Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File:                     bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier:          OyzajJb/QaHHaDx3d+ml85G6RTxAVOAd/04nVHxa7Rk=
Subject key identifier:   31:81:B7:7B:6E:BE:EE:4F:F0:C8:79:8B:46:A2:E1:2B:7A:5E:1E:00
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer:       /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial:       019F19B21098792CF008921A581DB6276D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number:          176D
Signing time:             Tue 30 Jun 2026 18:02:07 +0000
Manifest this update:     Tue 30 Jun 2026 18:02:07 +0000
Manifest next update:     Wed 01 Jul 2026 18:02:07 +0000
Files and hashes:         1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: LO5Cbmor0d/1oTff3flQ95b+R/w7p2HutyK40ubPGm8=)
                          2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
                          3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b2:10:98:79:2c:f0:08:92:1a:58:1d:b6:27:6d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
        Validity
            Not Before: Jun 30 18:02:07 2026 GMT
            Not After : Jul  1 18:02:07 2026 GMT
        Subject: CN=3181b77b6ebeee4ff0c8798b46a2e12b7a5e1e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:20:e3:5f:69:d7:17:dc:29:0c:29:3b:f5:
                    06:a8:6e:55:1c:9a:62:ef:01:df:08:33:da:9a:46:
                    db:d3:95:30:f9:0c:7f:40:a7:4a:1c:bb:dc:c6:20:
                    3a:1c:b0:53:d0:7e:4e:7b:be:87:a6:dc:38:b7:58:
                    a3:58:10:b8:7e:ad:91:03:60:43:12:4d:52:d6:71:
                    18:09:db:e0:93:d9:e9:16:91:d8:32:e1:77:8c:ae:
                    f7:a3:9f:d8:58:7a:d6:2f:46:e2:fe:5b:67:25:67:
                    54:b2:75:2b:e6:97:94:16:ad:e8:ef:5f:42:e3:8f:
                    ff:55:91:15:3a:ed:c1:0f:0b:b0:e3:02:c8:0b:97:
                    8a:8d:d2:cf:2e:44:55:a6:a4:53:2e:2d:3e:ff:e8:
                    20:69:36:c9:2b:ce:22:3d:9d:ab:12:0f:15:ca:51:
                    79:b1:f4:b2:61:25:2a:31:95:be:84:77:fd:79:6b:
                    84:a3:c8:79:dc:3a:77:48:33:61:a7:fc:52:01:44:
                    d9:f9:f9:42:ba:72:b9:4d:d3:d7:e1:0f:be:73:67:
                    16:69:de:44:3c:14:de:1e:ec:58:02:3a:c7:13:80:
                    37:28:e8:4d:67:cc:2a:76:5d:ed:cf:64:94:5f:17:
                    26:f2:24:43:cd:ca:d0:eb:8c:8c:16:b9:67:19:b2:
                    a1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:81:B7:7B:6E:BE:EE:4F:F0:C8:79:8B:46:A2:E1:2B:7A:5E:1E:00
            X509v3 Authority Key Identifier:
                keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c9:12:a2:fb:7a:5b:a1:f1:68:f7:17:86:5d:fe:8b:7e:25:
         a8:41:ce:84:4e:af:7e:55:1a:72:05:cf:8d:90:cc:5c:30:73:
         d8:d4:b4:37:e9:8c:4e:a6:db:78:3f:5a:59:f3:ea:9f:88:58:
         55:33:15:03:e5:bb:cd:99:16:3c:5f:a8:c5:e2:93:d0:b3:54:
         ca:32:15:b9:c7:9f:6f:55:f7:80:30:6a:4d:d9:01:d1:02:9a:
         17:a8:8f:27:4e:d9:68:47:8f:b1:02:6c:fb:2b:90:54:2a:8a:
         c5:f7:2b:5c:6b:fd:5a:90:a0:0e:1b:58:c2:98:d7:82:8b:4c:
         27:c3:29:33:59:c7:ab:58:1b:3c:c7:bc:9f:fd:60:5d:f9:d3:
         55:8e:6a:a6:6e:1d:fe:15:1e:14:cd:06:aa:79:07:39:71:1a:
         02:ff:72:23:0d:07:03:a1:c5:82:75:d4:90:07:e2:7b:67:f2:
         61:0d:06:a4:cb:33:66:24:ec:b8:73:7b:73:86:03:ca:b3:51:
         00:d1:26:b3:b8:bc:cb:00:7e:9b:85:43:d3:13:19:a9:7d:95:
         07:33:37:d0:78:6b:b4:a6:16:6f:46:91:a4:f4:27:bd:78:9e:
         d5:f4:ca:57:b6:4f:e6:f6:eb:06:8a:2a:be:a4:3e:73:6b:67:
         27:51:05:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZshCYeSzwCJIaWB22J21SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw
OWY0OTkwHhcNMjYwNjMwMTgwMjA3WhcNMjYwNzAxMTgwMjA3WjAzMTEwLwYDVQQD
EygzMTgxYjc3YjZlYmVlZTRmZjBjODc5OGI0NmEyZTEyYjdhNWUxZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfIg419p1xfcKQwpO/UGqG5VHJpi
7wHfCDPamkbb05Uw+Qx/QKdKHLvcxiA6HLBT0H5Oe76Hptw4t1ijWBC4fq2RA2BD
Ek1S1nEYCdvgk9npFpHYMuF3jK73o5/YWHrWL0bi/ltnJWdUsnUr5peUFq3o719C
44//VZEVOu3BDwuw4wLIC5eKjdLPLkRVpqRTLi0+/+ggaTbJK84iPZ2rEg8VylF5
sfSyYSUqMZW+hHf9eWuEo8h53Dp3SDNhp/xSAUTZ+flCunK5TdPX4Q++c2cWad5E
PBTeHuxYAjrHE4A3KOhNZ8wqdl3tz2SUXxcm8iRDzcrQ64yMFrlnGbKhKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGBt3tuvu5P8Mh5i0ai4St6Xh4AMB8GA1UdIwQY
MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt
NTJiOWU2YTE2MzUwLzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw
LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVskSovt6
W6HxaPcXhl3+i34lqEHOhE6vflUacgXPjZDMXDBz2NS0N+mMTqbbeD9aWfPqn4hY
VTMVA+W7zZkWPF+oxeKT0LNUyjIVucefb1X3gDBqTdkB0QKaF6iPJ07ZaEePsQJs
+yuQVCqKxfcrXGv9WpCgDhtYwpjXgotMJ8MpM1nHq1gbPMe8n/1gXfnTVY5qpm4d
/hUeFM0GqnkHOXEaAv9yIw0HA6HFgnXUkAfie2fyYQ0GpMszZiTsuHN7c4YDyrNR
ANEms7i8ywB+m4VD0xMZqX2VBzM30HhrtKYWb0aRpPQnvXie1fTKV7ZP5vbrBooq
vqQ+c2tnJ1EFcg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:23 2026 by rpki-client