Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
File:                     b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft (raw, json)
Hash identifier:          I2gdtaVydOI31yhzuyk4nBvwjh02kgR+E5wnYcy5hvI=
Subject key identifier:   89:3F:5C:A1:3C:DA:8B:F1:C4:F4:DA:07:F9:38:DE:A1:79:53:95:6E
Authority key identifier: 6F:8C:10:C3:83:72:9F:76:14:99:73:B5:65:5B:E9:BF:34:71:1B:24
Certificate issuer:       /CN=6f8c10c383729f76149973b5655be9bf34711b24
Certificate serial:       01A00326794E115D775DB10EDA9F662A8D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
Manifest number:          01C9
Signing time:             Sat 15 Aug 2026 02:00:48 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:48 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:48 +0000
Files and hashes:         1: b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl (hash: WGGik/h/lEGM6Bif3OFMdzRjOCDDQtLLiISnpf/Yr60=)
                          2: bf-C7XR5rvxVULROY95AnCsiqDE.roa (hash: Xcehpx+K84jAisImHgsCWZZzlMJjIRq9I5PCTggbexM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:79:4e:11:5d:77:5d:b1:0e:da:9f:66:2a:8d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8c10c383729f76149973b5655be9bf34711b24
        Validity
            Not Before: Aug 15 02:00:48 2026 GMT
            Not After : Aug 16 02:00:48 2026 GMT
        Subject: CN=893f5ca13cda8bf1c4f4da07f938dea17953956e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:7c:54:e6:fb:bc:61:14:be:f3:ec:02:47:
                    4d:df:68:7c:90:ff:1a:48:81:d4:94:ea:1f:38:4b:
                    c9:62:37:40:e4:77:df:f1:b1:a6:fa:38:8d:b1:3d:
                    5e:f7:f4:99:75:eb:fa:bc:a8:d4:36:c2:11:de:d9:
                    98:de:31:4c:d1:39:ee:70:3a:2b:b0:84:eb:d4:57:
                    27:e7:22:79:36:9c:a4:48:1c:7d:c6:d9:a9:04:ab:
                    d1:cb:7d:55:35:cd:4c:3a:75:6c:6e:22:8a:29:2c:
                    a9:a6:ae:ba:b4:fd:41:93:49:56:a8:9d:96:76:a3:
                    53:18:bd:7e:02:e2:ae:49:55:45:59:c5:30:79:53:
                    e2:6a:31:b9:a9:7b:ee:9e:7b:40:b7:e0:46:f3:d8:
                    fc:9f:57:77:67:09:28:b4:3e:58:b9:16:b8:6a:84:
                    aa:ed:fb:47:30:da:16:ac:8b:1a:3a:25:9d:04:01:
                    94:3f:dd:06:ae:db:39:8c:ab:73:56:77:46:7a:04:
                    e5:f7:24:47:7a:63:b0:0e:bd:c8:fc:77:f4:49:a8:
                    13:82:82:4f:57:9a:85:4f:72:74:13:06:3c:3b:d7:
                    3f:a0:96:66:bc:fb:2b:f2:1c:07:14:73:43:23:ca:
                    80:ab:04:2b:40:f4:3a:c1:13:cf:93:f2:1d:2b:3a:
                    24:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3F:5C:A1:3C:DA:8B:F1:C4:F4:DA:07:F9:38:DE:A1:79:53:95:6E
            X509v3 Authority Key Identifier:
                keyid:6F:8C:10:C3:83:72:9F:76:14:99:73:B5:65:5B:E9:BF:34:71:1B:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:eb:2e:21:cf:aa:29:58:68:00:02:9b:96:7c:8f:57:1d:a9:
         97:af:de:64:1b:56:47:0f:76:77:1f:7f:9b:28:0a:bc:5b:ca:
         ff:ff:0a:ea:6e:fd:79:d0:cd:a7:37:8f:42:ac:7d:9d:2b:ad:
         58:2f:1d:ea:ce:7c:50:d8:63:3e:6d:46:9c:b0:c6:40:86:fe:
         4a:89:8f:17:eb:ac:09:e6:e9:80:44:e0:5b:ca:de:62:47:e8:
         60:83:ed:80:62:fb:b5:13:f3:1c:ae:d8:64:b4:b6:18:53:ce:
         27:28:04:62:0f:0b:9c:6b:45:1e:4c:ab:67:52:db:a6:bb:4e:
         98:80:f3:27:03:4e:b7:dc:d3:4e:42:47:ce:ea:e5:70:dd:96:
         12:6a:82:9a:14:de:34:82:a3:51:3c:a9:8a:80:92:f2:48:ed:
         bf:c3:12:5c:92:0e:2b:0e:d3:fa:42:da:55:00:2b:17:d5:a7:
         d1:df:de:27:dc:7a:a3:3f:f7:21:f8:07:fb:28:66:67:12:00:
         e8:a5:42:5a:1b:38:69:1d:31:b3:49:f2:fe:1b:6a:29:b9:9b:
         af:21:56:1d:79:94:40:ba:a8:eb:43:10:de:16:7e:8e:62:18:
         a3:d3:db:13:02:fc:21:ec:fc:c1:76:b5:ea:aa:fe:51:c3:3b:
         46:2b:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:27:55 2026 by rpki-client