Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
File:                     BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json)
Hash identifier:          uEapQNcnaw9PGmWM6CpXtK9gRvwu9ceOoeTYHbUPzU8=
Subject key identifier:   A0:43:A0:7B:7C:C5:8B:7A:52:76:FB:D6:96:2E:CE:75:28:15:CF:5F
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Certificate issuer:       /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial:       019E30A8F85320EB46E2E404DFAFEB22F5AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
Manifest number:          17C5
Signing time:             Sat 16 May 2026 12:00:40 +0000
Manifest this update:     Sat 16 May 2026 12:00:40 +0000
Manifest next update:     Sun 17 May 2026 12:00:40 +0000
Files and hashes:         1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: 3B+xEpmSxi0qJaPorgTkCJCB/fQ+y50EgmoQi5F4kgA=)
                          2: lXZT8pMtuHAq6fKsihQHWu8qz5Q.roa (hash: CREAI2bwdzAy9LxcYU7uoPR2XEXd4CUfcjb+D4ZYEk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a8:f8:53:20:eb:46:e2:e4:04:df:af:eb:22:f5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
        Validity
            Not Before: May 16 12:00:40 2026 GMT
            Not After : May 17 12:00:40 2026 GMT
        Subject: CN=a043a07b7cc58b7a5276fbd6962ece752815cf5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:45:64:5b:f5:e1:9f:dc:3f:54:ab:98:c4:26:
                    74:60:79:42:2a:10:f6:85:b1:cd:bf:34:d0:2c:6d:
                    59:c3:45:9e:49:b3:3d:a9:88:10:c1:0e:27:41:fd:
                    9d:b7:bf:86:2d:31:d2:56:f6:5b:58:27:e6:3f:a1:
                    40:76:e9:af:b7:5c:d4:ae:68:ef:25:e0:98:1f:ae:
                    80:19:7b:98:4d:c7:45:d3:02:c9:38:bc:64:b7:25:
                    3a:1d:e1:74:2d:f6:66:a9:ec:80:84:c4:cb:16:73:
                    65:1b:ce:40:79:d4:11:42:15:3e:15:43:c1:b8:17:
                    69:44:d9:bd:9b:47:28:e0:54:78:90:8d:59:f8:51:
                    50:0f:25:86:c1:b2:8a:e2:56:39:b3:4a:ba:1a:46:
                    03:95:9d:a8:13:2d:9b:b1:6a:a0:d7:d9:9f:e7:5d:
                    8c:ce:9d:03:bc:2b:73:f5:b8:3b:7b:2d:88:c2:b0:
                    13:f3:20:37:fb:e4:0c:e1:94:06:9d:c8:8a:2c:67:
                    9d:0a:1a:f1:5f:5d:aa:b9:d7:be:4f:1e:e4:73:75:
                    22:cf:f0:35:1f:70:c4:ac:e1:2f:07:9a:70:6d:38:
                    4a:55:14:e3:c2:0c:ad:3a:e2:f8:19:c7:d4:04:2c:
                    ff:50:a6:a8:fb:7b:43:68:97:30:1e:46:da:4c:60:
                    4c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:43:A0:7B:7C:C5:8B:7A:52:76:FB:D6:96:2E:CE:75:28:15:CF:5F
            X509v3 Authority Key Identifier:
                keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:dc:37:ca:d7:86:64:f1:a9:30:c3:f2:b7:42:41:9a:32:e8:
         d1:65:b8:14:6d:21:bf:af:c3:cf:03:91:93:91:b5:db:cb:0c:
         e1:74:84:23:c1:8c:89:d9:c5:26:07:97:53:a8:35:36:ee:be:
         04:ce:05:e9:42:6e:78:aa:7f:a1:99:df:9e:71:1d:6b:74:bb:
         e3:72:d4:1e:8d:de:84:43:a8:07:16:9b:d1:d3:ba:7d:8c:f0:
         58:33:c0:a5:66:ac:98:0e:ba:6f:58:93:79:ab:b5:b9:de:d8:
         0a:05:d4:88:1b:b6:3b:48:87:98:58:29:04:6e:b5:c5:f4:15:
         fb:00:f4:6b:92:12:86:70:0b:55:e3:ad:bc:b8:9c:ab:1a:ab:
         36:f4:b9:3b:81:00:79:a5:86:b5:7f:a1:9b:03:0c:2d:a1:ef:
         08:d1:52:44:ad:1f:19:1d:b0:1b:a6:ae:f2:86:53:b3:bb:a4:
         d6:6b:ca:ec:3b:6c:fe:17:86:ec:5f:da:a0:84:5f:3d:be:02:
         18:ff:78:32:18:d4:0d:b7:ff:0e:25:a6:c9:9f:79:37:c5:25:
         70:86:fd:3f:1e:8e:6f:bb:c2:97:6e:dd:ff:72:d2:ad:d5:db:
         fb:89:c8:38:0c:38:2f:3d:23:7e:3c:1b:19:4d:03:84:c0:e9:
         12:52:60:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqPhTIOtG4uQE36/rIvWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDFlYTFiZjJhZGFhZGQzNmE2MjJlYjNlYTgzNWRjOWJi
NjgxOWIwHhcNMjYwNTE2MTIwMDQwWhcNMjYwNTE3MTIwMDQwWjAzMTEwLwYDVQQD
EyhhMDQzYTA3YjdjYzU4YjdhNTI3NmZiZDY5NjJlY2U3NTI4MTVjZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9kVkW/Xhn9w/VKuYxCZ0YHlCKhD2
hbHNvzTQLG1Zw0WeSbM9qYgQwQ4nQf2dt7+GLTHSVvZbWCfmP6FAdumvt1zUrmjv
JeCYH66AGXuYTcdF0wLJOLxktyU6HeF0LfZmqeyAhMTLFnNlG85AedQRQhU+FUPB
uBdpRNm9m0co4FR4kI1Z+FFQDyWGwbKK4lY5s0q6GkYDlZ2oEy2bsWqg19mf512M
zp0DvCtz9bg7ey2IwrAT8yA3++QM4ZQGnciKLGedChrxX12qude+Tx7kc3Uiz/A1
H3DErOEvB5pwbThKVRTjwgytOuL4GcfUBCz/UKao+3tDaJcwHkbaTGBM0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBDoHt8xYt6Unb71pYuznUoFc9fMB8GA1UdIwQY
MBaAFAVB6hvyrardNqYi6z6oNdybtoGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEt
MjRhZmNlZjRmM2Y1LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEtMjRhZmNlZjRmM2Y1
LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNw3yteG
ZPGpMMPyt0JBmjLo0WW4FG0hv6/DzwORk5G128sM4XSEI8GMidnFJgeXU6g1Nu6+
BM4F6UJueKp/oZnfnnEda3S743LUHo3ehEOoBxab0dO6fYzwWDPApWasmA66b1iT
eau1ud7YCgXUiBu2O0iHmFgpBG61xfQV+wD0a5IShnALVeOtvLicqxqrNvS5O4EA
eaWGtX+hmwMMLaHvCNFSRK0fGR2wG6au8oZTs7uk1mvK7Dts/heG7F/aoIRfPb4C
GP94MhjUDbf/DiWmyZ95N8UlcIb9Px6Ob7vCl27d/3LSrdXb+4nIOAw4Lz0jfjwb
GU0DhMDpElJg9Q==
-----END CERTIFICATE-----
Generated at Sat May 16 18:41:45 2026 by rpki-client