Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
File:                     BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft (raw, json)
Hash identifier:          jG6xrcpTGgnisQziRiflZ6VQBsOAjSPTzZbaMoiSjEI=
Subject key identifier:   C0:D0:58:CE:B8:7C:54:C9:23:4E:B3:C4:9B:81:AD:6F:FE:7D:3B:5F
Authority key identifier: 05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80
Certificate issuer:       /CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
Certificate serial:       01A1DEDEC8195D8462A29EAD8F8EB155FD0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
Manifest number:          02BC
Signing time:             Sun 15 Nov 2026 11:01:44 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:44 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:44 +0000
Files and hashes:         1: BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl (hash: DSfRaIJJ2wrsjvfiDJToEcmjrPBGmvO9O9JnD+pv/Jc=)
                          2: h0ixfocdnsQGjiEtpJ2Wa2m5vUk.roa (hash: SN3q0o2kLPMwCpmviBxq3GsO7Fw/63NA1TEskWpMh+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:c8:19:5d:84:62:a2:9e:ad:8f:8e:b1:55:fd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b0c77ffd6f00e82dbd9dada50118d413af2080
        Validity
            Not Before: Nov 15 11:01:44 2026 GMT
            Not After : Nov 16 11:01:44 2026 GMT
        Subject: CN=c0d058ceb87c54c9234eb3c49b81ad6ffe7d3b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:20:50:32:08:9e:38:81:2a:08:12:c3:2a:0a:
                    e9:67:28:96:2b:97:a3:e4:ea:07:a3:22:8e:63:cc:
                    82:82:12:cd:a6:93:c4:77:72:56:e9:e2:37:b2:df:
                    bd:cc:88:de:ed:ef:ef:a1:13:fd:91:ed:cb:05:10:
                    14:db:6f:b5:0f:a4:0d:30:20:f4:41:d8:47:fa:88:
                    bb:af:26:60:9a:55:cc:ee:22:ab:c9:ff:20:bd:1a:
                    85:36:fa:21:8c:db:62:61:e9:9a:75:4e:dc:49:35:
                    2f:9b:6e:27:e0:21:c8:fd:b0:9a:8d:1e:04:2e:74:
                    64:94:7c:43:fc:38:8e:29:0c:4d:f7:b0:b4:12:b2:
                    aa:5e:f3:ef:59:2e:d2:c8:06:6d:6d:67:a9:93:75:
                    f7:d4:9d:92:6b:7a:31:f3:50:6f:48:02:a0:56:94:
                    a1:26:24:1f:9f:0f:f9:1f:d1:8d:33:87:15:4c:d3:
                    0f:5d:72:06:05:cc:aa:7f:75:18:e4:1b:53:17:a5:
                    a0:9a:ba:f2:c8:a4:c6:97:e3:1b:59:13:a2:06:59:
                    bd:28:59:25:0e:64:8d:88:50:da:be:21:23:50:8e:
                    83:8f:27:c4:1d:bb:a9:cc:eb:d6:36:b5:fb:eb:ec:
                    80:49:80:9e:99:cd:0c:f7:34:d2:9a:ad:6f:ac:06:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D0:58:CE:B8:7C:54:C9:23:4E:B3:C4:9B:81:AD:6F:FE:7D:3B:5F
            X509v3 Authority Key Identifier:
