:e6:a1:d9:bd:3e:e3:73:2f:ab:f4:1a:06:7f:
         4e:cb:fc:ed:e4:dd:94:fb:87:7b:68:0d:52:70:f0:81:7f:6c:
         3c:f0:6c:9f:df:9f:19:c7:5a:21:a4:07:d5:45:06:57:1d:60:
         b5:be:88:d6:72:72:88:bc:0f:44:b3:d8:68:9f:e2:2f:c9:39:
         56:6a:26:fe:70:19:3c:9e:58:dc:c8:f2:2f:c7:45:8e:03:7f:
         55:15:7d:37:d2:9b:1d:36:ab:68:58:7f:33:f9:62:63:a0:f2:
         ff:9f:72:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACgZNsB6UTZok7gpNn2MUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ODYyOWY1ZjYxZmIyNTU2NDI4NGZiZmVmZmI5M2MzZWQ0
NGJmZTIwHhcNMjYwODE0MjMwMDQxWhcNMjYwODE1MjMwMDQxWjAzMTEwLwYDVQQD
EygyN2Q4MzkwZjY5YjQ3ZDg3N2JjMzM3MTFkNTVkMjNiMzE0N2E5NjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOZ6bAdio7I79OlkZ+q7u5TtkCIM
HsBLb+uiYSoct6P99AT15FkgDjMND4zBS7p8KijfRZ5fW7434p56VPHdFS7Wu1om
TmTl7pHJzeucVu0sAZ+u84IxmyZ8XYfsovMjLHGJoNyJXvCSNotNfNRdC/X/IbBO
bLLuxPnKwvAQkxHcQr4Z3ODr6ZI3Btss4MffeITkbdW/beXwpD+JTMclIf+/9dti
8Q7iBIX8qBHlpKyuOyw4+nn/7ncubAwy25SmZET92dhjsu8cZ81Udvhdvvi6Cik1
f2DgRJ0TQZbAw3UCKlsMC5E9nTMxWP9xxE/r+M8+LvIPLfoeB2WeZPe9TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfYOQ9ptH2He8M3EdVdI7MUepYQMB8GA1UdIwQY
MBaAFAeGKfX2H7JVZChPv+/7k8PtRL/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRZcDlmWWZzbFZrS0UtXzdfdVR3LTFFdi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNjE4ZTQtN2E2NC00NjBjLWFhZjkt
NjNhZjJjNGY0MDIwLzEvQjRZcDlmWWZzbFZrS0UtXzdfdVR3LTFFdi1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8wNjE4ZTQtN2E2NC00NjBjLWFhZjktNjNhZjJjNGY0MDIw
LzEvQjRZcDlmWWZzbFZrS0UtXzdfdVR3LTFFdi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRmxjTpW
0GaoQOSVuYLTphTC8deyCRJy4C8dLgm5ezH3yBWy6cwe6qixV6p1DawFxKeQ9MK0
CEiaKa1gEpQFrrGg72TRGH06qec4d92nIlyW1Ly/6dLeRBPshMzV2qiCxDEBoeyr
ciltltmGMNpGEH4o5ujWyHoRSkzjA+9rCZ1yVzyl3NKKbOco4jSF3f2OFsE78LDm
odm9PuNzL6v0GgZ/Tsv87eTdlPuHe2gNUnDwgX9sPPBsn9+fGcdaIaQH1UUGVx1g
tb6I1nJyiLwPRLPYaJ/iL8k5Vmom/nAZPJ5Y3MjyL8dFjgN/VRV9N9KbHTaraFh/
M/liY6Dy/59yyQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:46 2026 by rpki-client