Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File:                     Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier:          xH0asRfuTLt3bWsYxAbNH0H5KRHPOiMDk6OmlqG7XD8=
Subject key identifier:   C8:59:ED:48:75:33:E3:20:77:A9:D4:82:12:B2:19:91:17:38:44:BB
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer:       /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial:       019E30E01E23DBAE527CC5D7E6E544E6EC70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 13:00:54 +0000
Manifest this update:     Sat 16 May 2026 13:00:54 +0000
Manifest next update:     Sun 17 May 2026 13:00:54 +0000
Files and hashes:         1: 5u4yfVKLM7CuktVTwTBtBI5l6mE.roa (hash: uO9x72nmQmlknEm+PYx41lDnMkhqVv8VEIukGO6B+TE=)
                          2: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: qawC15osZOnYV684k5PqOoNUxHe47chQlYlnsqmF0u4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:1e:23:db:ae:52:7c:c5:d7:e6:e5:44:e6:ec:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
        Validity
            Not Before: May 16 13:00:54 2026 GMT
            Not After : May 17 13:00:54 2026 GMT
        Subject: CN=c859ed487533e32077a9d48212b21991173844bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:30:ec:33:3e:66:28:fc:59:1c:b9:67:de:
                    59:35:d1:02:65:65:3c:65:68:a3:a0:40:ef:45:95:
                    47:9c:57:d7:21:19:3a:f3:60:e1:64:95:f4:a6:8c:
                    6a:a2:ae:7f:e3:c4:fa:dd:55:8c:e3:be:6d:ce:b8:
                    ec:49:30:56:2d:6a:de:e9:03:0b:52:d1:19:a0:02:
                    76:85:2d:a1:40:dd:30:75:81:d7:98:87:da:ed:ee:
                    d8:4c:cc:3f:88:9d:26:81:b1:e4:77:f6:ea:cd:9d:
                    8a:fa:39:db:1a:33:c3:6d:81:35:af:d6:0a:b7:3d:
                    0f:d5:7a:70:99:2f:b4:3c:71:23:35:5b:73:4a:a5:
                    bb:2f:9c:80:d2:26:dc:7e:f0:3f:ab:52:ea:b3:1b:
                    c7:74:d3:4d:b7:ac:3e:2f:80:37:64:bd:d4:f5:83:
                    87:c9:bb:13:66:85:d2:b2:33:42:1e:34:e3:93:3c:
                    80:c0:c5:ec:82:0a:09:b4:47:80:c6:93:f8:98:d5:
                    47:f7:cf:a9:85:47:28:d3:90:88:0e:66:84:a2:65:
                    db:21:fd:24:de:fa:a1:99:0f:8b:13:5b:ac:4d:0f:
                    9d:34:08:61:29:d1:bf:bb:51:c1:f1:0e:da:33:99:
                    67:49:e9:0c:99:6b:55:21:7f:7b:54:07:c7:3a:58:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:59:ED:48:75:33:E3:20:77:A9:D4:82:12:B2:19:91:17:38:44:BB
            X509v3 Authority Key Identifier:
                keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:72:c0:ba:0f:1c:a6:d2:71:6a:9f:d9:6d:7d:64:e2:bc:de:
         7d:d1:04:51:05:d7:a3:9c:e1:16:35:01:69:6f:af:e2:8d:6e:
         a5:b4:26:4d:fe:af:31:b0:c4:6e:44:f3:32:57:f4:ab:4c:a7:
         5a:59:e8:f2:c7:28:82:2f:e2:05:e6:06:55:97:9b:c6:77:d8:
         05:fe:54:21:77:db:b7:f5:57:c3:fe:c0:be:fd:34:3f:5b:2c:
         ec:5c:36:5a:a0:a3:5f:76:ea:47:18:3a:80:0e:d6:b0:e9:9f:
         19:24:2a:48:ec:d4:1f:8c:ad:11:1c:f6:00:8b:e8:04:a0:ff:
         98:64:66:c1:b9:5a:86:40:dd:2a:6e:6f:c6:5f:54:b2:85:d7:
         45:b8:ec:44:21:c9:83:f8:f4:f1:bc:2b:03:94:4b:ca:0c:2f:
         98:f3:97:02:26:a1:b2:91:72:99:f9:9c:5f:bf:0b:bb:d3:42:
         dd:1d:65:ba:c6:82:40:01:93:a5:e8:55:2f:9d:87:9e:44:dc:
         54:41:0e:a9:87:d1:54:a8:c4:4a:70:8e:89:ac:21:2b:88:a2:
         48:34:cb:00:4e:c7:50:37:95:a1:1f:28:0a:4d:71:49:9a:1d:
         6f:b9:8f:fa:f1:ed:5f:a3:cf:c9:a6:e8:c4:fe:cd:29:c6:12:
         6c:44:b3:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4B4j265SfMXX5uVE5uxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGYxY2EzYjY2NWYyNGNiZTEwMWNmYzJmMzgzNDRkYThi
MTc2OGQwHhcNMjYwNTE2MTMwMDU0WhcNMjYwNTE3MTMwMDU0WjAzMTEwLwYDVQQD
EyhjODU5ZWQ0ODc1MzNlMzIwNzdhOWQ0ODIxMmIyMTk5MTE3Mzg0NGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxsw7DM+Zij8WRy5Z95ZNdECZWU8
ZWijoEDvRZVHnFfXIRk682DhZJX0poxqoq5/48T63VWM475tzrjsSTBWLWre6QML
UtEZoAJ2hS2hQN0wdYHXmIfa7e7YTMw/iJ0mgbHkd/bqzZ2K+jnbGjPDbYE1r9YK
tz0P1XpwmS+0PHEjNVtzSqW7L5yA0ibcfvA/q1LqsxvHdNNNt6w+L4A3ZL3U9YOH
ybsTZoXSsjNCHjTjkzyAwMXsggoJtEeAxpP4mNVH98+phUco05CIDmaEomXbIf0k
3vqhmQ+LE1usTQ+dNAhhKdG/u1HB8Q7aM5lnSekMmWtVIX97VAfHOlh8+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhZ7Uh1M+Mgd6nUghKyGZEXOES7MB8GA1UdIwQY
MBaAFAXfHKO2ZfJMvhAc/C84NE2osXaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjct
ZDAyYWFmYjgzMmM0LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjctZDAyYWFmYjgzMmM0
LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXLAug8c
ptJxap/ZbX1k4rzefdEEUQXXo5zhFjUBaW+v4o1upbQmTf6vMbDEbkTzMlf0q0yn
Wlno8scogi/iBeYGVZebxnfYBf5UIXfbt/VXw/7Avv00P1ss7Fw2WqCjX3bqRxg6
gA7WsOmfGSQqSOzUH4ytERz2AIvoBKD/mGRmwblahkDdKm5vxl9UsoXXRbjsRCHJ
g/j08bwrA5RLygwvmPOXAiahspFymfmcX78Lu9NC3R1lusaCQAGTpehVL52HnkTc
VEEOqYfRVKjESnCOiawhK4iiSDTLAE7HUDeVoR8oCk1xSZodb7mP+vHtX6PPyabo
xP7NKcYSbESzlQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:13:26 2026 by rpki-client