Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File:                     BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier:          u0qDvZpkxB+poj3x1KjUzr4Xr8vBO4iRK0UHfSiZ1lo=
Subject key identifier:   45:E6:1F:1E:D4:CC:DE:30:6F:D9:2E:26:43:96:EA:44:A3:33:23:F6
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer:       /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial:       019E30057371DA83D0EB774E2BC93424215C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 09:02:03 +0000
Manifest this update:     Sat 16 May 2026 09:02:03 +0000
Manifest next update:     Sun 17 May 2026 09:02:03 +0000
Files and hashes:         1: 0k6yeX0L5XdNUvHFP70s6xMMn5M.roa (hash: WcJmVDT/EJf9CPgLP7/H/uUbqnwpeSXGEJKY3KaRY/o=)
                          2: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: kQdeHdSiRyqy0Z36kePQNjNH5vby+LU7S28d8f08GY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:73:71:da:83:d0:eb:77:4e:2b:c9:34:24:21:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
        Validity
            Not Before: May 16 09:02:03 2026 GMT
            Not After : May 17 09:02:03 2026 GMT
        Subject: CN=45e61f1ed4ccde306fd92e264396ea44a33323f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:ec:5d:0c:92:19:3a:2f:04:5a:2d:99:53:
                    1c:1e:bf:7c:3c:b9:6a:18:ff:d0:37:4f:3f:07:53:
                    78:c9:31:d0:3c:7c:51:2d:41:39:f9:24:d5:87:6a:
                    cb:a6:68:15:ba:25:86:e3:a5:49:02:ff:04:30:f2:
                    7c:ff:8e:12:ca:f7:4d:1f:43:1e:69:da:03:0e:45:
                    9f:6e:76:ba:d5:a0:fb:7f:c3:e7:7c:8d:13:dc:03:
                    d6:39:d9:0c:f2:e5:41:9d:b3:06:e5:8a:70:01:a2:
                    09:3c:b3:33:ac:12:72:ce:f3:34:f3:d8:66:ed:c7:
                    fc:1d:3a:53:a9:a4:fb:ca:8c:70:0b:28:20:81:e3:
                    48:5b:84:6a:55:61:ed:1d:11:3c:f3:8b:5d:10:7a:
                    90:9e:57:5e:4d:34:6c:eb:69:41:2e:15:46:95:4d:
                    68:68:bd:32:32:68:3e:27:70:cc:ef:ab:17:9e:26:
                    10:81:c6:55:d5:6c:79:32:26:d9:71:86:b4:3b:07:
                    49:98:8e:ad:90:26:c7:83:74:b4:f5:fa:a1:9b:0d:
                    7a:3b:3c:06:36:49:c1:ee:9d:b9:b8:fd:bc:58:67:
                    18:10:da:1b:78:7d:76:0a:95:1b:fa:cf:93:eb:b4:
                    e2:6d:70:05:da:1d:ef:24:04:96:63:4e:25:be:ca:
                    50:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E6:1F:1E:D4:CC:DE:30:6F:D9:2E:26:43:96:EA:44:A3:33:23:F6
            X509v3 Authority Key Identifier:
                keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:43:ce:32:23:b4:f2:62:14:28:51:47:7a:7c:f2:11:6a:8a:
         da:32:87:16:70:de:36:57:a8:f1:af:1a:8f:d7:2a:03:1b:51:
         68:b7:91:53:b0:8c:30:25:eb:7c:6d:e6:9e:cd:aa:1e:7e:35:
         b5:d1:01:58:ab:1a:b9:ef:52:57:a8:6c:e5:e9:64:ce:c7:7c:
         bc:7b:33:c4:62:53:d6:d2:eb:bc:b4:af:68:52:63:f8:97:d6:
         92:20:65:78:74:62:82:c8:2a:b2:ee:38:79:2a:c1:20:ad:7f:
         19:62:93:46:f0:51:f9:1a:b4:3a:ce:d9:a7:6d:d5:d0:df:f6:
         aa:8a:19:9a:d4:0b:2a:24:e8:6f:14:90:7d:83:f9:8e:2d:b9:
         7a:66:f7:d9:57:3a:52:ed:a0:6e:f1:9d:56:0c:be:42:84:b5:
         a1:61:8a:b3:5f:c7:f9:99:91:38:1e:cc:77:29:5a:60:c5:a0:
         ab:18:5a:4b:0e:a7:2a:b0:ca:c1:5f:ca:85:49:fd:3a:a5:39:
         7c:e3:14:07:da:4e:28:b6:03:ba:71:fd:00:16:40:dc:21:b8:
         f0:f3:b6:f0:3a:ee:87:14:80:97:ca:34:ab:73:45:d2:0a:3b:
         02:0b:67:94:7d:6d:43:b3:1d:42:aa:41:c4:f0:6a:63:a4:13:
         a0:7d:09:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBXNx2oPQ63dOK8k0JCFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZWVlM2YwOWFiZWI2YTQzNGU5OTA1Y2JjMGIwMDAwNDRl
NzlkZTcwHhcNMjYwNTE2MDkwMjAzWhcNMjYwNTE3MDkwMjAzWjAzMTEwLwYDVQQD
Eyg0NWU2MWYxZWQ0Y2NkZTMwNmZkOTJlMjY0Mzk2ZWE0NGEzMzMyM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5/sXQySGTovBFotmVMcHr98PLlq
GP/QN08/B1N4yTHQPHxRLUE5+STVh2rLpmgVuiWG46VJAv8EMPJ8/44SyvdNH0Me
adoDDkWfbna61aD7f8PnfI0T3APWOdkM8uVBnbMG5YpwAaIJPLMzrBJyzvM089hm
7cf8HTpTqaT7yoxwCygggeNIW4RqVWHtHRE884tdEHqQnldeTTRs62lBLhVGlU1o
aL0yMmg+J3DM76sXniYQgcZV1Wx5MibZcYa0OwdJmI6tkCbHg3S09fqhmw16OzwG
NknB7p25uP28WGcYENobeH12CpUb+s+T67TibXAF2h3vJASWY04lvspQnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXmHx7UzN4wb9kuJkOW6kSjMyP2MB8GA1UdIwQY
MBaAFATu4/CavrakNOmQXLwLAABE553nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk83ajhKcS10cVEwNlpCY3ZBc0FBRVRubmVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80YzI4MzUtYmE3Mi00MWVhLWJiZDUt
NDgxM2Q4NTUwMmQ3LzEvQk83ajhKcS10cVEwNlpCY3ZBc0FBRVRubmVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80YzI4MzUtYmE3Mi00MWVhLWJiZDUtNDgxM2Q4NTUwMmQ3
LzEvQk83ajhKcS10cVEwNlpCY3ZBc0FBRVRubmVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUPOMiO0
8mIUKFFHenzyEWqK2jKHFnDeNleo8a8aj9cqAxtRaLeRU7CMMCXrfG3mns2qHn41
tdEBWKsaue9SV6hs5elkzsd8vHszxGJT1tLrvLSvaFJj+JfWkiBleHRigsgqsu44
eSrBIK1/GWKTRvBR+Rq0Os7Zp23V0N/2qooZmtQLKiTobxSQfYP5ji25emb32Vc6
Uu2gbvGdVgy+QoS1oWGKs1/H+ZmROB7MdylaYMWgqxhaSw6nKrDKwV/KhUn9OqU5
fOMUB9pOKLYDunH9ABZA3CG48PO28DruhxSAl8o0q3NF0go7AgtnlH1tQ7MdQqpB
xPBqY6QToH0Jyw==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:07 2026 by rpki-client