Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File:                     6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier:          SjhrG+YWQ3Y0YTxLwdYmZ6Juz03PcH6RPWHtAtpJ3A8=
Subject key identifier:   AD:71:0A:1A:D7:5D:1B:90:5E:B3:B7:10:3F:4E:3A:E3:D5:C1:51:DA
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer:       /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial:       019E30053DEF06DD065540B943ADE5A9E3CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number:          13BC
Signing time:             Sat 16 May 2026 09:01:50 +0000
Manifest this update:     Sat 16 May 2026 09:01:50 +0000
Manifest next update:     Sun 17 May 2026 09:01:50 +0000
Files and hashes:         1: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: s0Mx/ZYDNfWBnfNqFV49dhq/fX8aJ1Y5pwOrtscVoEY=)
                          2: geUvZA4ewTlG88hTMf-uSmrWhDQ.roa (hash: 2pWVSfUZrGtWyoII6+WIJ6jWbQPbI427Ph6KkMpwer0=)
                          3: jOZj1C3xGT3lCOMlr8mrVCcGvuU.roa (hash: xZbQL/ocO4+4b8f47kEc3Iqc1SZWkZf9JiGEHoGlE6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:3d:ef:06:dd:06:55:40:b9:43:ad:e5:a9:e3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
        Validity
            Not Before: May 16 09:01:50 2026 GMT
            Not After : May 17 09:01:50 2026 GMT
        Subject: CN=ad710a1ad75d1b905eb3b7103f4e3ae3d5c151da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5d:a7:e7:ae:cb:e1:28:42:42:9b:09:b8:80:
                    00:e5:4e:44:11:30:30:1b:ea:0c:98:41:e2:57:76:
                    4d:7a:2b:f1:fd:50:0a:1c:af:30:fc:81:91:ac:4e:
                    7f:32:54:86:df:53:80:43:9c:0d:4d:d2:32:be:08:
                    a2:eb:b0:a2:7f:2e:e8:f6:eb:37:43:8e:eb:6b:72:
                    e4:95:cc:10:3d:b4:ea:ee:5b:dc:f0:46:0b:2d:5f:
                    05:36:3e:cf:48:d1:46:3c:84:27:27:c5:02:1e:0c:
                    d3:72:61:c3:20:2c:9c:38:d0:f0:67:2d:a2:af:18:
                    f7:a4:5c:b5:39:e9:99:bb:77:a4:2d:a0:ed:1c:4a:
                    71:58:97:31:a7:ba:c6:7e:20:93:b8:9b:22:36:71:
                    6b:f4:5d:a2:da:ba:73:ba:1a:73:53:8e:50:f6:5e:
                    79:2c:4c:b4:52:ca:f0:dc:08:c6:1a:65:3e:89:e0:
                    ad:e7:27:db:45:0a:ea:d2:1d:a4:14:13:66:d0:e5:
                    7b:1f:4c:0d:69:30:ff:06:86:70:13:bf:62:ed:ba:
                    80:23:77:94:c9:9a:d2:41:ec:32:3a:46:85:25:0e:
                    92:7b:94:e5:24:5a:4c:bb:20:77:2e:92:d0:a3:8e:
                    e9:52:e1:85:ef:25:17:24:dc:9f:56:2d:06:18:d2:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:71:0A:1A:D7:5D:1B:90:5E:B3:B7:10:3F:4E:3A:E3:D5:C1:51:DA
            X509v3 Authority Key Identifier:
                keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:92:9d:fd:e7:1a:34:ce:fe:27:8b:0b:60:17:a8:ed:33:08:
         3c:03:f7:e8:b9:7a:1f:56:31:db:d9:be:44:84:6b:28:74:d3:
         5f:5e:c6:a9:19:1e:8c:74:f0:b2:ec:6e:b8:9b:2b:42:2a:4a:
         f7:e0:16:63:21:3e:cc:79:ab:d3:2f:1d:79:18:1d:51:77:bf:
         7c:f9:e2:8d:1d:b4:6a:e0:0e:db:50:f6:8f:33:74:a5:82:45:
         5c:8d:3d:26:d4:15:3a:b8:34:1a:ba:c6:05:a2:1e:06:1b:dc:
         3f:5d:fd:cf:63:68:2f:70:e9:13:c7:0b:7a:32:4c:07:66:a6:
         84:0b:61:19:37:35:bf:cf:40:08:27:7d:f0:19:9a:43:e9:80:
         7e:7f:f4:a9:f0:53:cd:1d:c3:35:f3:37:7a:77:11:38:69:70:
         1d:b7:77:a2:e3:99:b8:40:5d:af:33:ad:79:0c:ca:fa:9b:1b:
         c3:c1:f5:be:a7:ee:b7:39:a7:be:35:fc:ff:64:66:f2:0e:e1:
         48:92:25:51:bf:56:98:a0:58:44:5f:e3:e7:3b:b2:b3:99:f7:
         70:57:ed:8e:b6:ee:ac:5b:c2:d7:7e:3b:8d:62:ef:de:9f:22:
         51:6c:09:2a:8f:70:5f:1c:e7:d4:03:b0:65:e0:76:2a:cf:6c:
         a6:fc:ac:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBT3vBt0GVUC5Q63lqePOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MTU5YjY4Y2U0MTM2OGE5OWZlMTA3OWVjNTRjMzZjOWJi
MWJmOTQwHhcNMjYwNTE2MDkwMTUwWhcNMjYwNTE3MDkwMTUwWjAzMTEwLwYDVQQD
EyhhZDcxMGExYWQ3NWQxYjkwNWViM2I3MTAzZjRlM2FlM2Q1YzE1MWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF2n567L4ShCQpsJuIAA5U5EETAw
G+oMmEHiV3ZNeivx/VAKHK8w/IGRrE5/MlSG31OAQ5wNTdIyvgii67Cify7o9us3
Q47ra3LklcwQPbTq7lvc8EYLLV8FNj7PSNFGPIQnJ8UCHgzTcmHDICycONDwZy2i
rxj3pFy1OemZu3ekLaDtHEpxWJcxp7rGfiCTuJsiNnFr9F2i2rpzuhpzU45Q9l55
LEy0Usrw3AjGGmU+ieCt5yfbRQrq0h2kFBNm0OV7H0wNaTD/BoZwE79i7bqAI3eU
yZrSQewyOkaFJQ6Se5TlJFpMuyB3LpLQo47pUuGF7yUXJNyfVi0GGNL1fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1xChrXXRuQXrO3ED9OOuPVwVHaMB8GA1UdIwQY
MBaAFOgVm2jOQTaKmf4QeexUw2ybsb+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUt
MGYzYjZmOTY5OTBiLzEvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUtMGYzYjZmOTY5OTBi
LzEvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5Kd/eca
NM7+J4sLYBeo7TMIPAP36Ll6H1Yx29m+RIRrKHTTX17GqRkejHTwsuxuuJsrQipK
9+AWYyE+zHmr0y8deRgdUXe/fPnijR20auAO21D2jzN0pYJFXI09JtQVOrg0GrrG
BaIeBhvcP139z2NoL3DpE8cLejJMB2amhAthGTc1v89ACCd98BmaQ+mAfn/0qfBT
zR3DNfM3encROGlwHbd3ouOZuEBdrzOteQzK+psbw8H1vqfutzmnvjX8/2Rm8g7h
SJIlUb9WmKBYRF/j5zuys5n3cFftjrburFvC1347jWLv3p8iUWwJKo9wXxzn1AOw
ZeB2Ks9spvysdw==
-----END CERTIFICATE-----
Generated at Sat May 16 16:26:56 2026 by rpki-client