Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File:                     ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier:          d/wz1k9bNIABoTvBJD1Ix8xhH7GnU/gfo88VP6OZsak=
Subject key identifier:   ED:1E:E7:34:BF:84:A1:7C:07:D3:1A:20:9C:6C:2C:CB:AC:29:75:D5
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer:       /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial:       01A0013835BA856FACF453DF7F301A5E752C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number:          0916
Signing time:             Fri 14 Aug 2026 17:00:55 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:55 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:55 +0000
Files and hashes:         1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: an9cw2r/GjEkH4tGJYA0+ku+Dt0bVCN7Vcjh1mN8LAA=)
                          2: SvlrZHFg845ZhN1Rz3nRAlL1Haw.roa (hash: QGEa378gKuRJuCW4Gpo84qPKj3oloBziyCo0m8Zc5kY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:35:ba:85:6f:ac:f4:53:df:7f:30:1a:5e:75:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
        Validity
            Not Before: Aug 14 17:00:55 2026 GMT
            Not After : Aug 15 17:00:55 2026 GMT
        Subject: CN=ed1ee734bf84a17c07d31a209c6c2ccbac2975d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:1e:5e:23:65:e4:58:ac:4c:71:d7:45:9c:
                    2f:d6:c0:84:c2:89:f2:81:ca:0d:50:52:5f:d6:8d:
                    ad:8c:0e:8d:fd:47:da:a1:69:ae:a7:04:8f:70:7c:
                    b6:ae:c3:93:0e:56:c0:94:44:39:dd:8b:f3:5e:c0:
                    f2:f5:2c:5a:9c:d7:68:5d:da:7b:43:2d:7c:07:65:
                    cc:c6:b8:ff:5d:46:8a:f1:8e:5a:0c:98:b2:c8:38:
                    07:e3:0d:1e:5e:92:bb:d8:08:ed:41:4c:7d:91:8e:
                    27:e9:7d:05:25:1c:90:89:1e:dc:85:00:0b:07:83:
                    f2:31:53:5b:a8:98:c8:21:1a:64:c0:30:cf:5e:5d:
                    0b:92:01:52:7b:ef:83:42:b2:8e:35:99:a8:64:ae:
                    0b:6b:ec:3c:67:ff:92:d6:2f:84:f4:ef:b5:9b:be:
                    f2:be:db:37:7f:e1:38:61:9f:ab:92:eb:ef:07:53:
                    75:3a:7d:c8:6f:36:d3:3f:2b:bb:ea:3e:fd:76:4f:
                    8c:18:9b:ca:53:db:cd:a1:86:65:9d:57:a1:28:87:
                    6c:2f:de:14:ea:b0:54:3a:cb:ba:24:a1:78:d6:cf:
                    2e:ca:89:4d:d0:a3:82:3e:fa:8f:25:5a:80:44:9f:
                    dd:9f:4d:c5:57:63:15:cb:f6:18:df:8b:c8:86:b2:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1E:E7:34:BF:84:A1:7C:07:D3:1A:20:9C:6C:2C:CB:AC:29:75:D5
            X509v3 Authority Key Identifier:
                keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d9:5b:8c:c8:b4:ab:86:ae:b2:ac:fe:70:3a:cd:6a:76:74:
         83:0c:88:f9:fa:67:35:a7:88:d0:28:e5:50:35:63:c2:b8:1e:
         30:42:e8:45:9b:51:b3:86:1a:97:de:ce:73:7e:54:29:53:c4:
         34:d7:09:df:9b:d5:ac:ff:66:82:5c:5a:38:a9:41:86:32:2e:
         b0:b3:68:7d:6c:36:b3:fc:54:9c:61:ac:39:d3:0b:b8:3e:f7:
         87:e1:79:9c:79:8d:67:f2:bb:44:f5:0c:66:37:bf:d8:ce:a3:
         6f:b8:7f:a7:c1:dc:1c:4e:71:75:5c:a8:cc:39:82:6a:dc:5f:
         7e:58:6c:01:2d:69:c1:56:68:32:39:a5:8b:83:71:f0:d8:6d:
         a4:a3:3b:40:b0:cd:0b:96:5c:af:e4:a0:48:8a:54:2f:49:38:
         65:9e:f4:06:b6:a7:16:d2:bc:bd:0c:42:c6:39:b4:5b:ae:3b:
         b1:04:29:7a:13:e1:ef:9e:52:f9:8a:ef:ed:e4:fc:fd:52:d4:
         24:5f:b1:9e:6a:73:80:e0:c7:d8:e8:21:c0:1b:d8:33:b1:1a:
         90:f9:52:50:c0:36:73:8c:76:db:7b:d7:3c:40:4d:9d:09:d2:
         cb:6d:6c:8d:7c:06:6a:6b:ca:5e:41:0c:7b:78:78:11:da:df:
         0f:8b:6e:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABODW6hW+s9FPffzAaXnUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjllMDQ1OWFhOGVhMWZkYjE2MGU0MDI0N2ZlMWQ3NjBh
ZTdjMGQwHhcNMjYwODE0MTcwMDU1WhcNMjYwODE1MTcwMDU1WjAzMTEwLwYDVQQD
EyhlZDFlZTczNGJmODRhMTdjMDdkMzFhMjA5YzZjMmNjYmFjMjk3NWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZseXiNl5FisTHHXRZwv1sCEwony
gcoNUFJf1o2tjA6N/UfaoWmupwSPcHy2rsOTDlbAlEQ53YvzXsDy9SxanNdoXdp7
Qy18B2XMxrj/XUaK8Y5aDJiyyDgH4w0eXpK72AjtQUx9kY4n6X0FJRyQiR7chQAL
B4PyMVNbqJjIIRpkwDDPXl0LkgFSe++DQrKONZmoZK4La+w8Z/+S1i+E9O+1m77y
vts3f+E4YZ+rkuvvB1N1On3IbzbTPyu76j79dk+MGJvKU9vNoYZlnVehKIdsL94U
6rBUOsu6JKF41s8uyolN0KOCPvqPJVqARJ/dn03FV2MVy/YY34vIhrI5dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0e5zS/hKF8B9MaIJxsLMusKXXVMB8GA1UdIwQY
MBaAFAcp4EWaqOof2xYOQCR/4ddgrnwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84YzVkOTgtMGUzYi00ZDliLWFhYWEt
NjRlZGQyN2M1ZDdhLzEvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84YzVkOTgtMGUzYi00ZDliLWFhYWEtNjRlZGQyN2M1ZDdh
LzEvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtlbjMi0
q4ausqz+cDrNanZ0gwyI+fpnNaeI0CjlUDVjwrgeMELoRZtRs4Yal97Oc35UKVPE
NNcJ35vVrP9mglxaOKlBhjIusLNofWw2s/xUnGGsOdMLuD73h+F5nHmNZ/K7RPUM
Zje/2M6jb7h/p8HcHE5xdVyozDmCatxfflhsAS1pwVZoMjmli4Nx8NhtpKM7QLDN
C5Zcr+SgSIpUL0k4ZZ70BranFtK8vQxCxjm0W647sQQpehPh755S+Yrv7eT8/VLU
JF+xnmpzgODH2OghwBvYM7EakPlSUMA2c4x223vXPEBNnQnSy21sjXwGamvKXkEM
e3h4EdrfD4tuoA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:35:59 2026 by rpki-client