Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
File:                     BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft (raw, json)
Hash identifier:          Sjnzy0P9ZrSWFdqepZuuRYa+SHNIgyRUWQ3wtoDquBU=
Subject key identifier:   F5:B7:30:50:E9:A4:D1:74:FB:93:E1:97:3E:DE:4D:0B:5B:BB:F2:62
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Certificate issuer:       /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial:       019F1AFAED5C95FD72434A81285E86DDB9CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
Manifest number:          02CB
Signing time:             Wed 01 Jul 2026 00:01:20 +0000
Manifest this update:     Wed 01 Jul 2026 00:01:20 +0000
Manifest next update:     Thu 02 Jul 2026 00:01:20 +0000
Files and hashes:         1: BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl (hash: AbXpL45Jtg68eW36V/OvqYDg/YToobaO3hVB/3bG0Bw=)
                          2: GlfjtyID3JWD6gfRCet0c13y4oE.roa (hash: LlD9D2Qj80+2x3YcRcDhNjcjPr/rKerCLr5sHKh6tkA=)
                          3: SHM8e5Xg0qhNz9SMmQfcefSeu0g.roa (hash: GCoJkdgRca4Rrppv2r1E0k+f0VE7P9HFtilI5l3TlKU=)
                          4: fQqhOO0FnaFVtEyg6GJLZV0GsXc.roa (hash: CUNYPNKSF7YckX+bEfY2dM6QKQX4z3XcFfcG2M3cMOA=)
                          5: ixoSA4vv93EMzPFXEdYkZkFXEuM.roa (hash: LpzORNFMoHrs7UHue0dvdeBk04SczLGtJqFp6wF9Yy4=)
                          6: lvaBEefREte9megKsuTphpZWEYI.roa (hash: gtzJ7Yq4UBIaiaj1g0GucnUUIgufu6zUuc3MZU4/efU=)
                          7: ovLtvuErkYW3JV-5FyXwUkABVrg.roa (hash: dC4dQZ1mX3nPadXU0G7tzcioIJQ9K57JJCxbTMySTvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:fa:ed:5c:95:fd:72:43:4a:81:28:5e:86:dd:b9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
        Validity
            Not Before: Jul  1 00:01:20 2026 GMT
            Not After : Jul  2 00:01:20 2026 GMT
        Subject: CN=f5b73050e9a4d174fb93e1973ede4d0b5bbbf262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:bf:8b:41:b7:59:38:35:12:a5:12:4f:81:
                    2d:08:3b:0a:f8:99:3b:e3:76:26:77:a4:22:1e:07:
                    49:90:20:f2:4d:99:05:2b:18:5d:fe:ae:0a:f1:7d:
                    82:f2:48:7e:31:2f:c8:21:40:ff:f8:37:5a:63:50:
                    c5:48:9f:5b:1a:52:8b:32:8e:2c:93:5e:6f:5b:d4:
                    e3:a3:5d:31:45:71:a9:1d:d3:92:d0:cf:c7:56:a0:
                    b6:8f:9b:bf:58:f3:f5:4e:eb:4f:77:32:01:95:03:
                    6a:4e:36:45:cb:b9:f2:4e:ab:2b:90:90:bf:6a:ba:
                    1f:c8:b0:5d:2e:94:58:f4:08:62:ed:a4:54:6b:56:
                    78:80:a9:ec:44:a8:8f:78:70:05:1a:3a:f9:15:a5:
                    b1:e8:bf:0a:a7:7a:1e:2c:54:bb:e3:a3:a6:30:01:
                    19:66:30:16:e6:77:f1:41:87:22:60:e0:37:c7:d1:
                    5a:99:75:33:2f:bf:cd:42:79:ae:99:85:37:72:26:
                    98:e0:f4:06:3e:db:ab:1d:57:dd:d9:19:63:15:42:
