Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
File:                     B3M_xjuPGIDlwK9rRkPR4yGB16U.mft (raw, json)
Hash identifier:          mtqYtkltWBQOg+CmyB7nrD30gKFtOmbDlZdcyoG7kn0=
Subject key identifier:   20:45:86:09:72:4A:0B:7B:F2:F4:BB:06:24:57:A4:A2:27:16:5F:67
Authority key identifier: 07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
Certificate issuer:       /CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Certificate serial:       01A0D917ABECC97829EB1F82BE14EB558A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
Manifest number:          1A70
Signing time:             Fri 25 Sep 2026 15:03:22 +0000
Manifest this update:     Fri 25 Sep 2026 15:03:22 +0000
Manifest next update:     Sat 26 Sep 2026 15:03:22 +0000
Files and hashes:         1: B3M_xjuPGIDlwK9rRkPR4yGB16U.crl (hash: dUriA8HoHlsCN/wgH01Mpx629YuDxjLqOnA/sX0wrss=)
                          2: MM5bwtQVjNMLa24HAAsYzVkMO-0.roa (hash: PyAylfGi7oxHc9wTlMze4kzyfLTmAD3thM2tfRQ1RLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:17:ab:ec:c9:78:29:eb:1f:82:be:14:eb:55:8a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
        Validity
            Not Before: Sep 25 15:03:22 2026 GMT
            Not After : Sep 26 15:03:22 2026 GMT
        Subject: CN=20458609724a0b7bf2f4bb062457a4a227165f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:2f:a1:06:5e:d9:30:b9:f0:22:81:5b:a5:
                    4e:b6:da:da:4c:1c:31:49:c8:f8:ca:96:d1:57:36:
                    94:10:27:62:66:5f:93:29:25:36:ef:3d:83:b2:98:
                    bf:1d:2e:6e:5d:08:00:2c:2d:14:4e:c9:26:7d:b9:
                    5c:0e:b1:b1:95:d3:af:ab:e4:bf:3e:36:8c:d5:cf:
                    5c:a5:9f:74:b5:0f:65:da:68:ed:e3:72:be:90:ea:
                    5f:bd:08:26:24:9a:1d:70:af:17:54:28:02:98:73:
                    c4:34:fc:f7:ab:c2:44:42:73:f6:8a:30:d7:b2:2b:
                    cf:a1:09:73:6f:ab:e5:c8:07:77:44:70:30:89:f7:
                    25:ce:0b:2b:c8:39:a8:0b:79:7b:29:0b:d5:55:98:
                    75:d7:25:2b:97:82:60:cc:9e:f6:a1:05:e9:09:0b:
                    d5:c3:5c:00:1a:f5:6b:0d:dc:d3:04:a7:61:21:73:
                    0c:03:7c:50:00:b4:1a:be:1b:f9:40:00:24:65:76:
                    e1:df:c9:c1:64:db:12:86:c9:39:3f:80:13:c1:5c:
                    9a:dc:76:6b:14:cb:5f:e9:cb:a3:ad:fa:0e:c4:b7:
                    46:7c:3d:f0:f3:52:ab:9d:b0:cf:3d:40:9d:2b:7b:
                    ff:bc:03:6e:a8:ae:36:9e:09:42:6f:72:25:b1:eb:
                    bd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:45:86:09:72:4A:0B:7B:F2:F4:BB:06:24:57:A4:A2:27:16:5F:67
            X509v3 Authority Key Identifier:
                keyid:07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6a:e7:6f:94:9b:48:81:2a:e9:c2:ad:98:22:c4:ed:26:6c:
         f9:28:cd:01:15:86:3e:f6:a6:8e:96:63:29:5a:c8:a7:43:7a:
         ce:01:6b:aa:6d:b3:f0:00:e8:5a:1c:e1:65:ea:14:af:cd:f6:
         f2:d8:2e:95:97:81:f5:92:4f:72:08:05:e0:78:97:3d:8d:35:
         0a:55:43:48:40:2a:d5:65:01:f8:3a:36:86:6b:6d:e3:a6:48:
         73:9e:72:85:3b:08:ea:0c:d7:8a:b7:13:2c:e1:90:5e:6f:70:
         6f:a0:79:30:ad:28:02:92:7f:79:57:00:26:d3:6c:70:4e:1f:
         b9:ef:21:fa:90:95:71:b3:fe:c2:50:53:db:b1:0b:ce:17:5f:
         da:61:1d:05:8f:ac:82:2c:8f:32:2e:ad:99:c4:9f:ce:45:eb:
         37:19:c6:84:97:7e:54:54:4e:57:fd:31:5e:16:39:76:f4:2a:
         71:e2:b8:d1:9a:12:70:d1:26:f6:13:f0:fa:fb:c0:cf:10:bd:
         f2:0c:a9:67:41:99:e2:e3:b1:90:0f:3c:6e:9b:d3:03:f6:be:
         66:f7:84:e9:60:82:14:e8:b4:74:3f:94:13:2f:22:4e:72:b6:
         97:7b:55:79:5f:2a:de:67:e3:21:32:e8:cb:de:05:bb:c4:98:
         ff:d1:a4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:45:49 2026 by rpki-client