Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File:                     BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier:          8mxxbIZXCfASj4OaytrMUHKp6tACNiBp1iPeCCJLwIM=
Subject key identifier:   D5:EB:76:0C:32:A8:CA:E2:AC:2C:27:F8:3A:0E:9C:A5:0B:9E:E8:AE
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer:       /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial:       019EAA53156EEECF52DDEC6CD74A32773983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number:          0C0C
Signing time:             Tue 09 Jun 2026 03:00:31 +0000
Manifest this update:     Tue 09 Jun 2026 03:00:31 +0000
Manifest next update:     Wed 10 Jun 2026 03:00:31 +0000
Files and hashes:         1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: gBoT3jwuMfeUMR93i3V+4j/5cifssJavM8AlMgELt2E=)
                          2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=)
                          3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 19:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:aa:53:15:6e:ee:cf:52:dd:ec:6c:d7:4a:32:77:39:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
        Validity
            Not Before: Jun  9 03:00:31 2026 GMT
            Not After : Jun 10 03:00:31 2026 GMT
        Subject: CN=d5eb760c32a8cae2ac2c27f83a0e9ca50b9ee8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:04:1b:49:ae:23:1a:bc:07:60:72:ed:a7:e4:
                    14:fc:00:60:6a:30:49:98:c0:6c:7d:08:92:5f:d1:
                    e8:39:74:58:0b:33:2c:ac:f7:0d:de:cf:25:f3:c7:
                    81:57:cc:58:0f:13:50:09:47:5e:6e:48:af:72:47:
                    f1:21:e2:65:cb:39:0d:59:fe:e9:13:c3:8f:0d:8e:
                    28:ab:db:78:0c:53:34:03:35:74:fd:96:67:01:c1:
                    ee:97:70:d5:28:5c:51:a6:e8:e6:99:d3:d2:37:76:
                    68:41:42:d5:bf:66:c0:34:f2:9e:29:38:9b:87:51:
                    db:bc:3e:03:af:56:d6:34:79:67:24:0b:c4:08:0a:
                    57:ea:b1:8c:45:e5:69:27:6e:cb:91:b6:75:2a:20:
                    56:2b:41:03:d8:d3:83:92:1c:f5:11:9f:6e:ad:1d:
                    23:2c:f5:61:6e:f4:6c:93:e1:37:53:d9:c7:1d:c3:
                    53:7e:6d:0d:90:3f:36:4f:1e:17:91:b6:c0:41:5e:
                    0f:32:62:59:d0:2b:be:5a:3d:6e:62:6d:41:11:27:
                    05:50:61:94:2e:b1:73:70:81:d7:10:fb:4c:de:07:
                    b6:6b:f6:f3:0f:5a:2d:04:02:d3:a5:31:02:07:60:
                    17:e3:38:c8:9d:27:99:0d:66:29:d7:3c:4a:26:61:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EB:76:0C:32:A8:CA:E2:AC:2C:27:F8:3A:0E:9C:A5:0B:9E:E8:AE
            X509v3 Authority Key Identifier:
                keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:af:d3:95:98:55:3c:3e:63:10:e0:2e:2c:31:86:67:bb:13:
         6c:b2:3a:82:26:ff:8f:45:6b:91:ce:c0:c7:5b:83:43:9b:80:
         3f:2d:21:a2:9a:cd:8f:c6:c3:91:2b:d0:9f:0a:18:b0:ea:36:
         e1:39:db:5e:1d:72:50:d2:b4:64:5b:be:3d:51:7d:8c:7f:da:
         1d:da:bc:76:57:bf:e9:9f:6c:8a:9b:0c:e5:54:f6:75:6e:b9:
         b1:c6:3c:9a:1b:f5:71:21:57:23:74:ba:6b:35:78:5c:d0:4a:
         6c:07:f7:fd:bf:47:f6:c2:d5:4c:d6:84:0e:e2:47:07:13:cd:
         47:e1:30:63:32:7d:97:05:9b:bd:55:33:24:be:f8:70:eb:c6:
         b2:3d:dc:2d:99:b2:86:97:64:56:9a:56:e1:2c:6a:44:f5:b5:
         65:9d:2d:88:c6:2c:97:a1:4a:d1:ea:67:0d:79:37:8c:24:16:
         2d:98:b4:fc:67:bc:d4:c8:fa:f2:80:9d:01:f5:2e:b8:73:4f:
         b8:42:02:bf:59:8b:12:62:0b:fd:85:b0:b3:da:a0:4b:07:05:
         7f:51:6f:4d:89:0d:94:bf:10:c3:65:fc:63:06:1b:6d:63:2c:
         0b:6e:4d:ad:e6:8f:44:f1:39:02:11:c4:3d:09:15:b6:a5:b1:
         91:92:f4:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6qUxVu7s9S3exs10oydzmDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjFmMjBmYjhhN2U2MzVkN2JjYzk0YzAwYmVkNzE3OWI3
NjA4ZjYwHhcNMjYwNjA5MDMwMDMxWhcNMjYwNjEwMDMwMDMxWjAzMTEwLwYDVQQD
EyhkNWViNzYwYzMyYThjYWUyYWMyYzI3ZjgzYTBlOWNhNTBiOWVlOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAQbSa4jGrwHYHLtp+QU/ABgajBJ
mMBsfQiSX9HoOXRYCzMsrPcN3s8l88eBV8xYDxNQCUdebkivckfxIeJlyzkNWf7p
E8OPDY4oq9t4DFM0AzV0/ZZnAcHul3DVKFxRpujmmdPSN3ZoQULVv2bANPKeKTib
h1HbvD4Dr1bWNHlnJAvECApX6rGMReVpJ27LkbZ1KiBWK0ED2NODkhz1EZ9urR0j
LPVhbvRsk+E3U9nHHcNTfm0NkD82Tx4XkbbAQV4PMmJZ0Cu+Wj1uYm1BEScFUGGU
LrFzcIHXEPtM3ge2a/bzD1otBALTpTECB2AX4zjInSeZDWYp1zxKJmFrTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXrdgwyqMrirCwn+DoOnKULnuiuMB8GA1UdIwQY
MBaAFAZh8g+4p+Y117zJTAC+1xebdgj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMt
YWQ4ZWRmZTVmMGY3LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMtYWQ4ZWRmZTVmMGY3
LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlq/TlZhV
PD5jEOAuLDGGZ7sTbLI6gib/j0Vrkc7Ax1uDQ5uAPy0hoprNj8bDkSvQnwoYsOo2
4TnbXh1yUNK0ZFu+PVF9jH/aHdq8dle/6Z9sipsM5VT2dW65scY8mhv1cSFXI3S6
azV4XNBKbAf3/b9H9sLVTNaEDuJHBxPNR+EwYzJ9lwWbvVUzJL74cOvGsj3cLZmy
hpdkVppW4SxqRPW1ZZ0tiMYsl6FK0epnDXk3jCQWLZi0/Ge81Mj68oCdAfUuuHNP
uEICv1mLEmIL/YWws9qgSwcFf1FvTYkNlL8Qw2X8YwYbbWMsC25NreaPRPE5AhHE
PQkVtqWxkZL0KA==
-----END CERTIFICATE-----
Generated at Tue Jun 9 04:51:27 2026 by rpki-client