Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
File:                     BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json)
Hash identifier:          2ccQk1/u/tdpmiU4T6z+pu58l1hLoY+ILsB5SXz4aJ4=
Subject key identifier:   6F:4D:AE:93:02:9F:B1:71:FC:E0:0F:8E:83:54:9A:98:F4:28:BB:B4
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Certificate issuer:       /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial:       27477947E40065B9F498C140EBF10828292AC272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
Manifest number:          014E
Signing time:             Sat 15 Aug 2026 20:31:08 +0000
Manifest this update:     Sat 15 Aug 2026 20:26:08 +0000
Manifest next update:     Mon 17 Aug 2026 00:13:08 +0000
Files and hashes:         1: AS201386.asa (hash: OYRXpkyxncvi2a2N61iwOFYtIw9TA6/nEOruPTD6Q+k=)
                          2: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: IMZqfgoeESWZBz9hA2FzzWMcP855fHkJrm5NorElA/Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Aug 2026 00:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:47:79:47:e4:00:65:b9:f4:98:c1:40:eb:f1:08:28:29:2a:c2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
        Validity
            Not Before: Aug 15 20:26:08 2026 GMT
            Not After : Aug 17 00:13:08 2026 GMT
        Subject: CN=6F4DAE93029FB171FCE00F8E83549A98F428BBB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:42:ee:ac:1d:c5:10:b7:28:08:35:28:0a:
                    e5:f6:5a:3a:1d:e6:ef:f9:c2:d1:65:72:10:87:ad:
                    79:1b:6a:c3:e7:7c:61:4e:da:12:56:2b:09:eb:fb:
                    44:8a:93:92:38:2a:91:00:57:5a:b3:54:73:e4:8f:
                    e4:a2:53:e9:c2:73:77:3b:2d:aa:e2:93:eb:78:f5:
                    54:34:e9:55:7e:e5:1e:b4:2b:cb:5c:5f:f4:ce:b5:
                    46:84:19:8d:43:6a:41:a7:0d:17:fd:fd:fc:6d:90:
                    53:67:5f:b0:58:2b:df:5b:87:04:d4:06:c9:64:17:
                    80:42:d3:39:61:93:cb:f7:1e:4f:f8:f9:c1:fb:78:
                    e6:b0:71:5b:cb:d8:ce:66:10:f8:8e:92:ff:6a:96:
                    af:71:dc:92:1e:48:11:a1:4d:d1:e2:2c:cc:5f:cb:
                    8d:98:26:3d:6d:09:20:0a:f6:0c:ee:ed:7a:24:96:
                    dd:22:fd:6b:cc:db:0f:4f:49:e6:00:35:72:7b:da:
                    79:2a:72:1c:7b:73:8c:1d:f6:93:74:99:5f:5e:33:
                    b4:72:0b:a6:2f:3f:8f:6e:21:42:00:4f:ef:3c:eb:
                    c3:3e:d8:9f:1f:15:59:21:42:06:6d:6b:97:bf:1b:
                    2d:10:29:82:49:cb:c3:f1:65:c5:c0:7f:8b:ce:88:
                    db:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4D:AE:93:02:9F:B1:71:FC:E0:0F:8E:83:54:9A:98:F4:28:BB:B4
            X509v3 Authority Key Identifier:
                keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:17:6f:13:3b:e1:4d:be:68:6c:f1:85:87:80:c2:ee:de:e6:
         d0:56:fe:1d:7a:ca:08:1e:ff:e9:7c:0f:75:d3:59:39:e5:df:
         a5:dc:3d:a6:e7:1d:4c:c8:ab:dc:0e:6c:4e:06:5f:d2:62:fb:
         00:65:61:4d:fa:9a:f6:b2:b2:6f:fc:40:bc:2c:1e:88:00:79:
         f8:b9:9d:fc:ef:4f:1f:36:d7:25:bc:0d:19:fa:16:3c:3c:5e:
         e5:a0:fb:34:0b:ac:e7:dd:24:8f:30:64:cc:ec:80:04:d6:52:
         bf:4f:13:db:de:b1:13:88:97:67:64:af:95:d8:b6:3e:b1:ec:
         0c:fd:75:75:d4:f0:a7:65:63:f6:62:3c:bf:b3:a3:2f:80:ad:
         b3:15:3e:9f:49:20:a8:a7:76:e5:77:be:0e:40:8a:85:da:9c:
         67:60:b3:07:fd:9b:b0:c4:f1:0b:63:55:23:8d:cc:d5:33:54:
         89:25:5b:a8:f9:85:1f:f0:f7:e9:6b:99:5e:24:5f:0a:cb:5c:
         a5:7a:37:1a:27:2b:11:13:fe:db:77:2a:d7:0c:67:1a:91:03:
         8a:dc:57:13:52:b2:ca:37:71:af:3e:16:73:dc:20:f1:57:9c:
         5e:71:ad:09:cf:7e:7a:da:dd:8f:fb:54:83:79:cf:75:76:1c:
         a0:58:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 10:03:20 2026 by rpki-client