Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File:                     BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier:          dhceHhKUfZcDU+grifSgLT0glqqEj+LZC4Vzc+807QM=
Subject key identifier:   4A:30:18:DB:9A:99:9D:FD:83:A3:E9:47:EA:66:BC:70:14:8C:69:67
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer:       /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial:       01A0010160A7F0FB738354A411045063815A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number:          0D32
Signing time:             Fri 14 Aug 2026 16:01:02 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:02 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:02 +0000
Files and hashes:         1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: hVB2K3CavcI45mGpWS9riwsJRW2GtagxdEl0O1UvgrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:60:a7:f0:fb:73:83:54:a4:11:04:50:63:81:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
        Validity
            Not Before: Aug 14 16:01:02 2026 GMT
            Not After : Aug 15 16:01:02 2026 GMT
        Subject: CN=4a3018db9a999dfd83a3e947ea66bc70148c6967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:6a:dd:1b:a7:33:f2:a1:06:5e:3f:5e:62:
                    59:01:69:09:23:2e:0c:02:29:bd:8b:90:63:06:ee:
                    01:4e:1a:03:47:59:b9:b2:8b:19:c3:04:2f:d9:4c:
                    49:10:40:32:79:09:47:61:2b:19:06:7c:38:5a:67:
                    84:4d:d7:f1:6a:96:7d:67:38:69:2e:eb:09:f5:45:
                    b6:58:d4:0e:40:3c:a2:e4:18:d4:6a:61:da:51:22:
                    0b:18:3d:3f:b7:32:d0:d4:53:d7:47:b4:36:82:7c:
                    b2:04:db:27:3e:5d:00:99:cd:57:21:62:88:f3:9a:
                    22:50:e6:07:6b:0a:a7:71:c8:ff:01:2b:69:d2:ff:
                    6a:36:45:60:45:95:2b:58:9e:67:22:38:df:5d:88:
                    a3:51:9e:a6:89:ab:67:f2:0c:8d:8e:09:ac:91:65:
                    4f:6f:3b:66:5d:ab:f2:79:1f:a6:ac:81:e4:d7:95:
                    29:c1:6c:57:b8:e4:13:1a:6c:9e:60:47:75:ae:be:
                    36:2b:75:8e:1e:8f:52:21:7b:d6:91:af:e9:d9:fd:
                    5b:5d:29:70:94:a5:2e:46:c8:27:47:d6:dc:28:34:
                    e3:d7:b7:e1:5b:56:82:b2:a5:97:a7:7a:8b:42:48:
                    6c:21:e0:a7:25:5b:4d:c7:59:51:bf:41:52:b0:72:
                    29:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:30:18:DB:9A:99:9D:FD:83:A3:E9:47:EA:66:BC:70:14:8C:69:67
            X509v3 Authority Key Identifier:
                keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:6d:96:fb:f2:51:c4:61:4f:7e:ae:c3:19:7d:47:00:2f:5e:
         ff:11:35:52:f1:4a:c0:84:d4:04:ed:7d:e9:75:d2:78:08:d9:
         b2:25:1a:0b:b5:b9:9b:eb:08:5b:f3:60:fb:00:7b:01:a2:de:
         df:0c:18:6d:c0:57:af:9f:69:7a:10:1a:d4:a8:7c:eb:64:55:
         22:a6:74:a4:bc:ad:0f:2e:2c:15:e5:47:9c:20:e0:e7:b0:fe:
         45:59:90:27:71:ee:d3:6f:d8:e3:73:e2:36:ca:0d:72:5b:33:
         0f:03:ce:25:48:78:19:b2:ad:9e:62:23:f4:85:96:b5:f8:71:
         41:36:f3:38:23:76:63:eb:7b:d6:30:86:2c:e6:bf:bb:2c:f9:
         72:57:99:f4:b8:4f:e8:c8:7d:8c:87:d3:93:9f:aa:1b:e3:e4:
         3b:be:c1:c9:5d:36:21:1c:b0:7f:83:93:04:cb:08:95:c1:56:
         27:53:80:f8:5b:8f:25:8c:4a:cd:13:0c:39:aa:48:8f:bb:87:
         75:1a:2c:7e:5a:8b:ea:b4:ec:b0:6f:be:a4:f8:46:a9:ad:f2:
         37:25:21:50:fe:d2:6e:78:ad:76:5b:c0:d8:38:0d:7f:17:78:
         98:d2:9b:3e:1a:67:61:ee:04:7c:97:02:8d:0e:df:98:af:d9:
         bc:b0:f5:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAWCn8Ptzg1SkEQRQY4FaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NWQ2ZTgyMzQ5NDcyY2NhZmQwYTA2OWY1NzhmNjQ3YzMw
YTk4NDYwHhcNMjYwODE0MTYwMTAyWhcNMjYwODE1MTYwMTAyWjAzMTEwLwYDVQQD
Eyg0YTMwMThkYjlhOTk5ZGZkODNhM2U5NDdlYTY2YmM3MDE0OGM2OTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+hq3RunM/KhBl4/XmJZAWkJIy4M
Aim9i5BjBu4BThoDR1m5sosZwwQv2UxJEEAyeQlHYSsZBnw4WmeETdfxapZ9Zzhp
LusJ9UW2WNQOQDyi5BjUamHaUSILGD0/tzLQ1FPXR7Q2gnyyBNsnPl0Amc1XIWKI
85oiUOYHawqnccj/AStp0v9qNkVgRZUrWJ5nIjjfXYijUZ6miatn8gyNjgmskWVP
bztmXavyeR+mrIHk15UpwWxXuOQTGmyeYEd1rr42K3WOHo9SIXvWka/p2f1bXSlw
lKUuRsgnR9bcKDTj17fhW1aCsqWXp3qLQkhsIeCnJVtNx1lRv0FSsHIpkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEowGNuamZ39g6PpR+pmvHAUjGlnMB8GA1UdIwQY
MBaAFAVdboI0lHLMr9CgafV49kfDCphGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlYxdWdqU1Vjc3l2MEtCcDlYajJSOE1LbUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ODBhNTQtZDMwMS00OTJkLWFjYmEt
NWFhZTNhYjc4OTk1LzEvQlYxdWdqU1Vjc3l2MEtCcDlYajJSOE1LbUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ODBhNTQtZDMwMS00OTJkLWFjYmEtNWFhZTNhYjc4OTk1
LzEvQlYxdWdqU1Vjc3l2MEtCcDlYajJSOE1LbUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL22W+/JR
xGFPfq7DGX1HAC9e/xE1UvFKwITUBO196XXSeAjZsiUaC7W5m+sIW/Ng+wB7AaLe
3wwYbcBXr59pehAa1Kh862RVIqZ0pLytDy4sFeVHnCDg57D+RVmQJ3Hu02/Y43Pi
NsoNclszDwPOJUh4GbKtnmIj9IWWtfhxQTbzOCN2Y+t71jCGLOa/uyz5cleZ9LhP
6Mh9jIfTk5+qG+PkO77ByV02IRywf4OTBMsIlcFWJ1OA+FuPJYxKzRMMOapIj7uH
dRosflqL6rTssG++pPhGqa3yNyUhUP7SbnitdlvA2DgNfxd4mNKbPhpnYe4EfJcC
jQ7fmK/ZvLD1JA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:04 2026 by rpki-client