Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          c3gS5aeRpwLI3CXN+2/vt1RJQpfKhFGqvogPUEZSc94=
Subject key identifier:   E6:BA:6B:EB:E0:A7:5A:1C:55:8A:78:3D:2F:7D:9A:B0:34:25:CF:8F
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       019E314E4D0A835E6F779A26A6B70B340736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          0602
Signing time:             Sat 16 May 2026 15:01:15 +0000
Manifest this update:     Sat 16 May 2026 15:01:15 +0000
Manifest next update:     Sun 17 May 2026 15:01:15 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: oMPGnylK1rOuAImjX63eZ0boQp0HBuulygNDfteWiEs=)
                          2: hcqZCPDvPSfZpsnstBmJSYUoG0E.roa (hash: 2rsfgP2jZdPy9F0m+kXCLPK5gqhv9//1FnvVgzLaUiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:4d:0a:83:5e:6f:77:9a:26:a6:b7:0b:34:07:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: May 16 15:01:15 2026 GMT
            Not After : May 17 15:01:15 2026 GMT
        Subject: CN=e6ba6bebe0a75a1c558a783d2f7d9ab03425cf8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:c3:65:ce:a6:63:10:e1:15:9e:f9:41:14:
                    0d:71:4d:c5:4a:e0:7e:7c:ef:5e:7d:89:9b:19:aa:
                    be:30:86:3d:90:6a:69:60:85:ef:06:b8:03:85:d0:
                    85:11:db:11:c2:96:d5:c8:5f:b6:5d:4e:dd:2b:80:
                    ec:f7:76:c7:64:a9:ae:e9:72:4d:95:a4:5e:a9:07:
                    aa:9d:d6:87:8d:ce:52:67:80:bc:b5:1d:88:8b:3e:
                    5d:e9:45:79:d2:98:c7:24:4e:ce:f0:7d:cb:88:eb:
                    06:51:26:60:4d:f5:fd:46:8a:67:71:68:48:7f:e9:
                    1b:57:78:16:2f:42:98:84:12:26:da:5e:5e:e0:04:
                    fd:48:cb:30:a0:6e:3f:54:0d:d1:ab:18:7d:a9:fb:
                    b0:c2:73:92:de:54:aa:02:1e:82:42:aa:eb:5e:8a:
                    6e:57:66:c6:d3:40:13:ec:d8:1b:ff:09:12:47:e3:
                    34:e7:03:d7:27:6d:86:b8:51:9e:31:89:68:6b:b1:
                    b7:be:96:50:3f:89:bd:9f:32:52:2a:24:b7:45:ff:
                    0d:fb:e0:f1:1c:9a:fc:a4:f9:b4:95:a9:b8:15:5e:
                    e6:2b:59:03:0e:45:52:13:be:0f:e4:ee:c5:34:c9:
                    85:9f:b7:40:8d:7e:aa:51:ff:1b:35:81:a8:0d:bf:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BA:6B:EB:E0:A7:5A:1C:55:8A:78:3D:2F:7D:9A:B0:34:25:CF:8F
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:50:41:72:a7:8b:55:e7:e8:5b:40:3b:14:92:e6:e7:0a:70:
         aa:b7:68:a1:03:e1:80:63:ec:6c:fb:5e:49:2b:da:e0:2a:96:
         f6:0d:df:1c:ae:87:be:a1:00:0f:6f:bb:44:6d:9d:ef:96:ba:
         b4:88:45:51:1c:3d:4c:d7:e9:bf:92:95:d9:df:08:14:d3:57:
         11:1c:d8:ff:cd:80:41:cc:63:ac:6f:f7:47:ff:29:6e:3c:cc:
         9d:1e:eb:e1:a4:0f:9d:ab:c5:59:19:82:05:a9:d1:c9:7e:f3:
         20:e4:02:16:4c:36:bb:27:bf:de:c3:1c:e6:5b:41:96:b7:55:
         18:42:42:9c:04:2f:52:bc:95:51:e8:8d:68:2c:ab:cb:f9:fd:
         b4:58:53:b1:d0:ee:2e:74:1d:97:9f:73:69:a3:17:1c:a0:81:
         ae:bb:1a:c3:e1:57:4a:a3:98:fd:b2:a2:dd:5d:70:c7:04:b9:
         28:21:94:ce:7a:6e:65:68:3a:91:07:8c:4d:96:84:ff:d5:6e:
         9f:96:c4:62:bb:a1:dd:8c:72:14:19:01:38:d9:a0:c7:bf:fa:
         e9:10:38:8e:fc:78:9c:ff:95:dc:e0:99:af:f4:d2:00:6e:72:
         fc:23:ef:eb:3b:7a:70:28:20:fc:78:4e:28:bc:15:13:93:3a:
         27:92:97:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTk0Kg15vd5omprcLNAc2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2U0ZGQyODgwMWIyODNiZjg1MWI1YzAwZDAwZWI4YjUx
NGE1NWEwHhcNMjYwNTE2MTUwMTE1WhcNMjYwNTE3MTUwMTE1WjAzMTEwLwYDVQQD
EyhlNmJhNmJlYmUwYTc1YTFjNTU4YTc4M2QyZjdkOWFiMDM0MjVjZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5vDZc6mYxDhFZ75QRQNcU3FSuB+
fO9efYmbGaq+MIY9kGppYIXvBrgDhdCFEdsRwpbVyF+2XU7dK4Ds93bHZKmu6XJN
laReqQeqndaHjc5SZ4C8tR2Iiz5d6UV50pjHJE7O8H3LiOsGUSZgTfX9RopncWhI
f+kbV3gWL0KYhBIm2l5e4AT9SMswoG4/VA3Rqxh9qfuwwnOS3lSqAh6CQqrrXopu
V2bG00AT7Ngb/wkSR+M05wPXJ22GuFGeMYloa7G3vpZQP4m9nzJSKiS3Rf8N++Dx
HJr8pPm0lam4FV7mK1kDDkVSE74P5O7FNMmFn7dAjX6qUf8bNYGoDb+z4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOa6a+vgp1ocVYp4PS99mrA0Jc+PMB8GA1UdIwQY
MBaAFAXOTdKIAbKDv4UbXADQDri1FKVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQt
ZjIyM2RhY2I2MDE3LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQtZjIyM2RhY2I2MDE3
LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFBBcqeL
VefoW0A7FJLm5wpwqrdooQPhgGPsbPteSSva4CqW9g3fHK6HvqEAD2+7RG2d75a6
tIhFURw9TNfpv5KV2d8IFNNXERzY/82AQcxjrG/3R/8pbjzMnR7r4aQPnavFWRmC
BanRyX7zIOQCFkw2uye/3sMc5ltBlrdVGEJCnAQvUryVUeiNaCyry/n9tFhTsdDu
LnQdl59zaaMXHKCBrrsaw+FXSqOY/bKi3V1wxwS5KCGUznpuZWg6kQeMTZaE/9Vu
n5bEYruh3YxyFBkBONmgx7/66RA4jvx4nP+V3OCZr/TSAG5y/CPv6zt6cCgg/HhO
KLwVE5M6J5KXdQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:56:13 2026 by rpki-client