                    48:6b:af:2f:98:4d:6e:73:a2:48:e6:83:a5:e6:52:
                    d0:1f:b4:df:4d:3d:8b:7e:be:8c:02:6a:09:3c:41:
                    fd:dc:17:c0:13:1d:62:2a:db:35:2d:08:44:9e:a2:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B7:30:50:E9:A4:D1:74:FB:93:E1:97:3E:DE:4D:0B:5B:BB:F2:62
            X509v3 Authority Key Identifier:
                keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:03:dc:e9:93:d8:ee:03:6a:ac:29:6e:0a:13:78:1a:8d:80:
         72:96:ab:5f:59:e9:de:8c:9b:36:71:1f:64:09:03:48:d3:cd:
         f9:55:be:ef:27:24:53:e2:2a:98:65:96:25:81:d8:66:c0:83:
         fc:a5:20:86:93:54:19:c2:4b:33:64:08:50:48:29:c7:d4:14:
         fb:b2:d9:d7:ef:d0:e6:27:03:f9:42:fe:9b:6c:fe:d8:d7:dd:
         20:a0:4a:61:09:15:50:9c:e6:2d:50:39:98:13:4f:ee:c2:7d:
         2f:66:65:ed:06:6e:4d:e8:53:e0:d2:51:da:40:73:ab:c6:06:
         33:a0:be:9d:1d:47:fe:9a:d7:59:32:3c:a3:96:70:bd:94:a3:
         b8:4e:38:ff:fb:51:6b:b0:d1:44:ca:11:f3:01:ca:36:3b:10:
         20:86:39:d4:ba:1d:1d:01:52:06:78:db:63:ca:43:2b:07:7b:
         0e:cb:95:c9:8f:c3:40:44:db:8d:4e:66:e5:ee:1d:63:64:44:
         da:85:09:5f:d1:8e:dd:8d:24:01:37:f6:69:6a:29:39:b4:a3:
         50:3a:db:81:55:69:48:b2:6f:d1:a5:a8:ab:a2:17:5f:3c:24:
         a5:3c:6d:c1:a5:f8:b6:60:0a:a1:88:df:4f:18:a2:3e:e3:04:
         00:f0:70:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8a+u1clf1yQ0qBKF6G3bnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NGFiMTk2YTViMTEzNjYwZDQwMWY4MDZiMzJiZTY2NjI1
YWZiYWEwHhcNMjYwNzAxMDAwMTIwWhcNMjYwNzAyMDAwMTIwWjAzMTEwLwYDVQQD
EyhmNWI3MzA1MGU5YTRkMTc0ZmI5M2UxOTczZWRlNGQwYjViYmJmMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtS/i0G3WTg1EqUST4EtCDsK+Jk7
43Ymd6QiHgdJkCDyTZkFKxhd/q4K8X2C8kh+MS/IIUD/+DdaY1DFSJ9bGlKLMo4s
k15vW9Tjo10xRXGpHdOS0M/HVqC2j5u/WPP1TutPdzIBlQNqTjZFy7nyTqsrkJC/
arofyLBdLpRY9Ahi7aRUa1Z4gKnsRKiPeHAFGjr5FaWx6L8Kp3oeLFS746OmMAEZ
ZjAW5nfxQYciYOA3x9FamXUzL7/NQnmumYU3ciaY4PQGPturHVfd2RljFUJIa68v
mE1uc6JI5oOl5lLQH7TfTT2Lfr6MAmoJPEH93BfAEx1iKts1LQhEnqJ1KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPW3MFDppNF0+5Phlz7eTQtbu/JiMB8GA1UdIwQY
MBaAFAVKsZalsRNmDUAfgGsyvmZiWvuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgt
ZDJkYTUxN2E5NmZkLzEvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgtZDJkYTUxN2E5NmZk
LzEvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwQPc6ZPY
7gNqrCluChN4Go2AcparX1np3oybNnEfZAkDSNPN+VW+7yckU+IqmGWWJYHYZsCD
/KUghpNUGcJLM2QIUEgpx9QU+7LZ1+/Q5icD+UL+m2z+2NfdIKBKYQkVUJzmLVA5
mBNP7sJ9L2Zl7QZuTehT4NJR2kBzq8YGM6C+nR1H/prXWTI8o5ZwvZSjuE44//tR
a7DRRMoR8wHKNjsQIIY51LodHQFSBnjbY8pDKwd7DsuVyY/DQETbjU5m5e4dY2RE
2oUJX9GO3Y0kATf2aWopObSjUDrbgVVpSLJv0aWoq6IXXzwkpTxtwaX4tmAKoYjf
TxiiPuMEAPBw/w==
-----END CERTIFICATE-----
Generated at Wed Jul 1 03:33:22 2026 by rpki-client