Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File:                     Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier:          RMErTBgMpHUjsL8nvP8xC9heAyg6vbNlvJbwxokAJDw=
Subject key identifier:   35:53:BA:86:61:E8:C9:55:E8:A4:A5:9D:48:A9:57:CE:AC:03:0D:9C
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer:       /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial:       01A00213E93BA32387F1E7323C3A2BE25A56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 21:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:54 +0000
Files and hashes:         1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: zgbFsuNkKy/TAYFqtg/cS7v2l8/YwpPurSwhVK+AJOY=)
                          2: JKANABqd6E0fTlpYiraRYYJi5Is.roa (hash: kpgkNjTCyYCDSV5Bfn9GBPVaDYU8s9QPiJ/Y5QzbmG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:e9:3b:a3:23:87:f1:e7:32:3c:3a:2b:e2:5a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
        Validity
            Not Before: Aug 14 21:00:54 2026 GMT
            Not After : Aug 15 21:00:54 2026 GMT
        Subject: CN=3553ba8661e8c955e8a4a59d48a957ceac030d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a8:37:1e:20:bd:66:a6:4c:3a:dd:4a:1a:98:
                    8a:aa:56:5e:d0:ad:52:c6:fe:05:e4:34:8a:a1:b8:
                    3c:22:91:1c:b0:e4:24:a7:7c:6c:87:04:45:e4:f7:
                    d2:75:a3:8d:2e:e0:93:1c:39:c1:5a:16:03:1d:26:
                    a4:6d:ad:d0:eb:44:67:dd:9a:0f:c6:e5:c1:86:74:
                    7e:44:7b:02:fb:3e:a3:de:8e:36:8d:8c:63:0e:81:
                    c6:58:64:5c:45:88:6e:4d:3f:34:1b:d1:da:80:35:
                    e6:39:8d:f1:39:5b:1e:41:52:ea:a4:46:98:fd:4c:
                    fc:72:99:2d:49:c8:d5:d7:56:fc:58:bf:6a:ff:9e:
                    9c:07:55:82:f2:42:ad:80:36:f7:55:79:bf:a9:05:
                    56:e1:e7:5c:5c:b8:68:9a:b1:33:90:53:3a:ee:a3:
                    25:ae:d2:d9:24:16:99:7b:0b:03:77:66:a5:ca:6a:
                    a1:aa:e6:ea:c9:a4:c7:4b:1e:8d:b2:a6:de:43:4d:
                    06:bb:18:89:b1:8d:28:34:53:ac:44:70:7a:2d:74:
                    81:cd:85:ba:eb:f4:d5:c7:20:03:a5:fe:bd:51:81:
                    8b:0d:6b:9e:39:b2:18:f6:9e:d6:7c:a3:5e:20:2f:
                    dd:0f:33:5b:48:40:e3:08:e6:16:b7:6d:09:82:2a:
                    8e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:53:BA:86:61:E8:C9:55:E8:A4:A5:9D:48:A9:57:CE:AC:03:0D:9C
            X509v3 Authority Key Identifier:
                keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:68:6d:c2:e3:86:e4:3b:8b:5f:30:27:4b:ce:dc:bb:2a:d9:
         4f:98:6a:dd:fe:b7:04:21:2a:b9:08:2d:91:10:5c:90:6a:3e:
         0d:fa:7e:74:93:ab:b8:82:ab:8c:eb:82:04:fb:14:53:8c:08:
         a9:2b:8f:6c:2c:11:c0:8d:26:66:f3:43:2f:86:8c:96:a6:1e:
         bb:38:36:e2:50:99:05:21:ad:10:9e:cd:5a:99:4f:9d:82:90:
         1d:c2:a9:60:e2:8e:fd:15:ab:70:b4:ed:6d:b8:fd:51:dd:34:
         b9:57:c6:4d:d3:0f:39:60:0d:ad:26:22:f2:74:91:62:e6:63:
         00:cd:f2:fd:10:16:79:52:b3:0a:cf:a2:92:30:27:d7:b0:72:
         c1:49:af:75:dc:ad:0b:48:d6:66:12:e0:1c:78:47:a7:89:d8:
         1a:ed:e6:a1:1f:22:56:ba:e1:b9:1c:d1:09:9c:a0:71:a5:fb:
         8a:24:84:00:da:34:be:1b:55:3c:2c:af:85:1c:32:df:b2:3b:
         1b:29:4e:33:ac:de:1a:e3:62:2b:b7:6d:d6:64:b9:f9:77:39:
         20:09:57:4a:43:72:0f:17:2c:bb:e5:10:55:a8:66:ea:1e:16:
         50:47:30:83:66:18:82:de:a3:93:67:5f:b8:71:b1:d6:8d:eb:
         83:73:a2:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE+k7oyOH8ecyPDor4lpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmQwZmFlZWRlNzNhZDNjZmM0Nzc4YjgyMzhjNjA4ZTQw
ZTk4NDEwHhcNMjYwODE0MjEwMDU0WhcNMjYwODE1MjEwMDU0WjAzMTEwLwYDVQQD
EygzNTUzYmE4NjYxZThjOTU1ZThhNGE1OWQ0OGE5NTdjZWFjMDMwZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Kg3HiC9ZqZMOt1KGpiKqlZe0K1S
xv4F5DSKobg8IpEcsOQkp3xshwRF5PfSdaONLuCTHDnBWhYDHSakba3Q60Rn3ZoP
xuXBhnR+RHsC+z6j3o42jYxjDoHGWGRcRYhuTT80G9HagDXmOY3xOVseQVLqpEaY
/Uz8cpktScjV11b8WL9q/56cB1WC8kKtgDb3VXm/qQVW4edcXLhomrEzkFM67qMl
rtLZJBaZewsDd2alymqhqubqyaTHSx6NsqbeQ00GuxiJsY0oNFOsRHB6LXSBzYW6
6/TVxyADpf69UYGLDWueObIY9p7WfKNeIC/dDzNbSEDjCOYWt20JgiqOgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVTuoZh6MlV6KSlnUipV86sAw2cMB8GA1UdIwQY
MBaAFAW9D67t5zrTz8R3i4I4xgjkDphBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MjE3ODgtZTRiZC00ODg5LWE1OTct
MTJkMGI2MzJlNWU4LzEvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81MjE3ODgtZTRiZC00ODg5LWE1OTctMTJkMGI2MzJlNWU4
LzEvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWhtwuOG
5DuLXzAnS87cuyrZT5hq3f63BCEquQgtkRBckGo+Dfp+dJOruIKrjOuCBPsUU4wI
qSuPbCwRwI0mZvNDL4aMlqYeuzg24lCZBSGtEJ7NWplPnYKQHcKpYOKO/RWrcLTt
bbj9Ud00uVfGTdMPOWANrSYi8nSRYuZjAM3y/RAWeVKzCs+ikjAn17BywUmvddyt
C0jWZhLgHHhHp4nYGu3moR8iVrrhuRzRCZygcaX7iiSEANo0vhtVPCyvhRwy37I7
GylOM6zeGuNiK7dt1mS5+Xc5IAlXSkNyDxcsu+UQVahm6h4WUEcwg2YYgt6jk2df
uHGx1o3rg3OiJQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:08 2026 by rpki-client