Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
File:                     B3M_xjuPGIDlwK9rRkPR4yGB16U.mft (raw, json)
Hash identifier:          lJF8OouzFBZhGCs+Lgtuqd6mZI260elKAr97u8RUQHY=
Subject key identifier:   27:B4:BE:24:D2:46:56:65:B2:E6:86:C7:ED:91:4A:3C:F1:93:D1:87
Authority key identifier: 07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
Certificate issuer:       /CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Certificate serial:       01A000CA4D3EF5BB979D9915D12728DF6034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 15:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:53 +0000
Files and hashes:         1: B3M_xjuPGIDlwK9rRkPR4yGB16U.crl (hash: o54E3oJcE+mUvgQeZ90fmB9yiLbStL6AsoDyUWoRtos=)
                          2: MM5bwtQVjNMLa24HAAsYzVkMO-0.roa (hash: PyAylfGi7oxHc9wTlMze4kzyfLTmAD3thM2tfRQ1RLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:4d:3e:f5:bb:97:9d:99:15:d1:27:28:df:60:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
        Validity
            Not Before: Aug 14 15:00:53 2026 GMT
            Not After : Aug 15 15:00:53 2026 GMT
        Subject: CN=27b4be24d2465665b2e686c7ed914a3cf193d187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:e7:92:e7:67:c7:28:11:f8:53:5f:10:2c:
                    cf:80:fe:c6:f6:e1:34:5b:e7:56:32:82:4e:67:63:
                    36:be:23:a6:d6:cb:8e:58:1d:60:99:a0:ee:25:b3:
                    00:fd:c9:73:f8:09:01:a7:4f:d6:dc:4c:bc:73:fe:
                    59:be:23:fb:92:7e:33:ea:b5:34:ff:a5:39:93:81:
                    ca:57:d5:ba:3b:f5:9b:6f:e5:c7:96:e8:1d:8e:e4:
                    66:4a:cf:c2:38:f4:2c:52:ce:30:fe:93:74:9e:41:
                    46:79:b5:f1:d6:e8:d7:c1:0b:aa:1c:a6:91:21:b6:
                    64:38:7e:c9:85:95:36:93:7b:6b:c9:be:8d:37:06:
                    1d:4d:9a:c9:01:7e:49:54:11:d1:25:ec:d2:91:99:
                    84:67:e6:8c:75:3b:2c:39:e3:5c:92:89:96:e6:75:
                    3c:05:ff:97:1b:fa:36:00:84:ef:96:bf:07:9a:a9:
                    75:51:c0:f7:73:d9:2f:b3:14:e4:a5:53:63:ea:61:
                    00:cc:a4:2f:c6:46:de:2b:ef:50:54:26:79:15:0f:
                    be:bb:a8:b1:bd:3f:33:89:62:6e:be:b8:66:59:7f:
                    fe:9b:e2:13:ac:06:ac:1c:de:6c:14:9a:a0:9c:c2:
                    ae:40:b6:4a:a2:b9:9b:34:80:28:3d:ad:5a:30:5b:
                    dd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B4:BE:24:D2:46:56:65:B2:E6:86:C7:ED:91:4A:3C:F1:93:D1:87
            X509v3 Authority Key Identifier:
                keyid:07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b3:1b:c0:eb:cc:5e:8a:3c:80:3e:81:f0:d2:12:a2:ca:5d:
