Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
File:                     u0bPvakj-gZmDXLLwPIyBdweG5M.mft (raw, json)
Hash identifier:          1ks6kjTzXh9Q9S8U8tCJSR0Hnu6VmD5G+fIeQXLhpos=
Subject key identifier:   85:32:9D:47:E8:12:58:E2:27:33:A3:7C:2A:7D:77:0C:DF:2A:93:60
Authority key identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
Certificate issuer:       /CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Certificate serial:       019F10E53558D0271F5880431223E4D05662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
Manifest number:          01BB
Signing time:             Mon 29 Jun 2026 01:01:24 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:24 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:24 +0000
Files and hashes:         1: Hr8okjlDTXsaje7Sx72N3GRcbxM.asa (hash: 1WlYfyugkGAuTp87DQNXe7Jdk25v+OmNqOxOuJn5VHg=)
                          2: u0bPvakj-gZmDXLLwPIyBdweG5M.crl (hash: 3QiOlnnh7U7LWytlyrvZs/wx3Ci9fB4HWbJsrOvlgFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e5:35:58:d0:27:1f:58:80:43:12:23:e4:d0:56:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
        Validity
            Not Before: Jun 29 01:01:24 2026 GMT
            Not After : Jun 30 01:01:24 2026 GMT
        Subject: CN=85329d47e81258e22733a37c2a7d770cdf2a9360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:95:50:b2:13:05:25:dc:6b:f6:3b:30:3e:
                    3a:6d:25:1b:44:94:b0:4a:38:71:94:65:c2:07:48:
                    a5:28:cd:9c:9a:c9:4b:45:1b:dd:3a:72:65:31:1b:
                    97:52:33:63:3a:21:12:e3:9d:bd:95:dc:ef:b7:1b:
                    18:68:bb:47:4f:19:8b:27:3d:54:0d:ea:30:c8:36:
                    e6:f4:65:e4:d6:0a:c6:af:8d:0c:6e:0e:3d:5f:e5:
                    c3:7d:82:67:46:ff:93:79:3d:5e:b0:42:3e:9b:a3:
                    12:73:80:89:42:e5:c6:81:b9:a5:6b:0a:71:08:d1:
                    49:e5:57:06:ce:84:be:d7:97:21:a1:cf:93:b8:0f:
                    cc:07:39:db:ad:53:92:07:90:0a:ba:eb:88:a1:12:
                    97:c7:89:c3:e0:5b:c2:aa:63:0a:a0:bb:48:04:0d:
                    6d:cf:d0:15:21:dd:fa:10:01:fb:e6:0e:a3:6b:30:
                    9b:e6:8b:8d:0b:e8:e8:ea:7e:d1:a0:70:46:5c:51:
                    e0:8a:38:23:e8:b3:c8:4b:0c:82:af:9f:ee:df:95:
                    5b:4c:32:38:57:05:19:2a:73:6f:5e:53:d8:d5:96:
                    7a:16:43:78:b8:03:53:a9:22:7d:f4:07:38:a3:c8:
                    80:8e:75:eb:5a:71:b4:1e:83:ec:93:a5:ce:24:90:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:32:9D:47:E8:12:58:E2:27:33:A3:7C:2A:7D:77:0C:DF:2A:93:60
            X509v3 Authority Key Identifier:
                keyid:BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ce:71:87:2c:05:c4:f6:84:5b:19:3b:90:13:92:3c:7c:30:
         5b:ae:d8:c9:4c:7a:d4:4d:7c:17:2d:a4:ac:a3:9c:b2:72:16:
         07:8b:50:ba:36:b1:f2:5e:98:ae:90:d8:2b:0c:4f:3a:3e:7b:
         19:6f:6a:01:bc:90:02:b5:9c:66:ac:09:e1:93:62:57:6a:2d:
         c8:7d:04:1d:56:25:c5:f6:de:a4:a1:a0:3e:48:2b:eb:dc:16:
         51:ec:1b:f9:c5:1e:47:5b:3c:f9:a8:06:ad:8b:25:a8:c4:30:
         66:f2:a3:e8:03:50:23:9c:84:90:53:68:57:dc:ad:5a:3e:36:
         99:2b:9c:78:09:df:40:e0:f9:01:a7:3c:c3:ab:63:43:63:68:
         38:86:cc:63:ed:63:1c:00:bf:59:4a:f7:44:75:42:97:b9:d3:
         89:a1:cf:20:d0:75:b4:b5:70:48:ef:4d:2b:e3:57:83:07:b0:
         20:cf:b5:3d:0d:03:ca:ae:60:af:6c:e5:cd:2f:19:d6:4a:f7:
         b3:75:04:98:ec:a1:a3:e3:88:8d:3b:f4:66:a5:8b:06:a6:0b:
         73:7c:f1:45:e4:69:77:54:da:6e:75:a9:78:b9:39:a5:f4:c0:
         e8:92:05:08:b1:bf:e7:3c:8d:0b:5d:62:0a:09:6a:70:f5:c6:
         e2:02:6c:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Q5TVY0CcfWIBDEiPk0FZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDZjZmJkYTkyM2ZhMDY2NjBkNzJjYmMwZjIzMjA1ZGMx
ZTFiOTMwHhcNMjYwNjI5MDEwMTI0WhcNMjYwNjMwMDEwMTI0WjAzMTEwLwYDVQQD
Eyg4NTMyOWQ0N2U4MTI1OGUyMjczM2EzN2MyYTdkNzcwY2RmMmE5MzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs52VULITBSXca/Y7MD46bSUbRJSw
SjhxlGXCB0ilKM2cmslLRRvdOnJlMRuXUjNjOiES4529ldzvtxsYaLtHTxmLJz1U
DeowyDbm9GXk1grGr40Mbg49X+XDfYJnRv+TeT1esEI+m6MSc4CJQuXGgbmlawpx
CNFJ5VcGzoS+15choc+TuA/MBznbrVOSB5AKuuuIoRKXx4nD4FvCqmMKoLtIBA1t
z9AVId36EAH75g6jazCb5ouNC+jo6n7RoHBGXFHgijgj6LPISwyCr5/u35VbTDI4
VwUZKnNvXlPY1ZZ6FkN4uANTqSJ99Ac4o8iAjnXrWnG0HoPsk6XOJJCS/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUynUfoEljiJzOjfCp9dwzfKpNgMB8GA1UdIwQY
MBaAFLtGz72pI/oGZg1yy8DyMgXcHhuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hY2Y5M2QtYTQ1OC00MjE5LWJjYTkt
ODljNWQ2ZDhkY2MwLzEvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9hY2Y5M2QtYTQ1OC00MjE5LWJjYTktODljNWQ2ZDhkY2Mw
LzEvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANs5xhywF
xPaEWxk7kBOSPHwwW67YyUx61E18Fy2krKOcsnIWB4tQujax8l6YrpDYKwxPOj57
GW9qAbyQArWcZqwJ4ZNiV2otyH0EHVYlxfbepKGgPkgr69wWUewb+cUeR1s8+agG
rYslqMQwZvKj6ANQI5yEkFNoV9ytWj42mSuceAnfQOD5Aac8w6tjQ2NoOIbMY+1j
HAC/WUr3RHVCl7nTiaHPINB1tLVwSO9NK+NXgwewIM+1PQ0Dyq5gr2zlzS8Z1kr3
s3UEmOyho+OIjTv0ZqWLBqYLc3zxReRpd1TabnWpeLk5pfTA6JIFCLG/5zyNC11i
CglqcPXG4gJseg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:35 2026 by rpki-client