Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
File:                     By4pytat0iohtWIVEYeEHI9T8uU.mft (raw, json)
Hash identifier:          ej3p2ytOYcDp/KpTkewvYbwWrAdHwh5SHsDoDRyTcSY=
Subject key identifier:   72:4F:09:D4:4D:C6:D1:9F:F4:86:C4:49:38:AE:55:9A:22:03:77:8C
Authority key identifier: 07:2E:29:CA:D6:AD:D2:2A:21:B5:62:15:11:87:84:1C:8F:53:F2:E5
Certificate issuer:       /CN=072e29cad6add22a21b562151187841c8f53f2e5
Certificate serial:       01A0404DC9F08D3B49900DCFAF88B18957A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
Manifest number:          E5
Signing time:             Wed 26 Aug 2026 23:00:34 +0000
Manifest this update:     Wed 26 Aug 2026 23:00:34 +0000
Manifest next update:     Thu 27 Aug 2026 23:00:34 +0000
Files and hashes:         1: By4pytat0iohtWIVEYeEHI9T8uU.crl (hash: poSlYQDPaaFUMX/NTSZzWvY7Prv3LaY3d+ghbM+SMUY=)
                          2: NcP6QLbPAGbSnMuOHGBdAIY-8qc.roa (hash: w5wTWXfJi4JyaAkM3S35Sztsv2m7MFD4x5Xkavn1W38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4d:c9:f0:8d:3b:49:90:0d:cf:af:88:b1:89:57:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072e29cad6add22a21b562151187841c8f53f2e5
        Validity
            Not Before: Aug 26 23:00:34 2026 GMT
            Not After : Aug 27 23:00:34 2026 GMT
        Subject: CN=724f09d44dc6d19ff486c44938ae559a2203778c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:eb:79:c2:e8:42:d9:72:35:d3:64:25:0d:
                    c9:1d:26:ff:e5:63:34:87:5c:87:64:ef:44:ba:89:
                    b6:29:ba:93:b9:cf:2a:db:70:03:fc:6d:76:be:c0:
                    4b:2e:42:56:00:12:06:c0:03:3a:7e:fb:88:5e:59:
                    31:ac:f2:40:2a:d5:fe:2f:ca:c8:c6:7e:80:d2:f7:
                    5d:06:15:1d:bd:a7:1d:1e:23:ab:3c:3f:e8:d2:92:
                    c0:a4:8c:94:c0:dc:90:a0:81:eb:b5:03:b4:a3:7b:
                    a9:77:6a:ae:f8:9b:b9:28:e4:c3:7f:20:83:3c:67:
                    8c:32:ea:aa:1d:bb:f6:38:3e:7d:ac:5c:62:3f:1f:
                    62:2b:22:d2:c4:af:b2:70:40:08:a1:67:35:db:25:
                    a5:1c:b7:6b:6c:31:f6:24:5c:82:79:e5:9b:91:5b:
                    62:e9:48:d8:69:54:e3:bf:c5:e0:78:38:f7:0c:66:
                    d7:58:76:81:78:a3:7c:cb:a4:3f:0d:39:40:ec:d0:
                    6b:56:b7:1f:66:6b:44:08:40:2a:a7:5f:c8:ca:db:
                    9d:6e:ff:17:5f:cf:e0:69:ae:1e:49:94:60:35:f6:
                    cb:6d:2b:3d:7d:3b:5c:42:4d:46:5b:97:fa:3e:81:
                    2c:1e:97:4c:8c:f8:94:ac:ef:34:21:ec:d8:18:a9:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4F:09:D4:4D:C6:D1:9F:F4:86:C4:49:38:AE:55:9A:22:03:77:8C
            X509v3 Authority Key Identifier:
                keyid:07:2E:29:CA:D6:AD:D2:2A:21:B5:62:15:11:87:84:1C:8F:53:F2:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e1:5e:f8:7b:9c:09:25:82:fc:8a:43:47:cf:ca:c5:15:a1:
         42:19:e3:df:54:39:cb:71:fe:f8:07:3a:75:28:56:53:26:1e:
         de:8a:ef:bb:99:f2:36:1a:b7:f9:f4:9a:39:fc:76:d0:47:09:
         cc:49:9b:0a:31:a9:05:dc:17:83:fc:49:fd:78:c7:ac:27:3c:
         ed:e4:31:ca:ee:d8:d8:f8:0a:49:af:d3:51:ad:a5:15:7d:0c:
         fc:fb:d2:d4:06:59:ef:a4:31:48:35:ff:b2:f3:f5:46:73:b4:
         ef:b0:1d:3f:7b:25:77:19:69:2e:2f:c7:e3:df:9b:78:65:9f:
         36:d2:b2:46:e1:b8:1c:cf:19:be:f9:29:91:7c:e4:06:1f:12:
         0b:59:c1:14:c1:07:49:7a:47:4b:5d:06:a1:3c:1a:56:40:09:
         e8:a1:7d:1f:f1:f3:14:46:d7:9c:22:d6:c7:bf:84:de:d5:97:
         14:3c:e8:69:da:91:f9:b9:97:08:ae:8b:a3:fd:f5:f2:83:2d:
         5a:c6:60:10:1c:cb:7e:a8:ad:12:91:82:10:33:cd:a4:73:b6:
         81:0b:01:b5:7d:68:48:7d:d2:7e:62:59:70:0d:60:1f:84:bb:
         bb:d4:b0:d0:aa:80:e0:34:db:d6:76:a0:2e:0e:14:92:a3:d2:
         91:e5:e3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:33 2026 by rpki-client