Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
File:                     B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft (raw, json)
Hash identifier:          VlRgq3blHG2k2ssKZBF1Kat1Hjzlm++fZbHdvNaClEs=
Subject key identifier:   D2:30:70:F4:BF:DB:F0:C8:F6:26:05:79:A9:CB:06:BE:1D:9B:90:61
Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
Certificate issuer:       /CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Certificate serial:       01A13DEEC92D543DA0DBD4AE5B642EBA9CF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
Manifest number:          11C6
Signing time:             Thu 15 Oct 2026 05:00:21 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:21 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:21 +0000
Files and hashes:         1: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl (hash: EDKI0MHmzyNn+sBxqdrcyunwX8NJyGmK/qiwO6C03kc=)
                          2: oPFpE2eYg7379Yb_z8iPaPDUTho.roa (hash: 0ECJa2zyh+fpYI5FZMz9J/l+RoqDVpUle+qzTOb1Aqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ee:c9:2d:54:3d:a0:db:d4:ae:5b:64:2e:ba:9c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad
        Validity
            Not Before: Oct 15 05:00:21 2026 GMT
            Not After : Oct 16 05:00:21 2026 GMT
        Subject: CN=d23070f4bfdbf0c8f6260579a9cb06be1d9b9061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:37:c6:77:b2:b1:92:52:54:44:f5:b4:ac:
                    ff:11:e0:c3:bf:12:80:cb:49:8f:9d:2a:1b:61:a3:
                    e6:d1:ff:34:be:80:6c:38:ce:22:07:0e:16:b6:04:
                    f0:24:ff:c2:4f:c8:69:0f:1f:55:d2:85:a9:21:8b:
                    13:ce:0c:0f:05:d8:7e:3d:8c:db:9f:4d:c7:3f:53:
                    ff:85:7e:74:1b:5a:c8:0a:5d:c3:c7:01:cc:7c:3b:
                    99:e9:56:c6:a9:a2:c1:32:bc:fd:c6:cd:7d:f0:27:
                    24:28:2f:51:1c:40:77:78:a1:b4:36:a7:6c:35:0a:
                    4d:0a:40:d1:a7:fc:a3:35:82:29:9d:3e:c5:d1:9d:
                    94:a7:b3:8c:e0:3f:99:e6:f8:62:c6:c8:ec:61:df:
                    d4:b3:d3:3e:30:f9:1e:00:a2:be:17:76:04:fe:23:
                    47:51:b7:80:6f:89:ec:5c:21:b2:b4:60:fd:e3:f3:
                    81:7a:bb:e2:23:df:c5:1b:d0:3c:54:17:14:62:6f:
                    dc:ff:60:05:41:a0:97:6a:e8:ed:0b:98:eb:ca:a3:
                    14:ad:cd:95:97:26:50:79:32:89:36:17:56:95:d1:
                    bf:91:86:bd:46:4a:a5:56:17:a3:14:16:d5:a4:2c:
                    8f:50:9f:1d:18:87:f1:be:21:4c:b4:e1:61:7b:b5:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:30:70:F4:BF:DB:F0:C8:F6:26:05:79:A9:CB:06:BE:1D:9B:90:61
            X509v3 Authority Key Identifier:
                keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6b:7e:0d:bc:9d:d2:aa:67:3d:cc:ae:5d:5e:a9:cf:42:62:
         d6:27:72:42:02:0f:13:b0:31:89:6d:dd:d2:1b:cf:8f:89:8f:
         5b:5d:e4:e1:69:89:bd:21:ea:91:82:99:45:c0:cd:53:20:43:
         c3:99:63:58:f0:e1:72:e8:6e:09:7c:90:95:30:33:54:19:59:
         d1:92:e4:46:ec:7d:76:ed:88:4f:45:c6:7b:49:be:d6:ff:b1:
         b6:bb:60:b4:09:02:9b:46:9c:f3:f1:4b:b9:fe:33:66:9b:3e:
         d6:38:4b:2e:5d:e8:3c:3f:29:af:7a:51:50:8a:dc:9c:5c:23:
         09:45:45:a6:3b:7f:e1:0d:41:ff:8c:87:ae:2c:86:ac:f1:52:
         d4:1a:79:a6:a9:f2:6e:3b:57:da:0d:19:3b:70:e3:5e:dd:e6:
         69:56:59:4a:bc:51:12:2d:4b:49:46:ee:25:c4:2b:37:11:8c:
         a7:e8:9b:e3:bb:c1:92:eb:5b:16:95:8a:b7:31:1e:92:74:a0:
         e1:cd:d7:30:61:10:99:40:32:40:bb:5a:dc:28:4b:e4:43:0a:
         5b:29:a3:ee:72:6f:e8:e4:84:d3:76:ba:b3:67:5e:8a:04:96:
         99:0b:e9:32:b5:b4:dc:0e:f8:99:c3:23:a9:04:85:3a:0e:f7:
         f1:86:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:35 2026 by rpki-client