Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File:                     1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier:          04eL/a4ddv2Hm/HetobGmpPjyGugAEq3MWFXrCgKjIQ=
Subject key identifier:   EB:CD:31:0D:01:35:96:1C:2A:0D:95:BC:13:8E:E7:53:FC:9F:5F:35
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer:       /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial:       019E2F97795169BDD64739E670F545B9E956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number:          0EEA
Signing time:             Sat 16 May 2026 07:01:56 +0000
Manifest this update:     Sat 16 May 2026 07:01:56 +0000
Manifest next update:     Sun 17 May 2026 07:01:56 +0000
Files and hashes:         1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: 9LVis8ORJfp8ewtXnXmkPmE160a9BuLo45dbECTOeP0=)
                          2: qLRwkd2YTe3ugw9mUTb_30rZm1U.roa (hash: RlmstRhxEpTkCl9P39u47GrFJRHW47YR8wbbC8CphMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:79:51:69:bd:d6:47:39:e6:70:f5:45:b9:e9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
        Validity
            Not Before: May 16 07:01:56 2026 GMT
            Not After : May 17 07:01:56 2026 GMT
        Subject: CN=ebcd310d0135961c2a0d95bc138ee753fc9f5f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:43:1f:8c:99:44:de:e0:f6:f9:e5:6f:3a:
                    63:53:2e:93:16:be:4b:ad:d0:5a:f9:1f:f5:69:db:
                    5e:84:18:49:5c:8d:81:99:48:3e:10:e9:7e:1c:cb:
                    07:91:d6:0a:06:f9:c2:19:28:17:d6:d8:cf:dd:24:
                    0b:80:58:fb:5e:c3:ea:18:a9:00:59:d8:22:02:f1:
                    b2:cc:16:9c:04:fb:fc:6d:93:f0:ac:df:8d:36:98:
                    64:d6:b4:9f:b0:ef:2c:ca:8c:4a:16:ea:19:32:72:
                    cb:cc:af:fd:8f:dc:23:98:22:6a:9a:f0:7f:66:65:
                    ef:e8:7f:a0:0e:6d:b5:18:16:73:6c:ff:ca:73:ac:
                    01:c0:80:96:e7:bf:1a:7b:11:1b:70:57:1d:f7:30:
                    fb:95:8a:fa:fd:d1:aa:cc:bf:63:7c:e1:12:91:c5:
                    d2:3b:90:5f:ed:d7:e5:a7:6c:42:02:13:66:88:2c:
                    a6:c3:1e:ec:34:0d:96:89:51:85:ac:e3:70:b8:df:
                    e0:33:40:c1:99:71:60:f1:29:fc:53:23:fc:34:b9:
                    0d:3d:2f:a3:f2:c8:8d:ad:28:88:26:8a:a4:b9:84:
                    08:1c:18:ea:ca:ef:6e:46:52:27:17:ca:5d:c5:5c:
                    59:46:69:e4:df:46:be:f6:20:f8:f9:74:ba:2a:9c:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CD:31:0D:01:35:96:1C:2A:0D:95:BC:13:8E:E7:53:FC:9F:5F:35
            X509v3 Authority Key Identifier:
                keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:17:e4:10:19:2f:16:6d:52:34:9c:79:1d:0c:a7:14:f6:3b:
         92:18:82:8e:87:7d:c3:62:b7:be:d5:d4:a0:fd:52:b2:f5:7e:
         79:e9:13:fe:40:5c:b4:dc:01:dd:f0:37:78:b6:90:07:03:85:
         03:bc:3e:49:75:97:05:ef:4e:be:7b:66:15:a3:92:32:69:86:
         fc:fc:41:49:5b:49:dd:33:e6:bd:b8:42:83:e4:0f:17:27:02:
         79:4d:e4:71:e9:6e:b3:4c:55:2d:18:74:13:8c:97:de:41:38:
         96:4c:b3:83:1d:25:49:c6:51:5e:dd:77:dd:db:ec:8a:a8:5c:
         00:e9:42:51:96:f1:b7:f9:3c:fb:e3:23:d8:f9:d4:a0:b8:09:
         b5:35:0f:df:16:a6:b2:ff:30:9c:32:27:b2:63:5f:b9:1d:58:
         8d:83:5a:6d:79:11:ab:2c:17:f3:42:f0:7c:48:58:d7:0f:54:
         ae:4e:64:dc:0c:e2:8c:06:8c:6a:99:72:0e:c4:d8:44:22:6e:
         18:31:1a:62:58:8a:be:8c:9b:76:d2:9b:00:40:64:7b:db:be:
         0c:6c:7e:22:ea:d7:a0:02:26:76:10:01:f1:01:ef:7d:d7:25:
         05:04:a4:65:b9:c6:a5:91:3f:e0:0f:86:36:35:49:85:1b:35:
         78:2c:c1:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vl3lRab3WRznmcPVFuelWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjgwMTgwYjQwZDU4NWI3MzY2NTg3ZGZiNWRlN2JmMzA3
Nzg0M2UwHhcNMjYwNTE2MDcwMTU2WhcNMjYwNTE3MDcwMTU2WjAzMTEwLwYDVQQD
EyhlYmNkMzEwZDAxMzU5NjFjMmEwZDk1YmMxMzhlZTc1M2ZjOWY1ZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud1DH4yZRN7g9vnlbzpjUy6TFr5L
rdBa+R/1adtehBhJXI2BmUg+EOl+HMsHkdYKBvnCGSgX1tjP3SQLgFj7XsPqGKkA
WdgiAvGyzBacBPv8bZPwrN+NNphk1rSfsO8syoxKFuoZMnLLzK/9j9wjmCJqmvB/
ZmXv6H+gDm21GBZzbP/Kc6wBwICW578aexEbcFcd9zD7lYr6/dGqzL9jfOESkcXS
O5Bf7dflp2xCAhNmiCymwx7sNA2WiVGFrONwuN/gM0DBmXFg8Sn8UyP8NLkNPS+j
8siNrSiIJoqkuYQIHBjqyu9uRlInF8pdxVxZRmnk30a+9iD4+XS6KpzLtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvNMQ0BNZYcKg2VvBOO51P8n181MB8GA1UdIwQY
MBaAFNW4AYC0DVhbc2ZYfftd578wd4Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYt
MzE0MTFkOTE1NzZhLzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYtMzE0MTFkOTE1NzZh
LzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhfkEBkv
Fm1SNJx5HQynFPY7khiCjod9w2K3vtXUoP1SsvV+eekT/kBctNwB3fA3eLaQBwOF
A7w+SXWXBe9OvntmFaOSMmmG/PxBSVtJ3TPmvbhCg+QPFycCeU3kcelus0xVLRh0
E4yX3kE4lkyzgx0lScZRXt133dvsiqhcAOlCUZbxt/k8++Mj2PnUoLgJtTUP3xam
sv8wnDInsmNfuR1YjYNabXkRqywX80LwfEhY1w9Urk5k3AzijAaMaplyDsTYRCJu
GDEaYliKvoybdtKbAEBke9u+DGx+IurXoAImdhAB8QHvfdclBQSkZbnGpZE/4A+G
NjVJhRs1eCzBdg==
-----END CERTIFICATE-----
Generated at Sat May 16 16:27:09 2026 by rpki-client