Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File:                     BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier:          0FsCWC3yW+d5bDiPE1XL73AkYP09mIbCh8W/VtGe/gI=
Subject key identifier:   F4:5D:B0:7D:DF:E5:42:45:DF:0B:41:21:60:42:16:14:92:97:F8:59
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer:       /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial:       01A13D811BA23ACBADE631826410C222108B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number:          193A
Signing time:             Thu 15 Oct 2026 03:00:33 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:33 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:33 +0000
Files and hashes:         1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: WF0m0LaosAI4KwRdNpXO6v2XsDY4BmPCwzHTYQYmq+0=)
                          2: n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa (hash: /LBumHatcMFGiSJpi+D4CNDkH6MVAePa519MRpuWiWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:1b:a2:3a:cb:ad:e6:31:82:64:10:c2:22:10:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
        Validity
            Not Before: Oct 15 03:00:33 2026 GMT
            Not After : Oct 16 03:00:33 2026 GMT
        Subject: CN=f45db07ddfe54245df0b4121604216149297f859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:07:83:49:34:a8:d0:3b:7c:00:a0:e3:c0:a3:
                    5a:c8:f9:08:62:48:8a:39:1d:2a:1b:7c:f3:0e:57:
                    18:67:e2:54:e1:58:5d:93:a0:0c:fd:6a:f9:53:16:
                    20:c0:4e:a2:81:d0:4f:46:95:4d:01:e7:27:30:ea:
                    dc:db:7e:c1:6a:1a:d0:d2:ad:47:25:4f:bb:19:57:
                    fd:8c:8c:07:d1:d6:a7:74:52:4c:8c:e2:47:42:2e:
                    21:23:db:c9:34:59:bb:9b:43:a0:de:c0:d5:66:e7:
                    f2:98:c7:eb:f3:b6:b3:ee:9e:b6:7d:13:1a:a5:6b:
                    41:73:b2:ec:23:f4:cd:8a:da:99:a1:c2:41:7b:14:
                    45:6f:ab:f8:eb:76:09:e7:ae:d6:c6:c4:d6:a2:06:
                    8a:1d:c8:b9:3d:b2:98:8c:10:25:8e:06:94:fc:97:
                    58:14:86:8b:ae:f8:87:df:08:c1:83:de:c2:4e:bb:
                    a1:b9:8c:81:78:cf:6f:21:7a:9e:d3:16:15:ea:62:
                    3b:54:4b:3a:ca:b5:84:a4:fa:c6:a7:22:9d:a8:99:
                    1e:84:5a:72:20:26:f7:98:0c:8b:36:50:ec:c4:18:
                    e8:89:15:f2:bb:9d:98:a4:4b:cc:e9:6d:4c:11:59:
                    04:9b:8f:72:89:14:eb:91:58:ed:15:89:e7:71:02:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5D:B0:7D:DF:E5:42:45:DF:0B:41:21:60:42:16:14:92:97:F8:59
            X509v3 Authority Key Identifier:
                keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:80:c2:47:d6:f0:95:4f:06:f5:e8:3b:fe:af:aa:4d:d7:59:
         a4:33:e5:14:83:4d:9a:ef:f8:cc:ac:0c:de:86:a9:b6:04:20:
         7d:a4:f5:da:ff:61:6b:62:fa:9a:9c:44:da:7f:9b:af:96:09:
         5f:d1:6f:54:6b:b4:3d:83:d6:25:4a:da:7f:02:85:4b:6e:7c:
         17:7f:4a:1e:fc:3a:1e:1e:63:a1:8d:2b:d6:b9:b4:d3:37:a4:
         d7:7e:b6:f4:04:bb:a9:5c:a8:c3:6f:d5:3c:c6:e6:53:6e:f3:
         27:37:80:aa:23:c5:68:3a:62:67:db:13:d2:af:ed:ae:de:b5:
         f7:4a:83:eb:e2:97:2c:21:ef:1e:14:25:6a:29:59:33:8e:cc:
         5d:79:b9:1c:07:40:c5:e4:1e:21:4e:a1:a9:19:31:7d:c8:96:
         29:07:77:98:28:51:b0:41:05:c9:b1:72:d8:3f:52:bc:2b:7d:
         9f:62:3c:a9:c4:86:ed:40:3c:81:e2:09:2e:80:80:9d:90:ce:
         49:da:49:88:5c:90:6b:e6:4f:cc:ab:85:8c:3d:32:26:13:a7:
         c6:c6:8d:3e:15:5b:26:20:1a:5e:15:0a:5f:ca:d8:21:47:b7:
         2e:1d:b1:8c:c0:1e:a4:42:2e:1d:c0:6c:a5:ef:5e:a7:e8:08:
         2e:99:e0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:20 2026 by rpki-client