Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File:                     u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier:          wr56ZsWOT81kSLqhMeTBzOy0aqSlTwkuvA01BplUD6A=
Subject key identifier:   B9:BF:E0:09:E9:45:85:D7:0C:37:41:4A:7E:8B:E4:EC:0C:C1:B0:99
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer:       /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial:       019FAD88B0152870729B8F02C406525E4092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number:          16B2
Signing time:             Wed 29 Jul 2026 11:00:44 +0000
Manifest this update:     Wed 29 Jul 2026 11:00:44 +0000
Manifest next update:     Thu 30 Jul 2026 11:00:44 +0000
Files and hashes:         1: 1UXzpmvTwZAsUDWWE8erylOknmA.roa (hash: bPU4V6mvT+M1L74dQ2qnl35ymoh6uHxc1XZ4WDy2uqA=)
                          2: amKu-jsoMwsxR9Euv1nnf91FACw.roa (hash: hG2SQQAbvE2nMpMXDrClrQrRBBagLC5ssOgwcgvlSt0=)
                          3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: usmg2r2htdMLn0kz+ss7OZfuZ7mMGAqpIkTcl3fVgAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:88:b0:15:28:70:72:9b:8f:02:c4:06:52:5e:40:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
        Validity
            Not Before: Jul 29 11:00:44 2026 GMT
            Not After : Jul 30 11:00:44 2026 GMT
        Subject: CN=b9bfe009e94585d70c37414a7e8be4ec0cc1b099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:87:45:b7:05:fd:6b:06:e8:4c:f9:7a:41:b6:
                    96:44:6e:2d:c0:6b:52:83:f2:66:fb:08:ca:cb:a6:
                    b8:89:e8:18:12:02:1f:92:bc:e9:a7:ea:fa:07:f7:
                    9c:67:32:28:f5:c2:e1:9d:5c:de:4d:1b:0f:34:e9:
                    c8:bb:0f:f5:53:64:20:9f:6f:36:68:e9:b3:ef:6c:
                    24:a4:74:15:20:dd:38:06:0e:0f:5f:58:c4:b0:b9:
                    7e:88:b8:40:f0:13:3c:28:fe:d4:ac:f3:f6:e1:41:
                    5e:c9:82:47:13:d6:74:3c:2f:41:55:25:97:b1:b2:
                    38:a2:88:d0:aa:db:60:62:da:7b:60:7d:2d:d4:fc:
                    02:97:51:52:88:24:e9:c1:5d:f8:33:b3:c3:86:e6:
                    1a:fb:01:64:b1:4f:d2:8c:df:ee:9f:f7:06:4b:de:
                    de:e2:a0:b2:1c:ac:1a:32:18:85:b9:0e:8d:b9:5c:
                    71:81:32:24:2b:70:21:ba:28:69:99:a6:0c:57:56:
                    71:01:90:d2:ff:ca:e4:4f:ec:46:8e:c8:5c:30:9c:
                    75:74:66:f8:06:e1:5f:e0:80:cb:40:62:00:34:4f:
                    db:bc:e8:cd:d1:26:f5:5b:10:c3:14:77:c3:3e:62:
                    53:dd:a5:4b:6d:03:87:84:4e:ea:fa:3e:d1:59:f1:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BF:E0:09:E9:45:85:D7:0C:37:41:4A:7E:8B:E4:EC:0C:C1:B0:99
            X509v3 Authority Key Identifier:
                keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7e:3c:e9:93:bf:72:54:5a:42:11:85:ce:18:7d:c8:01:f9:
         23:29:d8:d8:b6:3c:b8:85:f7:52:a7:49:ec:6c:fc:48:6e:ca:
         ca:fc:7c:ed:13:2c:4c:2a:a4:39:6a:3d:ec:2d:73:dc:b6:7b:
         75:0a:ba:d0:44:ff:8c:19:bc:44:46:db:0d:5d:bc:29:f4:e0:
         9c:5a:1e:ac:37:9f:6e:90:d3:73:c5:4b:fd:e9:c7:52:fd:79:
         28:80:29:94:f8:0c:7f:a6:e3:ae:7f:99:89:f0:30:c1:df:90:
         8d:85:e6:27:b9:4e:25:5a:a5:d5:e8:5b:28:4b:6f:de:ff:fa:
         00:c2:64:9c:22:99:82:9a:c2:cb:6b:2b:ae:c9:82:43:51:9b:
         04:e3:26:eb:74:5e:d2:84:c5:07:1c:8b:b8:76:36:ce:80:ce:
         6b:e1:5c:46:84:7d:5a:de:a4:29:c9:15:0b:0c:ad:9b:7a:5c:
         14:8a:45:58:fb:ac:52:c3:09:60:aa:9c:cb:90:de:2f:05:7f:
         9a:45:03:25:f4:07:f7:e8:8a:da:91:12:47:e6:9a:73:4a:e7:
         56:df:bc:99:ef:85:c7:d9:4b:a2:88:ee:c7:b8:88:fb:b7:af:
         92:ed:b2:75:5a:8b:87:25:70:d3:04:1f:0d:f7:6b:b0:f8:6d:
         5f:51:27:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:46 2026 by rpki-client