Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File:                     BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier:          EYD9hBbG7fW0zWtJT2Bths2NvOsMhAgMvaxR//LL6q8=
Subject key identifier:   F9:D8:BD:33:B3:BC:CD:4F:6D:3F:B8:5D:C8:3B:E8:EF:F7:64:1E:0D
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer:       /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial:       019F18D6B0FD68A18F66A1959AB9D5C85DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number:          1999
Signing time:             Tue 30 Jun 2026 14:02:30 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:30 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:30 +0000
Files and hashes:         1: 3rkjwwginUfLartcn5VoY9PgC_E.roa (hash: Nn/SgK0GWp70Grm4pzV4xOWCunqMV5me8PRwpUORXuM=)
                          2: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: U9QBybkhRAVvvRDOFmhsuMsLvrE6amJtLDMN5X5s2lM=)
                          3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:b0:fd:68:a1:8f:66:a1:95:9a:b9:d5:c8:5d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
        Validity
            Not Before: Jun 30 14:02:30 2026 GMT
            Not After : Jul  1 14:02:30 2026 GMT
        Subject: CN=f9d8bd33b3bccd4f6d3fb85dc83be8eff7641e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:44:64:c1:eb:c7:a5:1f:07:58:44:ee:0e:
                    5c:32:31:44:3d:11:db:00:43:ac:db:34:fa:5d:ee:
                    68:44:96:6d:60:9e:08:e0:77:66:40:b0:4f:4c:8f:
                    32:96:c2:1f:74:78:f2:96:f4:70:3c:bb:8f:dc:b0:
                    d8:4d:15:78:70:16:c6:d6:87:d6:dd:46:81:4c:a6:
                    1a:e4:ac:45:30:1b:b3:78:cb:48:b4:cb:70:72:e0:
                    57:22:10:b0:ae:f6:88:14:af:7c:25:39:fb:5d:ce:
                    e4:35:8b:dc:da:9c:c9:52:be:31:8d:6b:68:e0:2e:
                    36:41:4b:87:42:13:a4:44:01:6e:46:e9:05:b8:a1:
                    2a:5a:74:88:6a:34:61:f6:e7:ad:2a:79:58:37:07:
                    e8:23:65:6d:0a:5c:32:84:00:5f:0e:a3:ea:8f:d2:
                    39:3c:ce:72:ba:dc:f7:21:f1:61:83:7c:09:f3:41:
                    a5:b8:84:7f:7e:60:de:a5:62:f5:2e:25:61:d0:c1:
                    b8:46:0e:2a:66:f8:86:1c:b0:fa:9f:2f:f8:ea:0e:
                    0c:1a:32:61:69:48:9b:d9:12:30:e4:09:9b:6c:86:
                    98:84:8c:54:4d:c3:53:67:bb:70:de:73:2c:1e:f7:
                    47:6c:29:3a:cf:3f:df:d7:f2:45:2f:a1:84:df:75:
                    5c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D8:BD:33:B3:BC:CD:4F:6D:3F:B8:5D:C8:3B:E8:EF:F7:64:1E:0D
            X509v3 Authority Key Identifier:
                keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:bf:e4:2a:56:37:a1:37:e4:45:a0:ce:60:26:a9:6a:6a:f3:
         d3:38:2a:e7:f2:7b:c6:6a:26:19:84:b3:9b:3b:3a:3c:44:51:
         1c:c1:10:11:40:38:a9:f1:d6:9f:20:d7:78:6d:4d:8d:80:09:
         6d:42:04:2a:83:bd:ea:49:59:c9:6e:aa:7f:96:0e:ec:d7:32:
         e8:e4:0b:37:e0:10:50:74:2e:98:80:55:e8:b7:7c:f5:d8:d8:
         e7:f2:4f:88:11:35:18:a4:be:3d:c4:0d:41:03:af:d1:dc:72:
         1f:17:ef:dc:12:f4:e7:6e:fe:30:cb:54:77:ad:58:4d:36:47:
         b9:e7:2e:ab:19:24:ce:fd:52:b3:34:5c:2e:5d:46:1f:7d:6f:
         2c:20:69:ba:46:d9:70:52:64:89:41:b6:1e:9e:6b:c6:c5:ae:
         df:18:ba:89:13:f5:5b:da:b1:3d:db:6f:bc:89:18:32:a3:b7:
         8a:64:0e:ef:18:6c:56:e3:11:86:2f:56:db:76:28:52:5b:95:
         9b:13:5d:ef:61:36:b8:e9:27:ce:b8:96:49:f5:47:06:30:db:
         86:49:d0:9f:03:ad:97:89:b5:52:f5:bc:c1:c9:d8:2d:b2:a2:
         f9:f9:7c:91:43:c5:6e:51:be:5b:38:6e:b2:3c:ca:6b:73:fd:
         53:0d:19:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1rD9aKGPZqGVmrnVyF3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmNkZTMxOWEzZGNhMmNmNjc0NGQyODgxY2E5MWI4M2Ri
OWJkZWEwHhcNMjYwNjMwMTQwMjMwWhcNMjYwNzAxMTQwMjMwWjAzMTEwLwYDVQQD
EyhmOWQ4YmQzM2IzYmNjZDRmNmQzZmI4NWRjODNiZThlZmY3NjQxZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt29EZMHrx6UfB1hE7g5cMjFEPRHb
AEOs2zT6Xe5oRJZtYJ4I4HdmQLBPTI8ylsIfdHjylvRwPLuP3LDYTRV4cBbG1ofW
3UaBTKYa5KxFMBuzeMtItMtwcuBXIhCwrvaIFK98JTn7Xc7kNYvc2pzJUr4xjWto
4C42QUuHQhOkRAFuRukFuKEqWnSIajRh9uetKnlYNwfoI2VtClwyhABfDqPqj9I5
PM5yutz3IfFhg3wJ80GluIR/fmDepWL1LiVh0MG4Rg4qZviGHLD6ny/46g4MGjJh
aUib2RIw5AmbbIaYhIxUTcNTZ7tw3nMsHvdHbCk6zz/f1/JFL6GE33Vc+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnYvTOzvM1PbT+4Xcg76O/3ZB4NMB8GA1UdIwQY
MBaAFAW83jGaPcos9nRNKIHKkbg9ub3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMt
Njg2N2M0YWUzMTYxLzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMtNjg2N2M0YWUzMTYx
LzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhL/kKlY3
oTfkRaDOYCapamrz0zgq5/J7xmomGYSzmzs6PERRHMEQEUA4qfHWnyDXeG1NjYAJ
bUIEKoO96klZyW6qf5YO7Ncy6OQLN+AQUHQumIBV6Ld89djY5/JPiBE1GKS+PcQN
QQOv0dxyHxfv3BL0527+MMtUd61YTTZHuecuqxkkzv1SszRcLl1GH31vLCBpukbZ
cFJkiUG2Hp5rxsWu3xi6iRP1W9qxPdtvvIkYMqO3imQO7xhsVuMRhi9W23YoUluV
mxNd72E2uOknzriWSfVHBjDbhknQnwOtl4m1UvW8wcnYLbKi+fl8kUPFblG+Wzhu
sjzKa3P9Uw0ZvA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:25:57 2026 by rpki-client