Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft
File:                     B2yh-gAAa6SP7plAIRY6koqhgE4.mft (raw, json)
Hash identifier:          iMVJOMf7X/DBctQBDQH+I3pTCZDjWrCBNpfff9i7zIg=
Subject key identifier:   04:22:AB:C2:7A:71:54:6E:6F:23:2E:20:61:C2:C2:90:D7:A4:5A:10
Authority key identifier: 07:6C:A1:FA:00:00:6B:A4:8F:EE:99:40:21:16:3A:92:8A:A1:80:4E
Certificate issuer:       /CN=076ca1fa00006ba48fee994021163a928aa1804e
Certificate serial:       01A040BBC5C262B0DAC97F53D493C9B669C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft
Manifest number:          02E2
Signing time:             Thu 27 Aug 2026 01:00:42 +0000
Manifest this update:     Thu 27 Aug 2026 01:00:42 +0000
Manifest next update:     Fri 28 Aug 2026 01:00:42 +0000
Files and hashes:         1: B2yh-gAAa6SP7plAIRY6koqhgE4.crl (hash: h50GSI9RKug7OaV3rrA14M8kBwRz+luHcFVrZBwFnBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bb:c5:c2:62:b0:da:c9:7f:53:d4:93:c9:b6:69:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076ca1fa00006ba48fee994021163a928aa1804e
        Validity
            Not Before: Aug 27 01:00:42 2026 GMT
            Not After : Aug 28 01:00:42 2026 GMT
        Subject: CN=0422abc27a71546e6f232e2061c2c290d7a45a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:dd:8d:7d:9f:2f:cd:1c:f0:22:97:43:70:
                    ec:8b:a2:ee:0a:3c:dc:2d:d3:1b:17:69:67:e3:bb:
                    ba:24:49:fc:84:91:cc:33:a4:4c:fd:87:d5:dc:43:
                    11:1b:c2:a3:c1:3c:2d:c7:35:e6:a5:ec:b8:8e:02:
                    36:fa:4a:19:25:94:71:d1:17:22:dc:c3:0f:7c:fe:
                    43:53:56:c5:27:fc:48:ca:10:64:ca:2b:63:31:3b:
                    fb:13:55:27:8d:8c:39:2d:16:5e:12:68:8f:7d:9b:
                    4e:d2:2b:9d:80:3c:68:03:c0:c9:75:da:26:1f:9c:
                    11:49:e7:e8:b6:e2:80:b4:ce:93:27:32:a0:ac:22:
                    ea:2b:62:88:8a:0d:1a:e9:94:ea:ea:27:78:a7:c8:
                    c8:1a:15:19:92:62:58:45:92:57:fc:7f:bf:ee:8d:
                    d7:50:61:3d:55:c1:d7:29:8c:16:90:ab:1b:bb:c7:
                    04:f1:9b:0d:06:4e:45:0e:bf:6b:85:f9:4b:ee:c7:
                    01:07:d5:49:8f:53:23:2c:44:a8:ea:e1:8c:ef:66:
                    ba:ce:85:e3:01:95:ee:2f:7c:cd:d5:1e:b2:25:74:
                    fd:08:4f:2a:f6:ab:26:5f:e5:03:de:0c:cd:38:67:
                    69:ac:e7:fe:dc:59:16:32:32:fc:88:e3:49:3b:8c:
                    55:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:22:AB:C2:7A:71:54:6E:6F:23:2E:20:61:C2:C2:90:D7:A4:5A:10
            X509v3 Authority Key Identifier:
                keyid:07:6C:A1:FA:00:00:6B:A4:8F:EE:99:40:21:16:3A:92:8A:A1:80:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:28:eb:42:9d:9d:22:64:7e:be:e0:a3:75:76:c3:13:85:3f:
         04:83:0a:85:51:29:94:c1:9f:74:96:69:5d:e8:a5:d6:a4:49:
         1b:7e:b8:fd:ed:d7:9e:f6:13:9b:52:bd:46:e4:1b:49:f0:c7:
         a9:46:75:8f:3d:f4:ea:1a:78:70:34:64:42:42:d0:c9:e8:a2:
         a4:ec:a9:b4:7e:7a:19:62:34:72:c0:08:9c:a2:bd:c0:f0:87:
         8a:50:70:2c:b9:36:ad:70:9c:46:a4:f3:7b:b1:a0:4f:73:b5:
         d2:af:9f:fc:e9:a2:a1:a1:2e:a3:2c:4e:ef:29:31:81:4f:38:
         ef:bb:aa:ba:23:83:1a:23:83:2e:87:73:65:75:d6:df:32:1c:
         9c:7a:c1:67:0a:98:e4:6e:59:b1:5a:22:cb:26:f8:44:1c:70:
         e1:da:57:cf:67:1c:43:90:f9:8b:60:27:20:f0:c2:35:2b:d5:
         95:56:79:f0:43:35:aa:7b:24:75:9c:ff:0d:13:68:8e:02:d0:
         da:c1:bf:cd:cc:82:eb:f7:6e:9c:c1:16:4e:29:4f:c5:27:0d:
         42:75:9c:13:0c:4c:0f:ba:42:25:f2:ec:ad:f2:6d:63:11:a0:
         4a:fa:d9:11:3d:c3:27:5d:0c:5c:18:b9:d3:71:9f:dd:06:a1:
         2f:76:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:05 2026 by rpki-client