Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File:                     BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier:          Zw4tHXIiChN5JquVdk3WQw0VN0RhkRpe7dBmQYbtNCA=
Subject key identifier:   F5:07:88:12:A4:5F:84:33:A6:68:1A:D3:8E:19:48:83:91:FF:98:85
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer:       /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial:       01A00213D2D72FC5EFF9BD1785600B7678E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number:          199F
Signing time:             Fri 14 Aug 2026 21:00:48 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:48 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:48 +0000
Files and hashes:         1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: gi1ZG7jfsY+0N0ZaIYJKfou6vI8VC8Tbv/oJcgU6VpM=)
                          2: inWJjPlJFW21pp4od2z3iY_uZEk.roa (hash: Xd/E3RLJuGMfSPzPkg4w1pBvrrWPKd6B6O8itEqhX1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:d2:d7:2f:c5:ef:f9:bd:17:85:60:0b:76:78:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
        Validity
            Not Before: Aug 14 21:00:48 2026 GMT
            Not After : Aug 15 21:00:48 2026 GMT
        Subject: CN=f5078812a45f8433a6681ad38e19488391ff9885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:62:24:49:e1:62:c5:75:cd:e7:8c:4a:e5:
                    d9:17:a7:06:9e:41:c2:19:7e:c9:83:bc:0b:d0:73:
                    05:24:94:9f:1c:38:34:f3:91:30:13:29:92:78:2f:
                    ab:b3:da:46:24:e8:23:9b:67:f2:cb:16:f2:9e:e7:
                    43:15:88:6e:92:8e:69:d7:2a:41:f6:c2:c8:92:10:
                    77:25:45:bb:5f:63:03:f2:28:10:23:12:b0:17:aa:
                    79:55:ab:d3:e7:fd:3f:53:68:c3:09:1c:f1:46:7c:
                    98:0a:d5:02:81:ce:1c:bb:f7:ac:f2:16:47:7a:e2:
                    5d:e0:c2:e1:ad:2d:c0:d3:8e:f6:79:f6:7e:4a:3d:
                    e8:92:aa:8a:43:1d:c6:52:e4:61:d4:c8:59:a5:e4:
                    76:48:1a:4f:6c:b0:23:93:11:9d:10:5d:3d:51:b3:
                    26:87:75:6f:64:a8:83:c5:52:78:2b:74:a1:e4:1e:
                    c9:5f:c7:e7:7a:4c:98:93:b5:fd:d4:ea:6e:ea:c7:
                    79:73:55:0a:be:0b:67:bd:22:dd:cc:09:b9:1b:0d:
                    aa:91:2a:27:1f:1f:7c:df:16:80:83:83:0f:e9:8f:
                    9e:2e:a5:27:bb:34:4a:20:38:49:7a:a9:87:c2:64:
                    91:07:26:2d:d2:bb:99:69:6f:aa:93:20:96:f0:aa:
                    67:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:07:88:12:A4:5F:84:33:A6:68:1A:D3:8E:19:48:83:91:FF:98:85
            X509v3 Authority Key Identifier:
                keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c2:31:f5:44:1e:32:97:67:25:80:61:31:ad:91:cf:48:ca:
         8e:9a:ad:2e:27:e9:b3:64:87:31:5a:7f:93:bc:e1:63:4e:49:
         37:65:2d:d5:25:81:5d:aa:b1:84:a8:ac:ff:6b:30:4f:b9:53:
         41:40:29:f4:36:e9:05:af:7b:44:5a:81:3f:6a:28:dc:e0:b1:
         ef:cb:16:e6:18:c9:37:1f:9f:cb:36:92:74:ad:02:a5:7b:e8:
         97:de:59:e1:22:e0:39:8c:2f:38:00:70:52:c6:4b:18:f9:18:
         28:bf:13:63:b4:48:8f:5b:5a:b5:0c:55:9b:d6:9d:71:b2:ef:
         62:05:27:27:cf:e1:46:72:1b:55:3c:43:33:83:ef:53:a2:c8:
         24:8e:d0:94:14:56:d5:aa:9b:b4:f9:ed:41:45:22:45:33:16:
         2c:8a:ce:64:bf:45:88:61:96:0b:01:02:f6:2b:d4:1c:9c:34:
         89:f5:04:fd:11:f4:7a:17:8d:2c:22:d9:5b:de:26:11:94:c7:
         54:88:5c:3f:c4:36:b5:a5:06:a5:d6:95:f6:10:86:76:a9:69:
         d0:7e:26:08:7d:98:09:50:31:1c:1f:01:47:f9:c6:cd:6c:64:
         61:d9:f7:2f:e1:2b:7b:a3:ea:0a:a5:8e:0f:ee:31:5c:a3:c2:
         9f:ea:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:06 2026 by rpki-client