Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
File:                     B0Rsf2NCHXPCj4ynf9LUo1chABU.mft (raw, json)
Hash identifier:          s6UG8oUpVZYb8ch8U698SKmeZ2dNHsd7cv/6xc5NvyA=
Subject key identifier:   F3:8A:DE:DA:7F:A0:F8:F0:69:65:F3:FA:F1:D1:A8:60:44:00:B7:65
Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
Certificate issuer:       /CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Certificate serial:       019E30A9169849DC9711B7116E4592DE7235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
Manifest number:          18A1
Signing time:             Sat 16 May 2026 12:00:48 +0000
Manifest this update:     Sat 16 May 2026 12:00:48 +0000
Manifest next update:     Sun 17 May 2026 12:00:48 +0000
Files and hashes:         1: B0Rsf2NCHXPCj4ynf9LUo1chABU.crl (hash: uqR1fU0eMjViAoIRXz5PXsYsh9O4iyc4WzWy9u3HiQY=)
                          2: vWaSI97YDOehiwDX9EtCVi1TGr8.roa (hash: qObHiQ/zhXEaIaP9YgXMKfb5GBmcR4gdeH2I3WxGujw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:16:98:49:dc:97:11:b7:11:6e:45:92:de:72:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015
        Validity
            Not Before: May 16 12:00:48 2026 GMT
            Not After : May 17 12:00:48 2026 GMT
        Subject: CN=f38adeda7fa0f8f06965f3faf1d1a8604400b765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:52:a6:27:95:dc:7a:78:a9:60:77:9a:99:
                    2e:9b:7a:f1:d4:42:2d:18:c8:3f:21:9b:38:b6:61:
                    c7:7b:2f:37:b3:80:f5:9e:a5:4e:f3:f3:be:04:88:
                    43:a6:51:8d:fb:79:bc:03:e0:5a:f7:5f:9b:dc:d5:
                    68:5b:59:2f:d4:3d:1a:95:ce:91:1e:b5:8c:89:08:
                    06:e1:89:db:47:68:a2:2f:eb:0f:e5:51:4e:41:da:
                    f2:c2:c1:81:56:2d:63:e8:0f:c7:ea:5f:74:d6:d5:
                    02:2e:ca:20:f4:7f:d1:68:21:19:45:0b:1a:1f:d9:
                    81:10:be:d4:e6:70:50:57:5f:4a:36:96:82:a2:ec:
                    73:ec:45:17:cf:49:1a:e8:f7:17:e8:11:b1:41:cf:
                    1d:ff:c2:23:76:41:a6:5f:cf:1d:3d:40:03:c6:4e:
                    91:b0:b4:3d:9a:01:2d:32:62:17:56:c4:a7:33:94:
                    d0:2e:60:11:b5:bd:25:04:30:ed:ab:05:81:4d:be:
                    b7:db:64:f6:7a:dc:26:43:3c:0c:b7:68:81:56:c7:
                    fc:75:9d:e1:3f:07:94:1e:e5:00:4b:74:82:e9:52:
                    92:88:6e:01:ea:40:f2:df:ac:e1:4b:ce:bb:5d:52:
                    ad:bb:c5:d2:f5:42:2c:35:6e:6a:d1:fb:2e:dc:fe:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8A:DE:DA:7F:A0:F8:F0:69:65:F3:FA:F1:D1:A8:60:44:00:B7:65
            X509v3 Authority Key Identifier:
                keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:60:10:3c:09:3a:a6:e7:fd:43:be:b6:81:cf:d1:30:bc:18:
         ed:07:47:72:77:de:b2:0e:f9:48:18:0e:4b:38:05:ef:1f:75:
         2f:01:75:dd:18:74:29:2c:2f:69:be:3f:07:44:43:5c:ad:63:
         a1:2b:33:e2:5c:f3:6a:26:bc:86:e2:e1:70:d1:b0:cc:3e:c3:
         6f:83:59:0b:cd:e3:42:0a:aa:50:ac:f4:30:e9:3e:de:4f:40:
         81:7e:bd:10:57:e6:33:92:42:dd:8f:1c:88:dd:1c:ae:02:30:
         06:9c:71:c6:66:bb:8b:aa:96:70:da:92:c3:4b:de:cf:2e:a8:
         d1:88:1a:06:bb:2c:ff:a7:dc:ac:ed:fe:89:0b:84:12:4f:80:
         cd:8d:da:ed:b9:a1:97:95:b0:7c:42:d2:a1:7a:3d:b3:52:9f:
         17:a0:1c:6e:97:e8:b7:6a:3b:ca:63:53:63:86:11:0d:b0:7c:
         22:43:45:c7:52:e4:44:4f:c1:44:c2:4e:2e:f1:ae:32:cd:52:
         01:cd:05:0d:4b:c3:4e:e7:35:20:26:19:a0:20:97:38:57:41:
         c6:c3:84:eb:e5:0d:d3:eb:c1:eb:e8:bf:25:68:fb:36:41:30:
         79:d1:24:77:fe:fb:e6:dd:49:46:fe:f8:4c:78:e6:0c:06:ed:
         fc:81:36:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqRaYSdyXEbcRbkWS3nI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NDQ2YzdmNjM0MjFkNzNjMjhmOGNhNzdmZDJkNGEzNTcy
MTAwMTUwHhcNMjYwNTE2MTIwMDQ4WhcNMjYwNTE3MTIwMDQ4WjAzMTEwLwYDVQQD
EyhmMzhhZGVkYTdmYTBmOGYwNjk2NWYzZmFmMWQxYTg2MDQ0MDBiNzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxRSpieV3Hp4qWB3mpkum3rx1EIt
GMg/IZs4tmHHey83s4D1nqVO8/O+BIhDplGN+3m8A+Ba91+b3NVoW1kv1D0alc6R
HrWMiQgG4YnbR2iiL+sP5VFOQdrywsGBVi1j6A/H6l901tUCLsog9H/RaCEZRQsa
H9mBEL7U5nBQV19KNpaCouxz7EUXz0ka6PcX6BGxQc8d/8IjdkGmX88dPUADxk6R
sLQ9mgEtMmIXVsSnM5TQLmARtb0lBDDtqwWBTb6322T2etwmQzwMt2iBVsf8dZ3h
PweUHuUAS3SC6VKSiG4B6kDy36zhS867XVKtu8XS9UIsNW5q0fsu3P7BwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOK3tp/oPjwaWXz+vHRqGBEALdlMB8GA1UdIwQY
MBaAFAdEbH9jQh1zwo+Mp3/S1KNXIQAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjBSc2YyTkNIWFBDajR5bmY5TFVvMWNoQUJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wZGUzNDMtMmJlNS00MzA5LWI3YjUt
YTRmMTFiMDRjNjQwLzEvQjBSc2YyTkNIWFBDajR5bmY5TFVvMWNoQUJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8wZGUzNDMtMmJlNS00MzA5LWI3YjUtYTRmMTFiMDRjNjQw
LzEvQjBSc2YyTkNIWFBDajR5bmY5TFVvMWNoQUJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmAQPAk6
puf9Q762gc/RMLwY7QdHcnfesg75SBgOSzgF7x91LwF13Rh0KSwvab4/B0RDXK1j
oSsz4lzzaia8huLhcNGwzD7Db4NZC83jQgqqUKz0MOk+3k9AgX69EFfmM5JC3Y8c
iN0crgIwBpxxxma7i6qWcNqSw0vezy6o0YgaBrss/6fcrO3+iQuEEk+AzY3a7bmh
l5WwfELSoXo9s1KfF6Acbpfot2o7ymNTY4YRDbB8IkNFx1LkRE/BRMJOLvGuMs1S
Ac0FDUvDTuc1ICYZoCCXOFdBxsOE6+UN0+vB6+i/JWj7NkEwedEkd/775t1JRv74
THjmDAbt/IE2Zw==
-----END CERTIFICATE-----
Generated at Sat May 16 16:23:49 2026 by rpki-client