Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
File:                     bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json)
Hash identifier:          rM10BabuEcaQ91wdO8TLFZLmRRXf/L+HJCXvppHsgkQ=
Subject key identifier:   52:6B:94:5B:49:29:33:DE:FF:6C:4B:6B:7C:3B:2C:99:F0:AC:B7:8F
Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
Certificate issuer:       /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Certificate serial:       01A029FE29E52EFBAE15402610B593A3121E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
Manifest number:          02E4
Signing time:             Sat 22 Aug 2026 15:01:57 +0000
Manifest this update:     Sat 22 Aug 2026 15:01:57 +0000
Manifest next update:     Sun 23 Aug 2026 15:01:57 +0000
Files and hashes:         1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: QjlN+5vEUevAgQRTnqUdQUUDZ0tz7/MI+Q80XTidAd4=)
                          2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:29:fe:29:e5:2e:fb:ae:15:40:26:10:b5:93:a3:12:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
        Validity
            Not Before: Aug 22 15:01:57 2026 GMT
            Not After : Aug 23 15:01:57 2026 GMT
        Subject: CN=526b945b492933deff6c4b6b7c3b2c99f0acb78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:55:ed:53:ad:a2:4b:b0:8d:77:6f:5c:d2:1a:
                    c7:ac:e7:14:84:6b:62:21:81:4a:e5:ee:58:fc:9a:
                    9b:c5:6d:c7:d6:45:df:87:d5:84:b4:cd:16:82:94:
                    0d:2d:b1:db:fb:55:70:8d:77:48:32:14:73:b7:c7:
                    bd:4f:0f:07:2a:7b:62:3d:30:78:48:2b:53:91:e8:
                    60:ee:eb:71:2c:7f:dc:35:42:69:3e:85:f8:f0:d2:
                    fd:c2:6c:4c:46:71:c4:c5:f4:60:eb:41:0a:5a:1c:
                    73:8a:e0:98:b2:a7:f1:ef:c3:db:8e:85:80:90:bc:
                    62:02:70:bf:a3:4e:38:da:23:c2:2c:82:51:31:84:
                    43:1c:4d:39:c4:14:4a:5d:41:2b:67:d7:99:8e:9a:
                    9e:3b:bf:86:e2:f6:c2:5d:76:43:77:ae:59:43:e5:
                    30:53:6a:f8:ab:f9:70:8b:43:bb:07:79:17:b3:3c:
                    a3:d5:3d:87:e7:25:23:49:20:92:3f:6d:b7:f1:c2:
                    5d:55:42:34:51:bc:c7:8b:27:18:16:b3:a0:a6:ec:
                    79:fb:d7:75:60:ae:09:0f:12:8a:44:8f:6a:9f:dd:
                    b5:cc:b4:91:f2:19:39:fc:87:9b:b0:ee:d2:70:12:
                    33:d4:83:bc:9f:33:c0:ca:26:29:ad:49:14:50:57:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6B:94:5B:49:29:33:DE:FF:6C:4B:6B:7C:3B:2C:99:F0:AC:B7:8F
            X509v3 Authority Key Identifier:
                keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:10:47:b2:27:47:63:94:c9:9f:98:08:1f:3b:39:e8:16:85:
         e6:d7:05:dc:d1:80:8c:43:a8:e8:e9:ce:85:f0:10:66:c7:20:
         ea:7d:10:73:bf:df:07:66:56:f1:5e:0d:ba:e3:eb:67:46:33:
         b3:d4:fc:5d:1c:d2:53:1b:83:c5:35:d2:fd:78:d3:7b:f4:85:
         4a:de:4f:86:1e:f6:2f:2b:e2:e7:c0:44:1c:8c:36:a2:37:b3:
         cb:06:e6:43:1f:a1:c0:91:a4:a5:9f:ee:79:51:5b:95:2d:8d:
         10:cc:7d:ec:88:94:be:77:0f:67:3e:1f:f8:d5:ba:55:d2:65:
         f5:fb:c7:bb:ff:e4:e9:e3:56:6d:3e:07:4a:46:35:af:89:89:
         97:5c:2c:fe:fe:8f:8c:08:03:ef:b6:0e:3c:b0:f1:8d:88:82:
         ab:11:de:d4:16:d0:4e:74:be:d3:07:cf:59:18:bd:f1:c3:19:
         38:d6:f4:11:42:2e:61:08:98:c0:a9:81:b3:5b:14:3f:60:fb:
         37:ee:70:7c:6d:39:80:35:30:45:c8:1f:4a:6b:2a:44:89:40:
         be:8f:e3:f0:75:9e:47:d5:39:bb:5e:f0:60:6a:df:0b:42:44:
         28:00:a6:7d:ec:5a:a6:2a:af:2f:c2:d8:a5:1e:3c:9e:d3:4e:
         be:7b:e7:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAp/inlLvuuFUAmELWToxIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzJlZTVmMDE4OWVmOWI2NzE0MThlZDMzNmVjYjE3Mjhm
OTkyMGEwHhcNMjYwODIyMTUwMTU3WhcNMjYwODIzMTUwMTU3WjAzMTEwLwYDVQQD
Eyg1MjZiOTQ1YjQ5MjkzM2RlZmY2YzRiNmI3YzNiMmM5OWYwYWNiNzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VXtU62iS7CNd29c0hrHrOcUhGti
IYFK5e5Y/JqbxW3H1kXfh9WEtM0WgpQNLbHb+1VwjXdIMhRzt8e9Tw8HKntiPTB4
SCtTkehg7utxLH/cNUJpPoX48NL9wmxMRnHExfRg60EKWhxziuCYsqfx78PbjoWA
kLxiAnC/o0442iPCLIJRMYRDHE05xBRKXUErZ9eZjpqeO7+G4vbCXXZDd65ZQ+Uw
U2r4q/lwi0O7B3kXszyj1T2H5yUjSSCSP2238cJdVUI0UbzHiycYFrOgpux5+9d1
YK4JDxKKRI9qn921zLSR8hk5/IebsO7ScBIz1IO8nzPAyiYprUkUUFdpaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJrlFtJKTPe/2xLa3w7LJnwrLePMB8GA1UdIwQY
MBaAFG8y7l8Bie+bZxQY7TNuyxco+ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2Yt
OGU3NjEzODA0YzgwLzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2YtOGU3NjEzODA0Yzgw
LzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBBHsidH
Y5TJn5gIHzs56BaF5tcF3NGAjEOo6OnOhfAQZscg6n0Qc7/fB2ZW8V4NuuPrZ0Yz
s9T8XRzSUxuDxTXS/XjTe/SFSt5Phh72Lyvi58BEHIw2ojezywbmQx+hwJGkpZ/u
eVFblS2NEMx97IiUvncPZz4f+NW6VdJl9fvHu//k6eNWbT4HSkY1r4mJl1ws/v6P
jAgD77YOPLDxjYiCqxHe1BbQTnS+0wfPWRi98cMZONb0EUIuYQiYwKmBs1sUP2D7
N+5wfG05gDUwRcgfSmsqRIlAvo/j8HWeR9U5u17wYGrfC0JEKACmfexapiqvL8LY
pR48ntNOvnvnbA==
-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:09 2026 by rpki-client