         40:60:6a:c6:44:e4:ea:77:7a:7d:3d:dd:6a:1e:95:86:c2:4a:
         a0:c7:0a:db:1a:50:cb:49:af:d3:71:54:66:30:aa:79:9d:ee:
         38:96:77:6e:45:42:bc:0d:b5:d0:37:1c:87:b0:04:af:20:90:
         4d:f0:14:b9:11:47:5b:9c:0c:f6:af:71:62:c9:45:74:bb:23:
         f0:d9:b9:49:ff:e9:e8:ef:01:d1:dc:9d:b6:c6:99:22:0c:a6:
         77:0c:8e:72:fe:5e:2c:29:1a:51:a4:d6:99:96:39:76:f1:bb:
         0d:dd:ff:5c:f1:ee:df:71:b0:99:75:d3:96:1e:67:a6:6e:bf:
         e1:5e:d7:57:cb:01:3c:b8:f6:fd:1b:b2:62:b1:86:ab:e5:60:
         d6:fe:4d:cd:e1:c2:f4:c0:d2:0f:1c:d1:7f:09:e5:51:88:90:
         27:ef:96:b4:4d:61:e8:09:47:1b:a3:0c:29:43:b6:f7:a5:dd:
         99:bd:6e:f2:78:75:3e:ec:73:63:72:24:f7:51:9c:be:86:90:
         f2:5d:9d:44:ae:5e:10:e4:90:fd:de:2e:fe:c1:c3:5c:95:b8:
         f2:62:58:08:5a:70:99:af:b7:23:10:c8:8a:e2:6b:e2:c0:c1:
         34:86:fb:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyk0+9buXnZkV0Sco32A0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NzMzZmM2M2I4ZjE4ODBlNWMwYWY2YjQ2NDNkMWUzMjE4
MWQ3YTUwHhcNMjYwODE0MTUwMDUzWhcNMjYwODE1MTUwMDUzWjAzMTEwLwYDVQQD
EygyN2I0YmUyNGQyNDY1NjY1YjJlNjg2YzdlZDkxNGEzY2YxOTNkMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSrnkudnxygR+FNfECzPgP7G9uE0
W+dWMoJOZ2M2viOm1suOWB1gmaDuJbMA/clz+AkBp0/W3Ey8c/5ZviP7kn4z6rU0
/6U5k4HKV9W6O/Wbb+XHlugdjuRmSs/COPQsUs4w/pN0nkFGebXx1ujXwQuqHKaR
IbZkOH7JhZU2k3tryb6NNwYdTZrJAX5JVBHRJezSkZmEZ+aMdTssOeNckomW5nU8
Bf+XG/o2AITvlr8Hmql1UcD3c9kvsxTkpVNj6mEAzKQvxkbeK+9QVCZ5FQ++u6ix
vT8ziWJuvrhmWX/+m+ITrAasHN5sFJqgnMKuQLZKormbNIAoPa1aMFvdPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCe0viTSRlZlsuaGx+2RSjzxk9GHMB8GA1UdIwQY
MBaAFAdzP8Y7jxiA5cCva0ZD0eMhgdelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjNNX3hqdVBHSURsd0s5clJrUFI0eUdCMTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jMzgzY2ItMzNlYS00M2NmLThlMmUt
MTRkMDdiZDE4ODljLzEvQjNNX3hqdVBHSURsd0s5clJrUFI0eUdCMTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9jMzgzY2ItMzNlYS00M2NmLThlMmUtMTRkMDdiZDE4ODlj
LzEvQjNNX3hqdVBHSURsd0s5clJrUFI0eUdCMTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLMbwOvM
Xoo8gD6B8NISospdQGBqxkTk6nd6fT3dah6VhsJKoMcK2xpQy0mv03FUZjCqeZ3u
OJZ3bkVCvA210Dcch7AEryCQTfAUuRFHW5wM9q9xYslFdLsj8Nm5Sf/p6O8B0dyd
tsaZIgymdwyOcv5eLCkaUaTWmZY5dvG7Dd3/XPHu33GwmXXTlh5npm6/4V7XV8sB
PLj2/RuyYrGGq+Vg1v5NzeHC9MDSDxzRfwnlUYiQJ++WtE1h6AlHG6MMKUO296Xd
mb1u8nh1PuxzY3Ik91GcvoaQ8l2dRK5eEOSQ/d4u/sHDXJW48mJYCFpwma+3IxDI
iuJr4sDBNIb7ww==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:07 2026 by rpki-client