Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File:                     8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier:          e0iCWwlzckTi2j3+/GJJ+8AHnTmS9wdePwoFo/7aeM8=
Subject key identifier:   BD:43:C1:07:39:4D:BD:10:99:39:10:BD:20:5D:40:62:10:BB:0E:13
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer:       /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial:       01A001A5CA96EEDDEDA877C5F8B7AA874221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number:          110F
Signing time:             Fri 14 Aug 2026 19:00:37 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:37 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:37 +0000
Files and hashes:         1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: JrZVx6cUTi2MzfQMqixVTduQuBYTBd0z+ZapnUSsXss=)
                          2: hnmsrWHh9cW2sc4LB6owd8gyChI.roa (hash: xlbnosIlGk9ZC7A6OHGfdwXPEb8ekb2nSgNGlRxpL4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:ca:96:ee:dd:ed:a8:77:c5:f8:b7:aa:87:42:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
        Validity
            Not Before: Aug 14 19:00:37 2026 GMT
            Not After : Aug 15 19:00:37 2026 GMT
        Subject: CN=bd43c107394dbd10993910bd205d406210bb0e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:d2:e1:5f:de:5e:eb:18:1b:0f:8e:9e:39:
                    83:7f:dc:bc:46:7e:55:b8:7c:d5:97:ae:18:78:f5:
                    1f:5f:c8:f8:79:c2:fb:40:8a:f3:15:ce:cb:4f:dd:
                    de:17:df:f0:52:1a:18:54:99:78:4e:59:64:20:9b:
                    5d:d9:a7:3f:c0:72:2b:7f:bb:71:f4:ea:89:04:98:
                    2b:bf:8c:04:c8:83:8b:ce:cb:eb:a7:88:03:da:60:
                    b1:12:ec:ee:20:5f:66:15:04:a5:3a:8a:dc:35:89:
                    1a:1f:e2:a7:17:62:90:12:49:f6:5d:8d:d2:1b:8c:
                    a4:a6:33:0f:ea:81:1a:04:65:14:9c:cf:bd:46:e1:
                    9b:e4:f1:61:76:09:cd:ec:4f:df:45:2c:b8:28:4d:
                    bf:ab:8b:a7:ac:3a:ca:9f:30:5f:05:45:fe:63:fe:
                    cc:cb:3e:04:76:e6:3d:ce:09:cb:ad:00:7a:2a:f4:
                    63:9c:c6:e2:4d:66:60:eb:6b:d9:e9:a1:9f:cc:68:
                    dc:a6:c2:ab:1b:d5:cb:41:f1:32:ee:59:86:69:4a:
                    df:a4:21:2f:10:5f:2b:30:65:91:e2:65:bd:6e:4c:
                    1f:c1:04:3c:e8:b6:5e:5a:fd:ac:47:3f:51:7f:8b:
                    42:78:26:65:df:d6:dc:d3:e2:e8:44:c6:65:47:34:
                    e8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:43:C1:07:39:4D:BD:10:99:39:10:BD:20:5D:40:62:10:BB:0E:13
            X509v3 Authority Key Identifier:
                keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:21:95:3c:d4:e1:ee:58:b6:d0:79:a7:e6:c0:76:f7:89:fe:
         a1:5e:bb:05:4c:ac:af:6b:c5:e8:51:be:f2:67:ad:b5:ae:42:
         2c:c7:33:f8:a2:61:1a:4d:60:d3:62:97:69:94:0b:75:8e:96:
         59:92:1e:ed:89:ab:af:78:7d:64:e3:bd:89:17:94:5e:a5:17:
         b6:e1:2d:6b:11:00:c5:19:df:42:36:2d:1f:7d:82:aa:00:d6:
         1f:3f:6c:67:96:81:40:2f:76:d0:14:2e:5d:00:62:e7:f7:fc:
         29:f4:73:24:73:66:62:5b:00:24:c5:bb:ac:c4:e3:0d:6c:bd:
         e5:d6:2a:e5:e5:a2:37:ea:62:84:09:81:49:90:90:6b:b5:99:
         1f:1c:6a:69:ee:40:25:a6:4e:fb:9f:de:08:9a:b6:30:39:bb:
         15:d9:91:80:fd:a1:11:d6:d2:40:2e:ef:03:9a:76:f7:7a:32:
         37:25:da:e8:fc:47:76:6d:f3:8f:36:f9:05:d0:55:f3:f9:3f:
         8e:3e:c5:2f:66:34:39:7b:08:21:49:27:83:cc:af:a4:fc:06:
         5f:13:0d:56:0c:a3:a8:ba:03:1e:86:fa:ea:54:78:08:88:ac:
         03:89:89:1e:ba:9e:a4:ef:e3:4b:55:07:39:5a:20:5f:76:46:
         a5:d3:c5:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpcqW7t3tqHfF+Leqh0IhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMTUwYjNhOTQxOTYyN2ZkYmNkYjY1ODBlODc4YTFjOWZh
MGNjNTgwHhcNMjYwODE0MTkwMDM3WhcNMjYwODE1MTkwMDM3WjAzMTEwLwYDVQQD
EyhiZDQzYzEwNzM5NGRiZDEwOTkzOTEwYmQyMDVkNDA2MjEwYmIwZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMHS4V/eXusYGw+OnjmDf9y8Rn5V
uHzVl64YePUfX8j4ecL7QIrzFc7LT93eF9/wUhoYVJl4TllkIJtd2ac/wHIrf7tx
9OqJBJgrv4wEyIOLzsvrp4gD2mCxEuzuIF9mFQSlOorcNYkaH+KnF2KQEkn2XY3S
G4ykpjMP6oEaBGUUnM+9RuGb5PFhdgnN7E/fRSy4KE2/q4unrDrKnzBfBUX+Y/7M
yz4EduY9zgnLrQB6KvRjnMbiTWZg62vZ6aGfzGjcpsKrG9XLQfEy7lmGaUrfpCEv
EF8rMGWR4mW9bkwfwQQ86LZeWv2sRz9Rf4tCeCZl39bc0+LoRMZlRzToXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1DwQc5Tb0QmTkQvSBdQGIQuw4TMB8GA1UdIwQY
MBaAFPAVCzqUGWJ/2822WA6HihyfoMxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMt
ZWRjNWFiOTk1ZGJmLzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMtZWRjNWFiOTk1ZGJm
LzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCGVPNTh
7li20Hmn5sB294n+oV67BUysr2vF6FG+8metta5CLMcz+KJhGk1g02KXaZQLdY6W
WZIe7Ymrr3h9ZOO9iReUXqUXtuEtaxEAxRnfQjYtH32CqgDWHz9sZ5aBQC920BQu
XQBi5/f8KfRzJHNmYlsAJMW7rMTjDWy95dYq5eWiN+pihAmBSZCQa7WZHxxqae5A
JaZO+5/eCJq2MDm7FdmRgP2hEdbSQC7vA5p293oyNyXa6PxHdm3zjzb5BdBV8/k/
jj7FL2Y0OXsIIUkng8yvpPwGXxMNVgyjqLoDHob66lR4CIisA4mJHrqepO/jS1UH
OVogX3ZGpdPFjg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:05 2026 by rpki-client