Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File:                     0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier:          1uNK1wQKHJBbui5vdD3HPdS7ec50iM8K8/0/SxhIfQU=
Subject key identifier:   59:1D:E7:63:2C:AE:89:C7:DF:FC:9F:46:0D:77:4E:54:6C:D3:A0:1C
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer:       /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial:       019E2994E8A5C716509801418257AE813A2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number:          11BF
Signing time:             Fri 15 May 2026 03:01:25 +0000
Manifest this update:     Fri 15 May 2026 03:01:25 +0000
Manifest next update:     Sat 16 May 2026 03:01:25 +0000
Files and hashes:         1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: yHz/vYySkv4Xe1RvP96hDE+YKUTZdY4LFXbhB37E6I4=)
                          2: 9gVKfPDu8oaxgCYhsIHGv4QIfWU.roa (hash: fllRN8SucuRDRWnVjdcisQzmvofCxZ5K6VMo5ZRY8Z0=)
                          3: YOp__Ry-NGpngn9AjDGoHEbjeCg.roa (hash: ON5r8fZJQGVj6wPi39Ya/7ATYu3d/0MWZ+FMIC4DzPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:94:e8:a5:c7:16:50:98:01:41:82:57:ae:81:3a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
        Validity
            Not Before: May 15 03:01:25 2026 GMT
            Not After : May 16 03:01:25 2026 GMT
        Subject: CN=591de7632cae89c7dffc9f460d774e546cd3a01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:46:24:c8:7c:1f:bc:9c:dc:62:fc:71:0a:
                    71:57:c7:a0:53:c0:d5:ea:24:69:ce:bf:1d:c4:69:
                    0e:c0:a3:06:5d:25:49:9a:dc:08:24:13:c5:d6:30:
                    7a:16:31:8b:5c:6c:b7:1f:6d:03:7e:f2:ef:d1:2f:
                    5d:ec:fa:7e:e4:b1:f1:1b:c9:e7:6c:9d:35:b6:cd:
                    f2:66:f2:eb:d5:8b:02:6b:2d:e0:3e:4d:6c:7d:aa:
                    d7:e5:2d:36:86:20:c2:27:fb:2f:0f:d1:1c:c9:7e:
                    60:92:03:7b:86:ea:05:b0:51:b2:c0:ac:36:61:e3:
                    66:cf:6b:46:3c:d6:4e:16:38:c8:5b:fe:e3:da:fc:
                    41:67:71:79:c2:32:ac:7a:f8:73:f1:c1:da:d8:44:
                    c8:3e:98:bd:3e:ca:b5:27:ec:8d:6d:b6:47:97:97:
                    1b:33:bc:ab:36:1b:57:39:28:b3:37:eb:9c:11:d6:
                    d4:6c:02:94:a3:cd:ff:4c:35:94:65:29:0f:13:5c:
                    6a:1b:a9:02:a4:e9:3d:19:c4:18:f0:a4:d1:a7:f4:
                    f5:0b:b6:84:a6:bf:de:aa:c0:38:25:a6:16:16:b3:
                    fe:1b:e7:d0:3a:24:a7:a2:87:9f:4a:b4:28:95:b8:
                    98:e3:8d:1d:7f:76:c5:db:78:a7:21:ce:ed:05:58:
                    dd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1D:E7:63:2C:AE:89:C7:DF:FC:9F:46:0D:77:4E:54:6C:D3:A0:1C
