Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File:                     B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier:          TxCnl1QKsuhh4eSCWXD2jHbimT6orY4bX05MQjNFWu4=
Subject key identifier:   BB:80:63:B7:65:D6:90:54:A9:B9:9D:5D:61:1C:B8:9E:C7:EB:55:70
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer:       /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial:       01A1DEDE7EBA359E80813EF3F0797F4031D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number:          11B8
Signing time:             Sun 15 Nov 2026 11:01:25 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:25 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:25 +0000
Files and hashes:         1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: pUfBo6CH7TcfC2ryAjJOa1JTEn8Pxbr4dX8Geto9VGQ=)
                          2: l9fKwFyrFQX0Hu9a5zckE9kVhmM.roa (hash: iDegQAjVriQALUYA5V4FoFzaFt+77MbzNuGJvgXPxkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:7e:ba:35:9e:80:81:3e:f3:f0:79:7f:40:31:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
        Validity
            Not Before: Nov 15 11:01:25 2026 GMT
            Not After : Nov 16 11:01:25 2026 GMT
        Subject: CN=bb8063b765d69054a9b99d5d611cb89ec7eb5570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:da:f9:1b:df:6a:06:19:99:a5:c5:8f:64:
                    be:fd:c8:3f:24:90:bd:bc:a2:ff:1e:c6:0d:e7:e4:
                    95:c0:68:bc:cc:f5:3a:4d:53:95:0c:f7:de:3e:9a:
                    fd:48:bd:b1:39:49:dd:c3:41:66:98:25:a6:45:af:
                    65:36:17:e8:db:28:df:c8:70:7c:b6:65:d2:35:00:
                    39:24:ad:28:bd:67:8e:64:83:a8:47:fd:c3:99:6c:
                    d2:cc:96:97:49:96:68:50:f9:a1:48:2b:d8:d7:84:
                    74:15:55:8e:a7:00:29:c8:a6:ae:00:2b:e9:e6:1e:
                    00:d0:d9:a9:28:70:3b:a9:70:cc:c8:82:e1:14:0f:
                    bb:72:b3:cf:8a:22:a8:45:bc:aa:dd:c2:03:a2:ae:
                    6c:fa:8d:c7:a3:29:6c:90:b2:55:f4:39:24:2d:68:
                    7b:20:65:6c:03:ca:7d:63:a4:c6:c5:5a:64:c2:9d:
                    a0:62:47:fc:7a:3a:c0:ef:4b:39:93:11:67:80:7b:
                    37:49:ab:ac:00:1a:25:dc:72:66:4e:88:2b:77:66:
                    1f:a6:ed:29:ed:0e:81:f5:61:6e:ef:7b:43:a4:49:
                    17:03:5b:73:cb:07:2e:ac:c4:93:48:65:cf:55:65:
                    f0:3f:f1:65:e9:e2:db:35:4b:98:19:18:d1:cc:cc:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:80:63:B7:65:D6:90:54:A9:B9:9D:5D:61:1C:B8:9E:C7:EB:55:70
            X509v3 Authority Key Identifier:
                keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c4:c8:cd:99:4c:5f:3d:d1:4b:de:20:8f:0e:a1:fa:7a:f4:
         76:26:f2:18:db:3f:3b:19:88:ce:2b:a3:95:62:5a:88:9e:c3:
         e5:13:d8:b9:19:c1:e3:9a:b1:c5:61:0c:c4:3f:7f:28:50:cd:
         e8:6f:39:2f:2f:e4:70:a9:1a:4c:70:39:4e:e1:cf:cc:82:bc:
         c5:97:26:1f:c5:e4:30:91:b2:cd:dd:bc:71:e5:45:1d:be:fe:
         ce:d9:0c:89:4d:27:a6:02:5e:4d:5c:b5:e7:ff:a9:c5:a2:7f:
         29:bd:90:f2:80:7e:a5:27:34:ac:1f:ba:67:fa:ef:d6:5a:86:
         7e:87:df:cf:64:d3:7b:31:81:f7:b5:82:3e:32:cc:0b:0b:ee:
         4f:7c:77:ae:13:a3:0d:c0:2b:bd:28:29:41:31:15:7b:da:53:
         a0:3f:5e:61:e6:92:38:80:ec:cf:99:88:b2:66:ef:c8:ab:8b:
         c4:3a:f5:29:0b:3e:60:62:dd:11:7f:bd:43:3f:c4:15:75:49:
         d9:7a:09:75:8d:7f:89:b1:82:5d:fe:eb:5f:4e:93:b7:a9:bc:
         6a:ab:94:3b:09:c0:fa:f5:94:eb:65:bd:d2:e0:f0:a0:99:eb:
         39:13:7a:d0:41:9c:dc:ac:5c:ad:04:02:fe:d1:13:8f:93:78:
         a9:a1:7e:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3n66NZ6AgT7z8Hl/QDHYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NzQzMDA2YThlOWQwZTFiZjIwNTU3YWQ1OTY0MDc4ZmU4
MTI2ZWYwHhcNMjYxMTE1MTEwMTI1WhcNMjYxMTE2MTEwMTI1WjAzMTEwLwYDVQQD
EyhiYjgwNjNiNzY1ZDY5MDU0YTliOTlkNWQ2MTFjYjg5ZWM3ZWI1NTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG3a+RvfagYZmaXFj2S+/cg/JJC9
vKL/HsYN5+SVwGi8zPU6TVOVDPfePpr9SL2xOUndw0FmmCWmRa9lNhfo2yjfyHB8
tmXSNQA5JK0ovWeOZIOoR/3DmWzSzJaXSZZoUPmhSCvY14R0FVWOpwApyKauACvp
5h4A0NmpKHA7qXDMyILhFA+7crPPiiKoRbyq3cIDoq5s+o3HoylskLJV9DkkLWh7
IGVsA8p9Y6TGxVpkwp2gYkf8ejrA70s5kxFngHs3SausABol3HJmTogrd2Yfpu0p
7Q6B9WFu73tDpEkXA1tzywcurMSTSGXPVWXwP/Fl6eLbNUuYGRjRzMxYUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuAY7dl1pBUqbmdXWEcuJ7H61VwMB8GA1UdIwQY
MBaAFAd0MAao6dDhvyBVetWWQHj+gSbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82NzljYWItMmNmNC00MGE1LWI1ZWUt
MjQ2NjQ2ZTlkYjFlLzEvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82NzljYWItMmNmNC00MGE1LWI1ZWUtMjQ2NjQ2ZTlkYjFl
LzEvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8TIzZlM
Xz3RS94gjw6h+nr0dibyGNs/OxmIziujlWJaiJ7D5RPYuRnB45qxxWEMxD9/KFDN
6G85Ly/kcKkaTHA5TuHPzIK8xZcmH8XkMJGyzd28ceVFHb7+ztkMiU0npgJeTVy1
5/+pxaJ/Kb2Q8oB+pSc0rB+6Z/rv1lqGfoffz2TTezGB97WCPjLMCwvuT3x3rhOj
DcArvSgpQTEVe9pToD9eYeaSOIDsz5mIsmbvyKuLxDr1KQs+YGLdEX+9Qz/EFXVJ
2XoJdY1/ibGCXf7rX06Tt6m8aquUOwnA+vWU62W90uDwoJnrORN60EGc3KxcrQQC
/tETj5N4qaF+4w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:27:57 2026 by rpki-client