Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File:                     bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier:          SKxE/5HTPZ9wC6DrSGto122e9VEQpvf+iqqLzJz+brI=
Subject key identifier:   0B:86:16:6B:6E:3A:0D:C3:31:25:1F:3F:38:89:3A:D4:F3:F6:2B:38
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer:       /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial:       019FF8DA25F43A154977302C046D4F017DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number:          0657
Signing time:             Thu 13 Aug 2026 02:01:13 +0000
Manifest this update:     Thu 13 Aug 2026 02:01:13 +0000
Manifest next update:     Fri 14 Aug 2026 02:01:13 +0000
Files and hashes:         1: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: zyyIMSDvolI8/Y3J4728qeeIyl8nnNNpzlyXRX+U3uY=)
                          2: zLQM5UGUZQZaDaXLLIq2Cs9lTG4.roa (hash: lEMGpphC2f316K3X8TeGMMDyruycSyCxjomy+Oc5l4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:da:25:f4:3a:15:49:77:30:2c:04:6d:4f:01:7d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
        Validity
            Not Before: Aug 13 02:01:13 2026 GMT
            Not After : Aug 14 02:01:13 2026 GMT
        Subject: CN=0b86166b6e3a0dc331251f3f38893ad4f3f62b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:7d:26:78:f4:45:9c:d0:18:2d:9b:e0:92:
                    67:af:aa:6e:0c:80:2d:e4:a2:f9:f4:25:dc:da:af:
                    f9:a5:20:b3:a4:85:bf:16:3a:13:84:e5:36:c8:12:
                    e5:3e:ff:df:20:b4:08:5f:43:8e:d8:15:c3:68:da:
                    32:e7:15:f3:99:30:c4:2c:3b:26:66:39:c7:83:70:
                    53:da:73:e5:e8:13:50:18:3b:72:01:11:b6:3a:94:
                    62:f2:6b:e7:c3:7a:3c:0f:bb:4a:ac:69:f0:94:24:
                    18:d4:6b:d3:35:1d:73:59:4f:2b:de:c5:1e:6b:a1:
                    c9:be:ac:05:e7:bc:f8:6c:a4:97:49:48:c7:62:a4:
                    3c:e7:dd:08:84:95:a4:bb:13:af:af:73:8b:ec:a8:
                    bd:ee:2b:cc:00:7a:19:0c:11:e7:a6:77:80:06:e3:
                    55:23:98:39:35:4e:2f:f9:2f:61:19:3e:c0:90:d3:
                    61:ec:b0:58:c4:5c:d6:5c:60:46:be:47:6a:16:81:
                    bd:c9:7e:32:de:55:9f:8a:d9:85:49:d0:f6:2c:be:
                    7e:5c:8e:3c:c3:11:6a:61:bb:34:d3:c0:2a:b5:e8:
                    1b:b4:f3:e2:19:36:3e:1c:8b:2d:4b:dd:b8:26:e2:
                    ca:9b:7c:05:32:6d:fc:04:d3:b1:35:b0:40:58:d9:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:86:16:6B:6E:3A:0D:C3:31:25:1F:3F:38:89:3A:D4:F3:F6:2B:38
            X509v3 Authority Key Identifier:
                keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:22:e7:3f:2b:e7:30:0d:fc:61:be:42:72:dd:7e:9c:2a:c3:
         87:4d:f3:85:16:5b:58:1e:9c:b5:18:38:df:cc:37:30:07:d0:
         be:ed:b3:dc:82:8d:90:c0:56:2e:84:24:46:cb:d1:15:ce:32:
         e7:0c:b0:df:5a:43:0f:dd:68:66:71:b6:2e:b5:7d:60:94:9a:
         d6:69:f6:cb:3c:c0:e4:eb:77:57:46:c4:63:24:48:c8:e1:af:
         d2:8a:50:d2:72:6c:b1:48:81:e6:fe:5a:54:c1:04:87:f5:b4:
         8e:ce:0d:c2:00:27:99:4d:d7:8a:44:24:a9:a6:b9:e7:4f:26:
         07:79:9b:ef:b9:62:10:91:0d:26:fe:2d:fe:ff:49:09:d5:02:
         7e:7e:b3:f4:39:b0:09:a8:1a:e8:0c:0e:8e:8e:72:02:65:0d:
         36:b5:4a:bb:32:97:7d:3b:cf:3a:d2:97:cb:23:20:5f:c4:63:
         18:51:d2:6f:27:7d:e6:62:ac:81:65:a8:53:16:27:c2:c8:56:
         db:fb:7e:18:52:1e:e5:4b:43:ec:61:4f:4f:c2:61:d1:18:b6:
         f0:15:02:c8:bc:86:cc:5d:79:c4:3b:f3:fe:43:cb:a7:29:0a:
         0b:66:fe:93:5a:0b:80:2d:12:c4:8b:bd:c1:5f:75:36:63:42:
         71:34:2f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/42iX0OhVJdzAsBG1PAX2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYWU0YmIwNTEzOTgwYzg3ZjliYWM1OTI5NTJjMDk1Nzc3
YWMxMmUwHhcNMjYwODEzMDIwMTEzWhcNMjYwODE0MDIwMTEzWjAzMTEwLwYDVQQD
EygwYjg2MTY2YjZlM2EwZGMzMzEyNTFmM2YzODg5M2FkNGYzZjYyYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1N9Jnj0RZzQGC2b4JJnr6puDIAt
5KL59CXc2q/5pSCzpIW/FjoThOU2yBLlPv/fILQIX0OO2BXDaNoy5xXzmTDELDsm
ZjnHg3BT2nPl6BNQGDtyARG2OpRi8mvnw3o8D7tKrGnwlCQY1GvTNR1zWU8r3sUe
a6HJvqwF57z4bKSXSUjHYqQ8590IhJWkuxOvr3OL7Ki97ivMAHoZDBHnpneABuNV
I5g5NU4v+S9hGT7AkNNh7LBYxFzWXGBGvkdqFoG9yX4y3lWfitmFSdD2LL5+XI48
wxFqYbs008AqtegbtPPiGTY+HIstS924JuLKm3wFMm38BNOxNbBAWNkjSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuGFmtuOg3DMSUfPziJOtTz9is4MB8GA1UdIwQY
MBaAFG6uS7BROYDIf5usWSlSwJV3esEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQt
NGNlNjIzMWYyYWQ5LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQtNGNlNjIzMWYyYWQ5
LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCLnPyvn
MA38Yb5Cct1+nCrDh03zhRZbWB6ctRg438w3MAfQvu2z3IKNkMBWLoQkRsvRFc4y
5wyw31pDD91oZnG2LrV9YJSa1mn2yzzA5Ot3V0bEYyRIyOGv0opQ0nJssUiB5v5a
VMEEh/W0js4NwgAnmU3XikQkqaa5508mB3mb77liEJENJv4t/v9JCdUCfn6z9Dmw
Caga6AwOjo5yAmUNNrVKuzKXfTvPOtKXyyMgX8RjGFHSbyd95mKsgWWoUxYnwshW
2/t+GFIe5UtD7GFPT8Jh0Ri28BUCyLyGzF15xDvz/kPLpykKC2b+k1oLgC0SxIu9
wV91NmNCcTQvaw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:57 2026 by rpki-client