Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File:                     v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier:          10mb9E7Zb61XRMZpitq+YUNEqWatquJOlJyA/BcW9Ls=
Subject key identifier:   5C:0D:D1:AA:4E:F4:04:06:CD:8F:2F:5F:CD:8C:99:1B:A7:47:72:CA
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer:       /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial:       019E31BC5AB023AC89B724316EC394781DBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number:          10C1
Signing time:             Sat 16 May 2026 17:01:28 +0000
Manifest this update:     Sat 16 May 2026 17:01:28 +0000
Manifest next update:     Sun 17 May 2026 17:01:28 +0000
Files and hashes:         1: GQ7W42EsElCP2Qj0UZVoRC5t9II.roa (hash: /UuepQO5GWEwYKHxizYeXgs9DYCR+SoHKZBIXXza2Jk=)
                          2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: 4IGM1X6O3Z4/Ym0gpjqlZSJisU0jkmtDZdHSBHjhiTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 17:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bc:5a:b0:23:ac:89:b7:24:31:6e:c3:94:78:1d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
        Validity
            Not Before: May 16 17:01:28 2026 GMT
            Not After : May 17 17:01:28 2026 GMT
        Subject: CN=5c0dd1aa4ef40406cd8f2f5fcd8c991ba74772ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:81:b7:19:96:d4:7c:4a:55:f5:26:11:88:
                    b5:62:b1:a5:41:a4:f9:85:a2:56:c7:b8:36:89:d1:
                    ab:48:aa:ec:67:5b:0c:c3:7a:ed:4a:63:4c:e4:4e:
                    41:10:c1:09:f6:a3:57:f9:29:3d:5c:1e:fa:e2:ff:
                    b7:97:d7:b8:8b:64:bc:ca:d1:54:a6:b0:83:ff:b2:
                    2d:b0:45:50:e0:dc:85:12:65:e5:62:81:50:1f:4e:
                    4a:0f:84:de:eb:8c:9a:1c:00:b5:4a:0c:4d:2c:69:
                    86:d0:20:24:d7:67:76:28:fe:1e:04:9e:3a:32:90:
                    3a:0b:ec:b3:3c:fb:21:c3:5f:16:3c:cc:48:c8:60:
                    18:93:83:83:5a:de:ad:b8:3e:9d:9a:08:bf:f0:b4:
                    ea:02:3f:77:7a:e6:77:38:97:33:39:8a:50:f9:44:
                    14:46:6f:95:b6:70:94:b4:ec:ec:d2:ee:fe:79:d0:
                    60:0e:a9:c1:f6:72:bb:62:d2:9c:03:81:65:3b:22:
                    ac:82:25:59:25:1f:79:e7:5c:17:43:38:4c:91:b5:
                    8a:d2:cc:07:bf:4c:ed:7e:7e:18:14:8d:10:fd:9a:
                    0d:c9:5c:6b:ec:ba:70:21:e8:a2:7b:05:40:39:a2:
                    ab:d9:3f:44:3e:a0:b3:d7:70:91:cd:0f:7c:32:58:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0D:D1:AA:4E:F4:04:06:CD:8F:2F:5F:CD:8C:99:1B:A7:47:72:CA
            X509v3 Authority Key Identifier:
                keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a4:e9:a6:2b:67:3b:ab:2a:b2:63:4a:da:1a:33:46:7b:09:
         4f:a4:2a:d2:c4:3e:06:3c:30:67:ee:ee:d6:db:9a:4d:35:5d:
         55:ff:02:74:a0:42:07:05:f1:ea:c0:cb:e2:a0:14:56:09:2f:
         06:69:a7:d6:87:9e:20:6d:e5:17:18:c2:1a:03:b7:54:83:99:
         79:4b:cd:64:34:a6:41:9b:cb:fb:29:3b:63:ed:a1:ea:5a:29:
         b0:d2:8c:5f:ba:01:55:35:cd:04:15:f8:36:e3:df:98:87:be:
         55:c4:1d:9b:64:ba:91:db:80:bd:52:62:d8:6e:cd:4c:32:ec:
         ff:0f:a4:76:40:d9:18:70:b9:ce:ea:9f:eb:7e:48:ad:38:90:
         ff:20:d3:21:4f:6b:9c:3a:73:40:08:d8:75:64:ea:97:02:d6:
         07:60:2a:86:d9:a8:01:85:6a:e5:8a:59:98:20:8b:e0:1e:0f:
         8a:19:57:04:35:cb:1e:2f:55:68:44:27:8b:d3:09:97:73:ab:
         f1:b4:ed:a2:5f:56:c5:c9:d5:af:f5:35:f7:4b:bd:f5:af:5c:
         49:d7:ca:40:69:8a:90:e8:cb:c0:2b:d9:ae:cf:f2:40:d9:58:
         4d:59:eb:b4:9e:f5:67:f8:42:7c:a6:6a:bf:73:69:10:17:68:
         1e:aa:8a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xvFqwI6yJtyQxbsOUeB27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYTZlOTZmY2E3YTI3ODNjYjk3MjFlYmI2MmRlMWI1MzZj
MTYzYTkwHhcNMjYwNTE2MTcwMTI4WhcNMjYwNTE3MTcwMTI4WjAzMTEwLwYDVQQD
Eyg1YzBkZDFhYTRlZjQwNDA2Y2Q4ZjJmNWZjZDhjOTkxYmE3NDc3MmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyiBtxmW1HxKVfUmEYi1YrGlQaT5
haJWx7g2idGrSKrsZ1sMw3rtSmNM5E5BEMEJ9qNX+Sk9XB764v+3l9e4i2S8ytFU
prCD/7ItsEVQ4NyFEmXlYoFQH05KD4Te64yaHAC1SgxNLGmG0CAk12d2KP4eBJ46
MpA6C+yzPPshw18WPMxIyGAYk4ODWt6tuD6dmgi/8LTqAj93euZ3OJczOYpQ+UQU
Rm+VtnCUtOzs0u7+edBgDqnB9nK7YtKcA4FlOyKsgiVZJR9551wXQzhMkbWK0swH
v0ztfn4YFI0Q/ZoNyVxr7LpwIeiiewVAOaKr2T9EPqCz13CRzQ98MljgoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwN0apO9AQGzY8vX82MmRunR3LKMB8GA1UdIwQY
MBaAFL+m6W/KeieDy5ch67Yt4bU2wWOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NTZlYTQtZGU1YS00ZjExLTgyMjgt
ODdiZjZmZGJlMTkzLzEvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84NTZlYTQtZGU1YS00ZjExLTgyMjgtODdiZjZmZGJlMTkz
LzEvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6Tppitn
O6sqsmNK2hozRnsJT6Qq0sQ+BjwwZ+7u1tuaTTVdVf8CdKBCBwXx6sDL4qAUVgkv
Bmmn1oeeIG3lFxjCGgO3VIOZeUvNZDSmQZvL+yk7Y+2h6lopsNKMX7oBVTXNBBX4
NuPfmIe+VcQdm2S6kduAvVJi2G7NTDLs/w+kdkDZGHC5zuqf635IrTiQ/yDTIU9r
nDpzQAjYdWTqlwLWB2AqhtmoAYVq5YpZmCCL4B4PihlXBDXLHi9VaEQni9MJl3Or
8bTtol9WxcnVr/U190u99a9cSdfKQGmKkOjLwCvZrs/yQNlYTVnrtJ71Z/hCfKZq
v3NpEBdoHqqKqw==
-----END CERTIFICATE-----
Generated at Sun May 17 03:01:09 2026 by rpki-client