                keyid:05:B0:C7:7F:FD:6F:00:E8:2D:BD:9D:AD:A5:01:18:D4:13:AF:20:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f68b26-f883-4559-8745-500d3b9cdcda/1/BbDHf_1vAOgtvZ2tpQEY1BOvIIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0e:8e:0f:13:24:b2:75:06:b8:af:9d:82:92:c6:7e:01:e6:
         cd:2d:75:7d:18:8d:d6:01:f4:fa:c9:77:99:68:0b:cb:f9:39:
         9e:fd:83:0e:3e:45:0f:0f:78:60:4a:95:77:1d:fe:4e:2d:20:
         7b:38:40:ec:bb:a5:94:ff:d8:0b:2d:64:5d:ec:81:c1:0f:fb:
         ae:c7:bc:87:1e:97:cc:17:c0:68:d1:d4:a2:a3:90:78:bb:38:
         72:b9:5e:64:25:ff:5b:66:49:e2:37:9f:df:23:34:fe:6c:ee:
         be:ab:e1:09:c2:3a:45:b6:a6:8e:fe:e5:39:5c:f0:b9:ee:a6:
         73:ba:d1:eb:5d:73:59:25:47:d3:a8:bf:57:97:1c:62:40:78:
         ac:6b:53:da:e8:25:2e:ff:7b:87:d8:75:97:19:2f:a1:42:30:
         a7:89:f4:4d:c3:c4:82:ab:bc:ef:6f:2f:7f:d5:b5:18:4d:43:
         64:ff:17:8c:c2:c2:d3:70:f3:96:f2:6c:c8:df:2d:00:f9:ae:
         9b:b7:eb:f0:53:f5:98:75:94:b0:f6:f2:ec:84:31:8a:01:ac:
         e9:33:62:a0:74:a8:03:48:4e:ef:0d:0c:d4:cd:16:46:8c:f8:
         f4:c7:a7:42:d1:72:26:ff:05:b9:86:8f:91:67:a1:c8:b6:6f:
         83:37:d9:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3sgZXYRiop6tj46xVf0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjBjNzdmZmQ2ZjAwZTgyZGJkOWRhZGE1MDExOGQ0MTNh
ZjIwODAwHhcNMjYxMTE1MTEwMTQ0WhcNMjYxMTE2MTEwMTQ0WjAzMTEwLwYDVQQD
EyhjMGQwNThjZWI4N2M1NGM5MjM0ZWIzYzQ5YjgxYWQ2ZmZlN2QzYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCBQMgieOIEqCBLDKgrpZyiWK5ej
5OoHoyKOY8yCghLNppPEd3JW6eI3st+9zIje7e/voRP9ke3LBRAU22+1D6QNMCD0
QdhH+oi7ryZgmlXM7iKryf8gvRqFNvohjNtiYemadU7cSTUvm24n4CHI/bCajR4E
LnRklHxD/DiOKQxN97C0ErKqXvPvWS7SyAZtbWepk3X31J2Sa3ox81BvSAKgVpSh
JiQfnw/5H9GNM4cVTNMPXXIGBcyqf3UY5BtTF6WgmrryyKTGl+MbWROiBlm9KFkl
DmSNiFDaviEjUI6DjyfEHbupzOvWNrX76+yASYCemc0M9zTSmq1vrAZI0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDQWM64fFTJI06zxJuBrW/+fTtfMB8GA1UdIwQY
MBaAFAWwx3/9bwDoLb2draUBGNQTryCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJESGZfMXZBT2d0dloydHBRRVkxQk92SUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9mNjhiMjYtZjg4My00NTU5LTg3NDUt
NTAwZDNiOWNkY2RhLzEvQmJESGZfMXZBT2d0dloydHBRRVkxQk92SUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9mNjhiMjYtZjg4My00NTU5LTg3NDUtNTAwZDNiOWNkY2Rh
LzEvQmJESGZfMXZBT2d0dloydHBRRVkxQk92SUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQ6ODxMk
snUGuK+dgpLGfgHmzS11fRiN1gH0+sl3mWgLy/k5nv2DDj5FDw94YEqVdx3+Ti0g
ezhA7LullP/YCy1kXeyBwQ/7rse8hx6XzBfAaNHUoqOQeLs4crleZCX/W2ZJ4jef
3yM0/mzuvqvhCcI6Rbamjv7lOVzwue6mc7rR611zWSVH06i/V5ccYkB4rGtT2ugl
Lv97h9h1lxkvoUIwp4n0TcPEgqu8728vf9W1GE1DZP8XjMLC03DzlvJsyN8tAPmu
m7fr8FP1mHWUsPby7IQxigGs6TNioHSoA0hO7w0M1M0WRoz49MenQtFyJv8FuYaP
kWehyLZvgzfZ6g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:40:54 2026 by rpki-client