Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File:                     BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier:          Coo3SRRnDGs5e3UUww41LFPVr5Gl2UwgijyRc66LsA8=
Subject key identifier:   73:E6:35:C2:F7:E5:DB:45:D4:6A:FA:5F:5A:CF:35:65:DF:7B:73:5F
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer:       /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial:       01A0024B0A32CEAC181DDEC9C1239C6C3A85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 22:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:07 +0000
Files and hashes:         1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: ljEc3+fECmTrX763Mg1yB2FetXOpsFb6XDN1pDwRlHE=)
                          2: S-GSVSUNsQXRLLGV7acDr7Du9U8.roa (hash: 08f9iSNOb+DwAADHclZ0Gz3HX8s6Ev9SIpd6zgDk2gI=)
                          3: dBHYUyrQZG5vTatsRMBA19NHm_c.roa (hash: 8k3QIlP09rDzyL3WPR0T1GCqxvLRw8qsbYX3pzeDEZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:0a:32:ce:ac:18:1d:de:c9:c1:23:9c:6c:3a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
        Validity
            Not Before: Aug 14 22:01:07 2026 GMT
            Not After : Aug 15 22:01:07 2026 GMT
        Subject: CN=73e635c2f7e5db45d46afa5f5acf3565df7b735f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:d3:3d:37:c6:f3:7b:d7:da:13:76:d7:e7:
                    c0:a2:a1:00:eb:4e:78:ef:35:32:6b:33:04:29:07:
                    44:2b:c7:80:26:4a:f5:61:17:2a:45:e5:8a:2c:be:
                    66:21:19:58:6e:64:6d:e8:41:88:d2:81:5b:3d:63:
                    b2:8a:85:5c:53:32:c1:f2:7c:0b:86:72:ce:c2:6a:
                    d0:cc:7f:3d:da:5c:31:70:b6:6d:45:d2:0c:3c:2b:
                    f3:c8:b3:93:fb:3d:57:40:51:97:e9:be:c3:2e:33:
                    54:b8:4b:d8:6d:76:74:70:b4:54:ac:34:cd:71:16:
                    17:84:42:f5:5d:23:6d:f2:69:0a:fb:e1:b2:23:29:
                    f9:17:3d:ee:1c:77:b8:a8:86:7e:35:15:38:34:96:
                    f7:d5:ba:67:0e:03:4f:39:a1:ad:39:a6:82:11:ce:
                    4b:92:83:a9:d7:ad:46:9f:2b:e9:92:f1:cc:5b:64:
                    a4:96:67:63:f4:71:59:7e:66:9f:97:6c:dd:6c:b7:
                    ec:de:67:40:b6:f1:1b:f0:d2:3c:d3:f4:23:66:a4:
                    cf:09:af:02:9f:77:7f:63:e8:88:10:82:41:80:36:
                    01:2f:e1:36:20:ed:9d:b4:92:af:42:20:87:2e:08:
                    48:fd:93:a8:fd:37:31:86:50:f3:bd:18:fc:3c:fa:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E6:35:C2:F7:E5:DB:45:D4:6A:FA:5F:5A:CF:35:65:DF:7B:73:5F
            X509v3 Authority Key Identifier:
                keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:0f:da:4a:49:e4:31:4d:ed:e1:44:33:57:d5:eb:68:8d:
         fa:f0:e6:2e:3a:72:72:e2:7a:a4:45:6f:07:2d:2d:25:56:61:
         e2:d8:ee:6b:54:2d:02:f6:f9:7a:67:f9:b2:02:85:f0:01:a1:
         d2:6d:93:8f:81:e7:20:9c:0d:a2:4a:c3:27:ba:08:b5:e8:8d:
         67:83:c0:95:ef:40:cd:12:4f:17:ae:d4:15:ae:24:14:78:75:
         86:f0:ea:9f:17:83:e6:0d:f6:0d:0b:03:4e:28:7b:d5:9b:98:
         90:2f:28:0a:e5:41:f7:4f:63:a6:72:fc:7b:c5:44:16:da:1e:
         2e:70:da:4b:e2:38:32:07:ce:7b:fa:ed:f5:b0:c0:4f:46:40:
         4a:da:cb:7d:f5:70:b0:52:f4:28:02:d4:80:8c:be:79:41:91:
         28:ea:f2:4f:43:d7:13:27:62:ce:6c:be:2b:ba:f5:d0:2f:1c:
         a8:31:2c:d4:b8:40:48:eb:7c:45:c8:48:3d:f0:f1:5a:9a:d7:
         9f:77:cc:f6:f8:ed:a6:37:bb:d1:d1:5f:01:73:0a:29:31:c6:
         a5:7f:84:bb:16:31:3c:2e:05:85:59:69:2e:54:ca:0e:1c:dd:
         de:b7:18:be:3b:03:58:37:f2:8b:87:3c:a5:a7:a5:8e:90:26:
         18:83:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:12:05 2026 by rpki-client