Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File:                     BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier:          TO4Wp7lBc3lTRtpvYNn4PCEP3q6JZSy+hSe24sA+7IE=
Subject key identifier:   13:A9:23:B7:C6:B5:85:76:A7:63:0C:A9:44:B9:2B:69:59:59:08:CE
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer:       /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial:       01A0C47C83425938BBBB79FDBABC8BD631C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number:          1A61
Signing time:             Mon 21 Sep 2026 15:01:29 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:29 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:29 +0000
Files and hashes:         1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: f7RPqFec5q4UbtCQbXGjCh+bv4NfUPsG4+WoLK8WaAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:83:42:59:38:bb:bb:79:fd:ba:bc:8b:d6:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
        Validity
            Not Before: Sep 21 15:01:29 2026 GMT
            Not After : Sep 22 15:01:29 2026 GMT
        Subject: CN=13a923b7c6b58576a7630ca944b92b69595908ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:fe:64:91:d9:c4:8f:97:30:ca:7d:7b:83:
                    ca:9c:d1:19:04:97:a3:24:bb:67:42:b2:e6:d9:17:
                    c8:0a:5a:ec:5f:f8:9b:10:7b:98:8c:81:c7:fe:2c:
                    de:30:fa:6b:00:e7:13:02:d2:ad:35:cd:6a:1b:92:
                    0b:0a:8b:23:10:b9:2a:39:14:5c:3f:21:b8:d4:8e:
                    ce:68:0b:d0:c1:a4:a3:3a:76:a9:ae:a7:54:25:4c:
                    8b:c3:ec:64:8f:b5:13:04:cb:9e:cc:3b:d2:d4:38:
                    ea:fa:c2:5a:9d:59:50:3a:1a:81:6b:c6:be:46:f7:
                    d2:5d:eb:8b:ec:ae:2e:cb:46:64:8b:a8:1b:13:aa:
                    7a:92:d6:34:90:96:47:07:52:21:2c:fa:2f:15:41:
                    93:aa:3f:97:53:cc:ec:e1:d1:3f:72:c7:b4:84:68:
                    8a:c6:6b:13:ac:da:e4:3a:b2:51:88:6b:de:79:47:
                    06:85:fe:7d:99:d6:91:04:7e:d8:34:25:a2:8f:1f:
                    9b:bb:1e:c1:2a:c0:5e:23:08:a8:6a:40:b4:fd:63:
                    79:f2:4f:57:0c:ca:aa:f3:7d:d6:79:92:df:96:2b:
                    1d:ff:92:40:46:36:29:ca:c3:55:05:38:22:70:ee:
                    e9:8c:ee:70:fc:dd:a4:e5:e5:13:24:d2:d7:bb:d3:
                    f1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A9:23:B7:C6:B5:85:76:A7:63:0C:A9:44:B9:2B:69:59:59:08:CE
            X509v3 Authority Key Identifier:
                keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5f:74:ec:f8:a5:b5:16:d9:00:4f:be:89:4c:a9:a5:b8:65:
         e8:7f:b6:80:5a:3a:c7:29:ad:f3:48:4e:79:c1:47:12:9a:9d:
         d5:ca:66:ec:16:9d:4f:1b:e8:41:87:fb:42:3d:1a:f5:e7:0a:
         a3:e6:3f:56:ea:70:51:91:2b:2e:94:a8:46:57:49:61:f3:6a:
         2e:c9:56:ff:01:38:60:b6:5b:46:df:1a:34:86:8c:8b:50:22:
         c6:9d:87:c2:47:85:4d:17:56:99:41:69:27:14:68:3d:73:d2:
         81:d6:5a:f2:44:7c:33:b8:92:b1:32:aa:29:60:83:01:5a:18:
         84:21:98:93:01:85:6a:e8:32:6a:2e:0e:b8:99:b3:62:a7:c1:
         15:e8:f2:3a:14:1a:20:38:95:2c:09:00:1a:44:7c:3c:db:f3:
         70:63:bf:68:19:0f:9f:fe:39:c7:c0:66:de:53:5c:08:1f:c1:
         98:9d:ef:21:ca:8a:c3:06:25:61:6b:e6:f5:fb:ad:ab:1a:84:
         dc:4d:a1:b0:98:e1:d9:00:05:85:06:2d:e2:65:c2:0a:d7:ae:
         59:3f:02:f3:3a:76:8f:32:c9:db:e6:96:1b:17:94:60:f2:52:
         93:8a:04:a5:80:dd:c2:b4:91:fa:ce:a3:7b:b5:42:b3:00:62:
         71:2f:9c:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfINCWTi7u3n9uryL1jHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjMzYTY2NzAxYjJjNjVkNDk3ZmUwNGM1YmEzMDFiZGNl
Y2I2ZDkwHhcNMjYwOTIxMTUwMTI5WhcNMjYwOTIyMTUwMTI5WjAzMTEwLwYDVQQD
EygxM2E5MjNiN2M2YjU4NTc2YTc2MzBjYTk0NGI5MmI2OTU5NTkwOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm3+ZJHZxI+XMMp9e4PKnNEZBJej
JLtnQrLm2RfIClrsX/ibEHuYjIHH/izeMPprAOcTAtKtNc1qG5ILCosjELkqORRc
PyG41I7OaAvQwaSjOnaprqdUJUyLw+xkj7UTBMuezDvS1Djq+sJanVlQOhqBa8a+
RvfSXeuL7K4uy0Zki6gbE6p6ktY0kJZHB1IhLPovFUGTqj+XU8zs4dE/cse0hGiK
xmsTrNrkOrJRiGveeUcGhf59mdaRBH7YNCWijx+bux7BKsBeIwioakC0/WN58k9X
DMqq833WeZLflisd/5JARjYpysNVBTgicO7pjO5w/N2k5eUTJNLXu9PxbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOpI7fGtYV2p2MMqUS5K2lZWQjOMB8GA1UdIwQY
MBaAFAWzOmZwGyxl1Jf+BMW6MBvc7LbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTct
MWJmOTRhMjUwMTRlLzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTctMWJmOTRhMjUwMTRl
LzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1907Pil
tRbZAE++iUyppbhl6H+2gFo6xymt80hOecFHEpqd1cpm7BadTxvoQYf7Qj0a9ecK
o+Y/VupwUZErLpSoRldJYfNqLslW/wE4YLZbRt8aNIaMi1Aixp2HwkeFTRdWmUFp
JxRoPXPSgdZa8kR8M7iSsTKqKWCDAVoYhCGYkwGFaugyai4OuJmzYqfBFejyOhQa
IDiVLAkAGkR8PNvzcGO/aBkPn/45x8Bm3lNcCB/BmJ3vIcqKwwYlYWvm9futqxqE
3E2hsJjh2QAFhQYt4mXCCteuWT8C8zp2jzLJ2+aWGxeUYPJSk4oEpYDdwrSR+s6j
e7VCswBicS+cug==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:32:43 2026 by rpki-client