Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
File:                     BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json)
Hash identifier:          VsbrDcTBcosUKE5YUH7eJRbx4+SX+L/XvWTnToUI6xk=
Subject key identifier:   F9:5D:88:60:52:80:77:26:F7:75:3B:69:E5:36:C3:49:9A:5A:EF:8D
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Certificate issuer:       /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial:       4B86E54DAEE7A922A046B8094ABF8C14B75AC75D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
Manifest number:          0105
Signing time:             Mon 22 Jun 2026 22:25:01 +0000
Manifest this update:     Mon 22 Jun 2026 22:20:01 +0000
Manifest next update:     Wed 24 Jun 2026 00:17:01 +0000
Files and hashes:         1: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: DZj7MidDtKc8pM/s1GVXw1WFJAFhsDOfT/L4LbmXuHA=)
                          2: AS201386.asa (hash: OYRXpkyxncvi2a2N61iwOFYtIw9TA6/nEOruPTD6Q+k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Jun 2026 21:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:86:e5:4d:ae:e7:a9:22:a0:46:b8:09:4a:bf:8c:14:b7:5a:c7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
        Validity
            Not Before: Jun 22 22:20:01 2026 GMT
            Not After : Jun 24 00:17:01 2026 GMT
        Subject: CN=F95D886052807726F7753B69E536C3499A5AEF8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:bd:a2:6f:8f:38:a1:4f:f5:a9:d1:e1:df:
                    60:28:27:c6:ad:ba:57:3d:33:ba:13:2e:64:db:23:
                    b0:5d:36:09:29:68:b9:64:f9:37:a8:46:23:52:e9:
                    fd:fd:db:c5:02:7f:06:c1:ae:8b:9d:d0:39:d7:1f:
                    db:91:de:eb:b6:9e:c5:f4:5c:6d:f6:90:83:43:2f:
                    87:b3:7f:69:3a:b8:da:43:46:31:03:f0:7f:48:03:
                    2b:e5:29:ed:00:17:80:7d:2b:4e:e2:94:80:4d:b0:
                    30:04:80:aa:f8:36:7b:80:7e:07:71:44:39:20:4a:
                    4d:ef:f5:ef:b4:8a:a8:a9:e4:87:5a:56:35:98:4c:
                    ed:ff:23:94:cc:b5:0d:47:d9:2e:49:c6:13:07:df:
                    95:9a:fa:f7:c9:17:47:6c:b7:a1:ec:78:69:a8:15:
                    a3:34:db:e3:9b:e0:9c:8e:b5:d9:c0:3c:ea:b2:c9:
                    c7:17:74:3b:fe:0c:1a:4d:b6:90:04:86:67:37:4e:
                    07:23:98:20:93:fd:73:5b:f2:6d:9f:68:dd:15:a3:
                    c0:8f:1f:72:89:4c:4c:43:4a:a1:6d:89:15:25:78:
                    b2:66:4e:ed:d4:40:26:1d:b2:5c:4e:65:ea:c9:ee:
                    bf:2a:58:85:d4:0f:24:af:c1:6e:65:70:8a:96:40:
                    77:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5D:88:60:52:80:77:26:F7:75:3B:69:E5:36:C3:49:9A:5A:EF:8D
            X509v3 Authority Key Identifier:
                keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:40:be:99:83:03:8b:2f:67:91:8d:7e:75:56:95:80:7c:64:
         58:fd:20:03:17:e0:5e:2e:87:34:17:76:28:a2:0a:29:d9:5d:
         c8:4b:f3:fe:63:f5:01:d8:20:db:c2:75:d1:e1:28:5c:3b:7a:
         53:0b:e7:0d:91:4b:c9:5b:bc:1f:f4:68:be:ba:0f:e2:18:e6:
         33:b6:9e:b8:d5:a8:9d:1e:30:eb:27:7f:71:bd:28:1a:0b:e8:
         58:ab:c2:7d:51:ca:35:7f:9f:2a:25:4d:f7:13:1d:77:54:6e:
         74:33:e8:6a:66:2d:91:a4:f8:fd:2a:69:87:c9:ad:2d:d7:b7:
         57:c7:bc:16:0e:42:0c:c1:b3:35:9a:48:b9:7d:48:de:71:60:
         d7:7f:2a:b4:12:7e:b4:8d:10:9d:34:b1:bb:46:6d:4b:45:5c:
         88:1f:2c:34:26:a3:d5:5e:84:ef:86:5e:6a:6b:52:d4:24:93:
         75:5c:62:04:ef:e3:b2:75:9c:08:c4:e1:cf:ec:ba:8b:23:30:
         93:a0:83:e4:da:8c:6f:58:d7:36:ae:48:b9:f7:38:35:35:2c:
         06:3a:40:05:46:0c:3e:30:81:1b:4f:86:c5:95:ad:b5:a1:29:
         56:a9:d3:35:a6:69:2f:49:90:2b:11:ff:6a:37:08:a9:88:37:
         58:ef:3a:1a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUS4blTa7nqSKgRrgJSr+MFLdax10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4ZTg3ZjM1MzEyN2NjOTIzYjFjYzFmOTc4Njk5NTM3
ZWZhZDY2ZDAeFw0yNjA2MjIyMjIwMDFaFw0yNjA2MjQwMDE3MDFaMDMxMTAvBgNV
BAMTKEY5NUQ4ODYwNTI4MDc3MjZGNzc1M0I2OUU1MzZDMzQ5OUE1QUVGOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfrr2ib484oU/1qdHh32AoJ8at
ulc9M7oTLmTbI7BdNgkpaLlk+TeoRiNS6f3928UCfwbBroud0DnXH9uR3uu2nsX0
XG32kINDL4ezf2k6uNpDRjED8H9IAyvlKe0AF4B9K07ilIBNsDAEgKr4NnuAfgdx
RDkgSk3v9e+0iqip5IdaVjWYTO3/I5TMtQ1H2S5JxhMH35Wa+vfJF0dst6HseGmo
FaM02+Ob4JyOtdnAPOqyyccXdDv+DBpNtpAEhmc3TgcjmCCT/XNb8m2faN0Vo8CP
H3KJTExDSqFtiRUleLJmTu3UQCYdslxOZerJ7r8qWIXUDySvwW5lcIqWQHcdAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU+V2IYFKAdyb3dTtp5TbDSZpa740wHwYDVR0j
BBgwFoAUu46H81MSfMkjscwfl4aZU3761m0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1
ZWZjLzAvQkI4RTg3RjM1MzEyN0NDOTIzQjFDQzFGOTc4Njk5NTM3RUZBRDY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0Nkg4MU1TZk1ranNjd2ZsNGFaVTM3
NjFtMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05
NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMC9CQjhFODdGMzUzMTI3Q0M5MjNC
MUNDMUY5Nzg2OTk1MzdFRkFENjZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUC+mYMDiy9nkY1+dVaV
gHxkWP0gAxfgXi6HNBd2KKIKKdldyEvz/mP1Adgg28J10eEoXDt6UwvnDZFLyVu8
H/RovroP4hjmM7aeuNWonR4w6yd/cb0oGgvoWKvCfVHKNX+fKiVN9xMdd1RudDPo
amYtkaT4/Spph8mtLde3V8e8Fg5CDMGzNZpIuX1I3nFg138qtBJ+tI0QnTSxu0Zt
S0VciB8sNCaj1V6E74ZeamtS1CSTdVxiBO/jsnWcCMThz+y6iyMwk6CD5NqMb1jX
Nq5Iufc4NTUsBjpABUYMPjCBG0+GxZWttaEpVqnTNaZpL0mQKxH/ajcIqYg3WO86
Gg==
-----END CERTIFICATE-----
Generated at Tue Jun 23 02:30:59 2026 by rpki-client