Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File:                     BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier:          PPZrdAqf4Q1LZ8cHMlLbQH/V3Z9euaces4hd4u8dx/Q=
Subject key identifier:   B8:9E:DA:61:13:1D:AB:D7:A8:2B:F6:F2:E7:5B:88:8A:AE:00:D7:9A
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer:       /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial:       01A0016F703CA9461D72C4E2FD0F8C9A7295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number:          19FC
Signing time:             Fri 14 Aug 2026 18:01:15 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:15 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:15 +0000
Files and hashes:         1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: 0UDy2bX+nZUMgdO/xwFCCFmNtGKjopvrlLZDEdTTiS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:70:3c:a9:46:1d:72:c4:e2:fd:0f:8c:9a:72:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
        Validity
            Not Before: Aug 14 18:01:15 2026 GMT
            Not After : Aug 15 18:01:15 2026 GMT
        Subject: CN=b89eda61131dabd7a82bf6f2e75b888aae00d79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:ca:c4:15:12:29:9b:50:45:46:4c:ce:80:
                    be:6c:68:13:ef:b7:89:04:fa:69:8f:13:e0:63:82:
                    e5:bd:dd:92:cb:37:12:0d:e0:da:7e:de:bd:b0:e0:
                    97:52:66:90:30:15:75:7d:89:af:87:c0:97:84:b9:
                    a2:74:a8:a3:b8:a2:e3:d5:87:98:6e:bd:28:47:ec:
                    28:71:66:77:99:db:58:c3:14:54:17:99:cd:5a:87:
                    60:e3:a0:49:74:9b:82:f6:09:d0:9c:68:5a:29:73:
                    60:2a:70:e7:c3:8b:8f:37:5c:4d:05:9f:34:b8:3e:
                    7b:6d:e9:d2:bf:16:4a:06:b2:3b:6a:db:09:4e:18:
                    4b:ab:de:2c:09:cd:2c:b2:70:c8:9b:aa:d5:6f:eb:
                    0a:37:00:5a:39:94:a8:85:8f:40:a3:86:bf:cf:eb:
                    74:c3:73:68:99:29:d9:f3:f3:db:ff:d1:6f:ff:70:
                    3d:fe:0b:66:2d:c9:99:45:d4:00:e7:63:66:c4:40:
                    21:cc:ed:df:3e:14:24:8e:58:fe:fa:15:c2:e0:60:
                    8a:bc:a7:d9:7f:d9:a2:43:19:b0:87:16:a9:33:e5:
                    d8:9f:73:ad:62:db:34:50:fb:b1:06:77:c9:d3:99:
                    10:78:52:6f:cd:69:a0:e6:c9:8c:7f:95:cb:48:1d:
                    10:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9E:DA:61:13:1D:AB:D7:A8:2B:F6:F2:E7:5B:88:8A:AE:00:D7:9A
            X509v3 Authority Key Identifier:
                keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:61:33:36:e7:88:f9:d9:8f:f7:ea:bb:32:8e:8f:63:4c:58:
         74:15:f2:ef:30:df:d7:8b:ae:89:20:49:8d:5f:10:c9:f5:16:
         43:de:e7:6c:5c:36:6c:44:59:21:89:b5:b4:18:93:f6:b2:1c:
         a7:1d:fb:97:6a:7f:b2:f1:2b:cb:80:95:4a:2b:f6:17:21:0f:
         47:b6:71:c4:f2:39:5c:df:cd:81:20:59:5f:98:08:ef:3f:ad:
         f6:c5:a6:22:08:79:ef:b3:55:71:93:0c:48:21:1f:1f:eb:43:
         20:c7:32:8d:6d:8a:c0:60:96:06:ca:09:0b:6a:6d:5a:e1:1d:
         fd:78:28:7e:de:b7:30:78:55:f4:09:b6:9d:ff:bb:31:c0:93:
         33:e5:f0:af:ca:93:d1:8b:71:ce:81:7b:da:dd:f1:f7:7e:b9:
         19:50:74:4b:df:0d:06:a9:f1:ba:c8:16:1c:e4:5b:c9:e1:99:
         15:5e:5e:1f:1e:ef:06:a2:f9:6f:71:78:94:83:c5:7a:89:e3:
         30:f3:3e:2a:fa:35:e1:89:78:14:3b:97:90:92:0d:fc:6d:a7:
         d3:82:d8:7e:9e:15:8c:19:37:9f:ab:3f:90:71:c9:af:c6:78:
         32:7c:ef:f4:39:3c:3b:a7:53:9c:09:1c:b5:60:a4:ff:a1:99:
         5b:5f:a8:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb3A8qUYdcsTi/Q+MmnKVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjMzYTY2NzAxYjJjNjVkNDk3ZmUwNGM1YmEzMDFiZGNl
Y2I2ZDkwHhcNMjYwODE0MTgwMTE1WhcNMjYwODE1MTgwMTE1WjAzMTEwLwYDVQQD
EyhiODllZGE2MTEzMWRhYmQ3YTgyYmY2ZjJlNzViODg4YWFlMDBkNzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF7KxBUSKZtQRUZMzoC+bGgT77eJ
BPppjxPgY4Llvd2SyzcSDeDaft69sOCXUmaQMBV1fYmvh8CXhLmidKijuKLj1YeY
br0oR+wocWZ3mdtYwxRUF5nNWodg46BJdJuC9gnQnGhaKXNgKnDnw4uPN1xNBZ80
uD57benSvxZKBrI7atsJThhLq94sCc0ssnDIm6rVb+sKNwBaOZSohY9Ao4a/z+t0
w3NomSnZ8/Pb/9Fv/3A9/gtmLcmZRdQA52NmxEAhzO3fPhQkjlj++hXC4GCKvKfZ
f9miQxmwhxapM+XYn3OtYts0UPuxBnfJ05kQeFJvzWmg5smMf5XLSB0QYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLie2mETHavXqCv28udbiIquANeaMB8GA1UdIwQY
MBaAFAWzOmZwGyxl1Jf+BMW6MBvc7LbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTct
MWJmOTRhMjUwMTRlLzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTctMWJmOTRhMjUwMTRl
LzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWEzNueI
+dmP9+q7Mo6PY0xYdBXy7zDf14uuiSBJjV8QyfUWQ97nbFw2bERZIYm1tBiT9rIc
px37l2p/svEry4CVSiv2FyEPR7ZxxPI5XN/NgSBZX5gI7z+t9sWmIgh577NVcZMM
SCEfH+tDIMcyjW2KwGCWBsoJC2ptWuEd/Xgoft63MHhV9Am2nf+7McCTM+Xwr8qT
0YtxzoF72t3x9365GVB0S98NBqnxusgWHORbyeGZFV5eHx7vBqL5b3F4lIPFeonj
MPM+Kvo14Yl4FDuXkJIN/G2n04LYfp4VjBk3n6s/kHHJr8Z4Mnzv9Dk8O6dTnAkc
tWCk/6GZW1+oBg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:10 2026 by rpki-client