Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
File:                     B3M_xjuPGIDlwK9rRkPR4yGB16U.mft (raw, json)
Hash identifier:          u0E5goHFD96vvhSN1bg3YXzZ8SPYt063SnyH40kC414=
Subject key identifier:   D5:10:F1:41:F5:CC:4B:B4:8B:8B:47:5F:8B:CF:59:E7:84:C7:65:96
Authority key identifier: 07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
Certificate issuer:       /CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Certificate serial:       01A13D8178477CF6DF9A40B52058BAE3ADEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
Manifest number:          1AA4
Signing time:             Thu 15 Oct 2026 03:00:57 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:57 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:57 +0000
Files and hashes:         1: B3M_xjuPGIDlwK9rRkPR4yGB16U.crl (hash: dmzL9f+Z87lXI5aUYJ/YvJDUcVWX/d5XwoLGVVUGAF0=)
                          2: MM5bwtQVjNMLa24HAAsYzVkMO-0.roa (hash: PyAylfGi7oxHc9wTlMze4kzyfLTmAD3thM2tfRQ1RLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:78:47:7c:f6:df:9a:40:b5:20:58:ba:e3:ad:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
        Validity
            Not Before: Oct 15 03:00:57 2026 GMT
            Not After : Oct 16 03:00:57 2026 GMT
        Subject: CN=d510f141f5cc4bb48b8b475f8bcf59e784c76596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:dc:f3:64:a1:9b:81:ee:12:a2:0a:fa:a3:
                    ea:7c:0d:42:4d:b2:38:16:15:7c:e5:95:76:70:e0:
                    57:1b:84:8c:ad:85:cb:7b:42:b4:c6:93:0d:b9:f6:
                    eb:a4:cb:04:c9:2f:e7:59:cc:fd:ae:83:87:5e:af:
                    1f:30:5e:32:aa:1d:df:20:4b:9a:5f:27:3f:ea:a3:
                    d3:1d:24:fe:9e:82:e7:ad:0f:7a:b0:39:a9:60:ce:
                    ac:4e:47:e9:75:aa:dc:95:94:18:0c:09:d0:4d:9e:
                    9e:bf:08:60:13:b2:3b:02:ec:62:18:fa:71:5c:09:
                    2b:a3:d2:5f:67:92:76:76:82:99:30:a0:7b:35:b9:
                    d2:c1:fd:a0:a0:cf:f5:ce:56:1f:cf:1a:8c:a4:93:
                    29:61:be:73:cb:b8:bb:16:39:5e:14:94:e6:34:20:
                    0a:5f:e8:e1:d9:c4:42:67:a4:a3:6c:a1:7c:c0:64:
                    3a:89:af:11:a5:87:e1:83:74:02:f5:92:72:ef:e4:
                    8b:99:15:94:8b:5e:04:9c:ae:9f:d5:0e:36:82:7b:
                    a7:ed:41:d5:ee:1e:18:12:7c:8a:10:bf:bb:d3:e1:
                    88:83:fd:88:64:7c:c4:20:5f:c6:af:d6:9f:e0:50:
                    20:92:87:01:f2:9a:7b:ca:44:36:d9:7b:5b:40:76:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:10:F1:41:F5:CC:4B:B4:8B:8B:47:5F:8B:CF:59:E7:84:C7:65:96
            X509v3 Authority Key Identifier:
                keyid:07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d3:fe:a1:e8:18:3c:f0:4a:86:b7:4f:24:80:89:22:99:17:
         30:6b:05:28:cb:1a:aa:8b:48:7f:02:a5:53:36:7a:ad:e7:93:
         38:7e:73:07:33:aa:e7:97:b6:81:82:4e:05:28:72:87:c2:d6:
         10:95:52:d4:a4:85:0b:dd:c7:74:02:99:69:7b:9a:4d:41:47:
         bb:f8:cb:e4:70:c6:19:15:a2:46:8b:5b:13:ba:82:87:d6:97:
         51:bf:42:13:be:ff:e8:64:e7:d8:69:39:4b:0f:0a:58:5f:7a:
         7b:6b:84:98:bd:48:25:00:d3:a6:42:49:35:55:0e:be:e2:e1:
         d9:44:e3:a5:64:86:2a:0e:a8:c2:1c:2d:d4:f8:33:eb:bb:86:
         f7:6a:ea:17:2b:9d:9f:b3:22:2a:c9:09:e8:c0:30:63:99:d1:
         dd:e2:b4:e1:52:a7:f0:86:b0:bc:bb:d5:68:8b:ec:fe:d0:40:
         0a:69:83:e4:ed:2d:9a:7b:54:08:b9:b3:54:eb:42:85:33:33:
         4d:6f:32:d4:cf:0f:0b:03:96:6c:d7:da:52:26:fa:41:e4:8d:
         1c:e2:f6:db:0d:c7:87:08:f5:59:58:71:58:8f:58:c2:b2:c7:
         36:13:c7:c0:e3:e8:f2:0b:97:61:25:6f:62:d7:79:bc:f8:35:
         ed:1a:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:30 2026 by rpki-client