Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File:                     0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier:          /NsR0Mu4Ob92P996Oefs+wZcge64lnw5rcKoKfJRGZ4=
Subject key identifier:   BF:8A:6C:4A:B3:35:2B:90:7C:EE:16:E6:10:6B:3E:5C:82:55:9C:71
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer:       /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial:       01A00214170984B8E62D581C3133340CC027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 21:01:06 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:06 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:06 +0000
Files and hashes:         1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: XHadm5EyjVvbdok2lcRbB1WL8YNTL+ojLFaHAK4NPHw=)
                          2: HcdyvfGiwyc5vyJt43ZuqDnZlDk.roa (hash: 6cPvxcqUCsTomfn2PuIbeh8pnyt4KKbDTtE7dn6MQC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:17:09:84:b8:e6:2d:58:1c:31:33:34:0c:c0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
        Validity
            Not Before: Aug 14 21:01:06 2026 GMT
            Not After : Aug 15 21:01:06 2026 GMT
        Subject: CN=bf8a6c4ab3352b907cee16e6106b3e5c82559c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:d4:d7:10:51:21:f8:aa:cf:5f:39:3f:6b:
                    79:35:25:da:bd:e5:d4:06:1e:62:53:b9:d3:da:b7:
                    17:6c:7f:2e:49:73:e3:f8:76:57:35:59:b7:11:da:
                    b2:20:2e:58:72:50:97:75:f7:2f:39:3e:ce:74:ff:
                    13:77:5a:3e:64:2d:44:c8:be:62:72:41:b0:69:c5:
                    37:a5:88:c1:fc:81:5a:fa:12:66:59:34:06:b4:43:
                    7b:6d:d9:33:38:ef:2e:1d:47:66:7d:69:da:cb:2b:
                    05:dc:02:c7:92:fb:ec:45:e8:ea:cd:a0:23:ad:22:
                    0e:9e:1a:7b:fd:43:06:a3:e1:83:50:16:a2:df:ec:
                    5e:f7:aa:c2:72:77:66:d7:c5:8c:1e:06:78:f1:3c:
                    ab:05:bc:72:7e:c2:1d:76:57:32:2a:89:08:1d:96:
                    0b:aa:03:11:8a:61:18:44:fb:a5:6e:64:cf:ea:c8:
                    dc:f0:9e:55:9e:1e:a1:d3:8d:ee:08:e9:a2:de:d7:
                    cf:6f:7f:f8:65:be:64:5b:61:91:53:da:86:59:c9:
                    30:8a:3e:11:3f:d4:28:20:78:2a:4f:bb:7d:42:cf:
                    e5:25:d5:57:64:d2:55:86:29:cc:82:9f:cb:f0:9b:
                    71:7f:f8:be:02:9a:bf:4d:0e:e9:52:96:45:27:2d:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8A:6C:4A:B3:35:2B:90:7C:EE:16:E6:10:6B:3E:5C:82:55:9C:71
            X509v3 Authority Key Identifier:
                keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:88:d6:87:6e:d8:8e:39:22:44:25:b6:76:a0:45:a8:a0:03:
         f4:82:cd:bf:37:65:14:9b:0c:0a:33:f3:1f:c9:86:67:69:76:
         1a:15:1d:d5:ce:80:22:5c:f9:30:bf:0c:76:56:68:eb:be:3c:
         9a:ae:07:c3:ad:a0:8c:c4:e2:3d:0d:0a:93:f9:1c:dc:59:ce:
         bf:79:2b:b0:65:ad:86:cd:03:b7:26:8b:79:1b:f4:09:47:0a:
         09:c9:94:a5:0a:2f:93:4e:85:27:d8:e6:d7:65:45:45:e5:58:
         3e:be:eb:ac:1e:9c:b6:e0:9c:fb:f3:22:d5:bd:ee:00:12:7f:
         7a:a4:b8:1e:9b:e7:b1:04:9f:7c:0c:15:45:a6:89:34:e8:e9:
         28:0b:0f:0a:d6:f6:3c:cf:95:f1:01:e5:ad:4c:00:97:89:70:
         4f:da:53:8f:ef:a1:47:c2:eb:05:6a:9e:56:c2:79:14:68:20:
         49:7b:95:e8:0e:50:bb:6e:8d:c8:35:20:d3:23:4d:83:54:e6:
         1b:81:b6:34:8e:8b:c7:8e:4e:ca:98:21:df:05:8c:03:a2:82:
         96:50:12:85:62:33:2b:79:58:d1:1a:2b:a8:50:a5:d0:03:8c:
         40:4d:6e:98:f5:87:17:31:b7:89:1e:d1:c4:90:9c:0b:85:a1:
         bb:aa:ab:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:47 2026 by rpki-client