            X509v3 Authority Key Identifier:
                keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f4:15:9e:d4:15:2b:bc:34:70:df:8d:b3:09:6c:b2:fa:45:
         ae:e5:71:b1:7f:e2:ae:46:f9:26:ab:96:96:51:b3:9e:a3:34:
         16:ea:39:12:94:bf:8d:86:a2:80:1c:18:85:42:6a:0a:c5:1f:
         11:d4:62:43:10:23:40:fc:19:16:04:69:bb:41:cb:8f:14:40:
         9d:2b:34:87:e2:0c:33:5b:6c:d1:cc:21:e8:bf:aa:2e:52:13:
         31:f9:b8:25:5b:4c:1e:b9:df:04:23:91:1d:76:33:79:98:7a:
         19:9f:ed:ef:cc:1c:0a:09:a4:d8:6d:8b:9a:ed:ce:18:49:3e:
         7c:2d:96:01:fe:88:dc:5a:55:d2:5e:ad:1c:5a:9b:b6:33:ca:
         70:a6:7f:db:30:0d:33:8c:00:2a:93:67:a5:bf:6c:d3:18:cf:
         b2:73:db:4c:30:e3:bd:55:bf:0f:8a:ec:67:3e:31:51:dd:1d:
         16:54:e9:5a:16:ae:6b:7e:3c:db:09:2f:e7:27:b4:14:60:68:
         4f:1e:0c:97:5b:ac:15:9c:03:b7:de:ac:05:9c:0d:b7:57:a0:
         39:ac:ab:c3:4a:ba:e9:31:9e:96:9d:69:13:0f:c2:21:54:3c:
         df:da:8f:ce:16:34:88:db:1a:99:4a:f8:d0:47:cb:02:c4:0f:
         1c:10:2b:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4plOilxxZQmAFBgleugTosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDY4N2EzZWU2MzIyYjc1N2RlODFlN2Y1M2M1ZDMyZWVi
ZTMzYTYwHhcNMjYwNTE1MDMwMTI1WhcNMjYwNTE2MDMwMTI1WjAzMTEwLwYDVQQD
Eyg1OTFkZTc2MzJjYWU4OWM3ZGZmYzlmNDYwZDc3NGU1NDZjZDNhMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy09GJMh8H7yc3GL8cQpxV8egU8DV
6iRpzr8dxGkOwKMGXSVJmtwIJBPF1jB6FjGLXGy3H20DfvLv0S9d7Pp+5LHxG8nn
bJ01ts3yZvLr1YsCay3gPk1sfarX5S02hiDCJ/svD9EcyX5gkgN7huoFsFGywKw2
YeNmz2tGPNZOFjjIW/7j2vxBZ3F5wjKsevhz8cHa2ETIPpi9Psq1J+yNbbZHl5cb
M7yrNhtXOSizN+ucEdbUbAKUo83/TDWUZSkPE1xqG6kCpOk9GcQY8KTRp/T1C7aE
pr/eqsA4JaYWFrP+G+fQOiSnooefSrQolbiY440df3bF23inIc7tBVjdUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkd52MsronH3/yfRg13TlRs06AcMB8GA1UdIwQY
MBaAFNBGh6PuYyK3V96B5/U8XTLuvjOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZmRkMTktNmJiYS00ZGM5LWFmYzYt
OTdiZTQyNmEyMzM0LzEvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iZmRkMTktNmJiYS00ZGM5LWFmYzYtOTdiZTQyNmEyMzM0
LzEvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfQVntQV
K7w0cN+NswlssvpFruVxsX/irkb5JquWllGznqM0Fuo5EpS/jYaigBwYhUJqCsUf
EdRiQxAjQPwZFgRpu0HLjxRAnSs0h+IMM1ts0cwh6L+qLlITMfm4JVtMHrnfBCOR
HXYzeZh6GZ/t78wcCgmk2G2Lmu3OGEk+fC2WAf6I3FpV0l6tHFqbtjPKcKZ/2zAN
M4wAKpNnpb9s0xjPsnPbTDDjvVW/D4rsZz4xUd0dFlTpWhaua3482wkv5ye0FGBo
Tx4Ml1usFZwDt96sBZwNt1egOayrw0q66TGelp1pEw/CIVQ839qPzhY0iNsamUr4
0EfLAsQPHBArzA==
-----END CERTIFICATE-----
Generated at Fri May 15 06:58:59 2026 by rpki-client