Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
File:                     B6BIbcC0unMJA3iP8_P3yCSbkh8.mft (raw, json)
Hash identifier:          r+775+J7DVXcDmi6Ku50tpwMxGJmaVcoCDzseLjO+cU=
Subject key identifier:   B0:D9:F5:9E:25:1A:92:8B:75:C6:B1:28:F8:BA:28:BE:76:12:10:B7
Authority key identifier: 07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F
Certificate issuer:       /CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
Certificate serial:       019E3004BFEA3510314AFA2E51AD26D1E76F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 09:01:18 +0000
Manifest this update:     Sat 16 May 2026 09:01:18 +0000
Manifest next update:     Sun 17 May 2026 09:01:18 +0000
Files and hashes:         1: 3BHr6J86i1nd7sPGUlUbY2_YEaU.roa (hash: ta+5BOP0BbP5GuV/znqiWEjaRRUHuZbw6F434Y3PEM0=)
                          2: B6BIbcC0unMJA3iP8_P3yCSbkh8.crl (hash: AE7OYkr6yTVgqE5NbUed77CxsaVOzXqZ96oPP6y92Cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:bf:ea:35:10:31:4a:fa:2e:51:ad:26:d1:e7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
        Validity
            Not Before: May 16 09:01:18 2026 GMT
            Not After : May 17 09:01:18 2026 GMT
        Subject: CN=b0d9f59e251a928b75c6b128f8ba28be761210b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:17:bb:45:b9:ab:ad:34:36:35:14:ad:a6:bf:
                    bf:f4:d4:25:0e:1c:43:aa:12:48:42:77:a3:39:fc:
                    47:9d:95:04:f1:07:76:56:02:46:81:09:6b:8a:84:
                    13:4a:4c:c8:ed:f9:89:5a:57:0a:34:e8:ee:96:6e:
                    09:14:b1:67:72:9f:e8:be:d2:60:a2:d6:49:ef:33:
                    6b:64:5d:ce:67:b0:e7:0e:e9:06:8c:0f:10:e2:b9:
                    3c:a0:ac:4d:28:e0:f8:6b:61:7e:d7:a4:df:42:e9:
                    96:dd:9a:ff:43:b4:a5:54:4d:24:37:bd:e6:76:01:
                    cb:4d:9a:9e:cb:34:bb:6f:3c:38:b0:79:db:9f:e3:
                    20:de:b1:c4:4b:4d:55:b9:7d:51:76:57:d5:83:5e:
                    6e:24:68:78:1d:8b:1c:de:48:ca:b3:de:be:bb:14:
                    59:73:45:0a:f2:56:38:5f:77:f6:57:dc:c5:6d:21:
                    6e:9f:60:ea:07:a8:fc:1f:c7:23:1a:b3:c3:f2:77:
                    35:be:17:9d:a7:7d:96:6c:67:b8:d0:47:96:dc:b1:
                    eb:77:61:e0:5e:33:ba:6d:8a:50:64:32:66:80:eb:
                    1e:ef:9e:84:b4:f7:af:90:4e:70:1a:d8:5d:89:1f:
                    70:69:75:0f:25:a8:ed:38:66:ab:18:e6:b4:54:c8:
                    dd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D9:F5:9E:25:1A:92:8B:75:C6:B1:28:F8:BA:28:BE:76:12:10:B7
            X509v3 Authority Key Identifier:
                keyid:07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ba:3d:25:59:25:30:2a:bf:91:95:83:99:12:7d:bc:0e:03:
         b9:9f:93:89:d3:e0:7f:c3:e4:78:20:72:2c:90:3f:d9:f7:9d:
         79:e0:bc:d8:47:67:38:2b:cc:5f:e9:a6:fb:3c:04:72:88:b2:
         bd:2c:25:de:d5:ce:b8:2c:90:aa:58:0e:48:ea:bd:a5:b2:19:
         24:09:f1:11:73:5a:54:a3:86:3e:c0:6f:87:e6:4d:11:b1:6d:
         0a:60:75:10:be:93:99:19:a7:1a:45:03:74:cf:c6:b1:88:23:
         bb:b2:59:c0:ef:c9:33:23:b9:2a:8a:d4:c6:92:d7:b0:24:0a:
         d4:a5:f9:0f:6b:e3:32:82:8a:fd:ef:0f:fc:4c:4b:04:f4:fb:
         6e:cd:25:59:87:b6:06:48:a3:8d:52:91:d5:62:1c:2c:4f:dd:
         1d:01:4a:a4:10:25:29:d9:af:3a:05:c9:08:a4:99:38:63:11:
         c1:e3:01:a7:30:71:3a:23:fb:d3:8a:cc:13:c2:0a:94:da:84:
         3a:64:6b:c4:1e:f5:d2:85:d6:90:c3:de:f6:34:ed:0d:8e:72:
         94:f7:97:b6:09:0c:b0:a4:ff:62:c4:72:88:e5:02:95:bf:8e:
         95:60:01:ec:9d:02:90:bb:e5:4c:6b:23:4b:6d:64:33:19:79:
         82:62:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:12 2026 by rpki-client