Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File:                     BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier:          d9VzpMc2sSNhjkZXzc/czi2wG9CseMksHDTgHRlNgjY=
Subject key identifier:   21:9E:D4:40:84:0E:86:56:AD:2F:60:95:96:4B:CD:E8:A7:E7:CB:48
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer:       /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial:       01A0005CEABCB93934595FD57A19F73B5C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 13:01:24 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:24 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:24 +0000
Files and hashes:         1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: 2Qzr9Ryqf+g0ieNcxEEK+9ofXcjo1fM0pJQJftggDtc=)
                          2: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (hash: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:ea:bc:b9:39:34:59:5f:d5:7a:19:f7:3b:5c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
        Validity
            Not Before: Aug 14 13:01:24 2026 GMT
            Not After : Aug 15 13:01:24 2026 GMT
        Subject: CN=219ed440840e8656ad2f6095964bcde8a7e7cb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:2d:45:55:e3:3e:18:e7:34:fe:db:d3:8c:
                    27:63:59:56:a4:04:2e:50:1a:ae:fb:ac:c4:c5:e4:
                    58:e1:57:f1:09:f0:19:3a:de:fb:ad:12:19:68:d4:
                    aa:3f:51:ca:de:37:19:69:ef:78:fb:21:c2:72:fd:
                    ac:a2:86:85:c5:3d:df:42:d3:1b:d9:28:b9:bd:3c:
                    f5:04:c3:1e:b0:71:aa:6f:c4:89:41:46:53:87:18:
                    31:1c:19:cd:d6:4a:58:53:57:b9:3a:e8:c7:18:f7:
                    93:b3:41:e3:51:b9:38:61:23:3a:c6:e5:8b:b5:aa:
                    52:86:d0:3e:4c:c7:f0:f1:bc:08:c9:11:ac:9e:e8:
                    65:e6:fb:48:d9:a4:ba:5b:53:44:a9:39:52:c9:32:
                    6e:55:f5:95:74:1c:29:87:29:59:37:f4:2b:1a:e4:
                    6c:2d:67:8b:71:f9:39:bf:32:16:ca:36:a0:65:50:
                    bb:62:45:e2:15:2c:94:d9:69:f9:71:4c:9f:dd:94:
                    5c:9b:d6:5f:e4:2c:a0:c5:36:b1:58:39:43:13:91:
                    3a:6a:e9:31:ec:b3:92:8a:4d:76:36:18:fa:52:9e:
                    30:df:59:34:9b:01:ab:f7:0d:ee:d1:28:b2:88:e8:
                    44:02:45:98:80:6a:00:98:65:a8:54:8d:67:b6:78:
                    93:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9E:D4:40:84:0E:86:56:AD:2F:60:95:96:4B:CD:E8:A7:E7:CB:48
            X509v3 Authority Key Identifier:
                keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:72:2b:a4:d6:7b:27:c1:31:ad:9d:2a:7c:65:c9:ed:c8:54:
         52:dd:f2:86:86:78:b0:92:e6:9a:c5:85:b7:ad:91:36:75:b3:
         5a:6a:60:27:8b:c4:28:8a:3d:95:d7:e6:56:d4:d7:f8:ed:53:
         60:82:de:cf:d7:b7:58:ef:e6:ad:9d:8d:d7:6d:b7:fa:d1:76:
         1a:fe:16:6c:cf:77:fe:07:9b:1c:a0:4f:e3:f3:ce:22:0c:21:
         30:e4:e4:fe:05:67:56:fe:be:1a:e7:cd:7c:d7:68:56:4a:30:
         d6:7e:6b:fa:74:bf:82:28:af:e6:4f:8a:94:62:ba:67:c3:63:
         1b:e4:8b:43:2d:3b:2d:b5:f5:c1:a9:09:0e:cd:1e:5a:d0:8b:
         c5:7f:da:4f:37:8f:6c:c3:25:1b:fb:be:d5:bc:a3:1d:89:e2:
         cd:3f:9a:d7:6c:ac:48:4a:df:36:7f:16:74:11:8a:32:1c:19:
         ff:89:5f:36:6e:59:55:8a:05:87:f8:34:51:6b:4f:25:e7:1c:
         c5:20:68:99:58:47:7f:7b:94:2b:da:46:c8:3d:2e:a9:d3:be:
         95:fb:18:06:30:d5:74:40:1e:08:c5:9a:17:cc:53:c6:d0:81:
         ae:0b:d6:9f:2f:de:1c:b4:8b:3a:6e:e0:d0:25:f6:98:d5:a7:
         e5:48:0f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:30 2026 by rpki-client