Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File:                     Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier:          gktKAT0ilEKlTEfDDe+m82VOFSbNT2DGx/mfzVkviBU=
Subject key identifier:   43:E7:1F:B7:AD:AB:BB:99:2B:6F:70:D8:A5:3E:33:C4:CD:D0:E5:07
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer:       /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial:       019E30A94B1F69561C406F39CF4A42286057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number:          15EB
Signing time:             Sat 16 May 2026 12:01:01 +0000
Manifest this update:     Sat 16 May 2026 12:01:01 +0000
Manifest next update:     Sun 17 May 2026 12:01:01 +0000
Files and hashes:         1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: UhnQIq9JQTJjKUd9Jjkl/zIQzt8KH8d/phdzx6fr6rU=)
                          2: TM2u3nE4U4gt579zKk1egxcYwGw.roa (hash: XOA83pwjmnyrd8JcXEc6+qU+kfl85cy7kc2/rS23hZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:4b:1f:69:56:1c:40:6f:39:cf:4a:42:28:60:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
        Validity
            Not Before: May 16 12:01:01 2026 GMT
            Not After : May 17 12:01:01 2026 GMT
        Subject: CN=43e71fb7adabbb992b6f70d8a53e33c4cdd0e507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e2:d9:42:8d:f4:b4:04:f0:ca:c9:82:26:cd:
                    c2:35:51:5c:f9:02:41:a2:14:5b:87:0f:fc:f6:34:
                    f4:e3:e7:aa:c2:79:ad:2b:5a:e9:90:fc:9c:f9:cf:
                    4a:a8:6b:ac:28:fa:79:01:5e:29:5a:97:85:e7:c3:
                    ca:b7:25:3c:cf:e6:ce:e8:88:ac:22:6e:ab:a6:a3:
                    78:1d:5d:aa:ee:c8:33:27:88:c4:57:61:f5:60:26:
                    e5:e3:49:5f:f0:4a:6a:cc:86:95:d3:c1:3b:ea:ea:
                    d5:64:22:50:dd:fe:81:75:4f:30:0a:0e:9d:59:c2:
                    a1:aa:83:7b:3e:c6:f3:6c:6f:73:5f:fe:4f:b1:24:
                    b6:d0:74:4f:41:94:bf:5e:83:68:74:dd:3b:ce:7a:
                    32:0f:3a:d1:3d:74:5c:2a:f5:df:aa:63:e3:f6:b3:
                    69:7c:64:9f:1e:99:b7:d8:2a:7c:b3:c9:b5:c0:2a:
                    25:bb:f5:f4:db:d4:bf:68:ef:71:ec:5c:5a:98:8c:
                    b5:02:d8:56:dd:f2:02:cd:a5:8e:58:30:d9:42:7b:
                    44:94:ab:84:0b:f9:26:01:5a:ca:85:16:91:db:db:
                    a5:6d:f2:8c:ef:67:f8:6f:df:40:2c:79:9b:5b:ba:
                    49:c2:a4:86:84:17:93:d9:2a:21:19:1c:4e:99:e3:
                    7c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E7:1F:B7:AD:AB:BB:99:2B:6F:70:D8:A5:3E:33:C4:CD:D0:E5:07
            X509v3 Authority Key Identifier:
                keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:d2:7c:81:ba:b6:8c:15:2a:f1:ed:87:d5:d3:2d:c4:3a:f8:
         19:63:f0:c1:c5:96:ec:da:88:ac:b5:cd:f2:75:3d:20:60:19:
         b0:aa:fe:1e:18:22:7f:25:22:03:44:3b:33:7d:ab:8e:31:53:
         7d:a9:9d:3c:6f:41:3a:86:a3:d0:10:c5:d8:de:1b:73:e7:a8:
         d1:15:fc:fb:ad:3d:84:33:af:f5:26:5f:83:68:80:4e:29:02:
         f6:19:58:34:7b:2e:96:c1:c4:80:67:14:7c:be:29:3b:65:8c:
         07:c9:30:84:51:8e:90:a2:3d:5e:30:21:37:5d:e7:c1:98:80:
         f5:e5:56:30:68:e0:1e:cd:6a:18:25:c0:14:32:9f:1a:90:86:
         5a:1b:d5:6f:f9:2b:5e:2f:51:ba:27:98:8d:2d:a0:f5:1d:6e:
         c5:dc:21:ae:16:3b:03:dc:7d:80:40:24:1d:91:79:fc:a4:0a:
         30:8c:c1:26:3f:c0:4e:cd:35:9c:ea:63:bf:0d:91:18:55:fd:
         69:63:58:d3:a8:7f:98:f4:af:36:b5:3d:ea:75:c4:6f:75:bb:
         f9:4c:60:41:5d:2f:a0:db:51:7e:56:c7:69:7b:e3:d7:6c:b8:
         6a:7c:79:b7:ba:b6:4c:7a:07:47:70:d2:e4:cd:ae:7b:3d:23:
         b9:19:f6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:56 2026 by rpki-client