Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File:                     BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier:          KF802zh1nuy0UgLXGtnPH5b1JBFFehrstnujF4QySTg=
Subject key identifier:   7B:15:B9:B7:4F:17:D5:89:99:99:1A:AF:02:6D:4B:38:42:BE:A1:8F
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer:       /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial:       019F190CE567BEBBBE1C78E47E9283CCB0FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number:          181E
Signing time:             Tue 30 Jun 2026 15:01:43 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:43 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:43 +0000
Files and hashes:         1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: oHT21eo6tEtpXkdf5hxExEhgpG0trzl/qKAeWNILcz4=)
                          2: n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa (hash: /LBumHatcMFGiSJpi+D4CNDkH6MVAePa519MRpuWiWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:e5:67:be:bb:be:1c:78:e4:7e:92:83:cc:b0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
        Validity
            Not Before: Jun 30 15:01:43 2026 GMT
            Not After : Jul  1 15:01:43 2026 GMT
        Subject: CN=7b15b9b74f17d58999991aaf026d4b3842bea18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:66:61:2a:b7:5e:98:b5:a4:4e:54:41:c6:
                    02:0c:b3:68:6e:18:3c:a7:2a:6c:17:d4:a2:90:b5:
                    22:1a:6b:a7:87:02:11:f0:60:9b:a8:da:87:3d:b2:
                    34:ff:6c:84:0c:f5:bd:86:08:ad:91:05:e5:47:f8:
                    84:f2:60:65:1d:49:23:13:f1:50:31:5f:dc:97:b0:
                    fa:c8:a8:76:0b:be:df:29:89:f3:a9:e6:cf:18:69:
                    50:4e:9e:3c:00:2d:20:40:c5:f5:c9:82:47:1a:98:
                    91:ce:49:e4:59:b4:ef:66:58:ab:a9:e7:54:c3:c3:
                    5d:fe:d7:6c:a6:82:c1:eb:98:43:a5:65:e4:7b:29:
                    6c:88:8b:f7:8a:a8:a0:2b:fe:9c:54:f3:02:a8:20:
                    18:78:eb:7a:4c:5e:cb:33:13:0c:db:aa:44:95:1a:
                    d2:0d:c4:82:52:f2:f6:a8:85:2a:88:5d:2a:3e:d5:
                    0d:73:a3:64:d2:d5:45:a0:51:45:49:ef:e6:0b:bf:
                    07:f7:81:2f:e9:13:25:c6:18:8d:b3:11:5d:ff:e3:
                    34:b9:ec:6b:d0:10:65:c6:28:4c:b3:52:d4:a1:d2:
                    15:63:b1:d4:d5:ab:f1:23:80:0b:30:9b:b1:4d:42:
                    aa:31:b1:71:ee:f5:d8:bb:06:73:03:7e:ac:27:5f:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:15:B9:B7:4F:17:D5:89:99:99:1A:AF:02:6D:4B:38:42:BE:A1:8F
            X509v3 Authority Key Identifier:
                keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6d:4a:9a:11:fd:b6:17:4a:c4:70:64:c1:7a:b0:41:65:48:
         fd:ef:00:ce:1b:37:38:79:da:19:3f:70:34:3e:cb:4e:73:c6:
         65:dd:54:50:15:35:cf:81:c3:79:ee:3b:7d:bf:3d:01:d0:ca:
         04:d7:fd:c2:04:b5:1e:45:c5:7c:68:a0:cd:69:45:1b:62:59:
         b4:f8:e7:6d:61:e5:c5:71:12:6a:8c:2d:a7:67:b7:22:f8:a9:
         e6:3c:56:0c:c8:af:f9:bb:e9:5b:12:6e:65:42:e9:9a:3d:b9:
         1f:39:c3:1b:fa:4a:d5:af:3c:fc:06:da:0d:fd:6a:4c:dd:35:
         a5:b9:c7:43:50:e2:1f:eb:03:5c:2c:fe:13:08:8f:ae:a4:31:
         70:4b:8e:be:c5:4b:2a:e3:b6:bb:b5:cc:2f:24:fa:24:3c:39:
         b4:85:d0:32:6f:39:d3:0f:70:c0:b9:3f:0a:c3:88:7b:88:e0:
         28:7b:22:eb:62:9a:94:ee:27:31:c6:16:9a:dd:a9:c4:83:cd:
         f8:ce:3d:41:cf:55:f7:2d:83:2b:90:92:87:79:d7:89:91:07:
         cc:be:2c:03:d7:64:07:3f:53:6d:92:23:62:47:ce:94:10:80:
         0d:f8:90:2d:25:95:02:ac:73:30:c7:a7:ad:ed:44:b4:8c:e6:
         f9:e1:ee:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDOVnvru+HHjkfpKDzLD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MTM1OWRhMGQwYjdhODI5ZTQyMGZkOTMyY2FmYzFlM2Mx
NTcyZGUwHhcNMjYwNjMwMTUwMTQzWhcNMjYwNzAxMTUwMTQzWjAzMTEwLwYDVQQD
Eyg3YjE1YjliNzRmMTdkNTg5OTk5OTFhYWYwMjZkNGIzODQyYmVhMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XBmYSq3Xpi1pE5UQcYCDLNobhg8
pypsF9SikLUiGmunhwIR8GCbqNqHPbI0/2yEDPW9hgitkQXlR/iE8mBlHUkjE/FQ
MV/cl7D6yKh2C77fKYnzqebPGGlQTp48AC0gQMX1yYJHGpiRzknkWbTvZlirqedU
w8Nd/tdspoLB65hDpWXkeylsiIv3iqigK/6cVPMCqCAYeOt6TF7LMxMM26pElRrS
DcSCUvL2qIUqiF0qPtUNc6Nk0tVFoFFFSe/mC78H94Ev6RMlxhiNsxFd/+M0uexr
0BBlxihMs1LUodIVY7HU1avxI4ALMJuxTUKqMbFx7vXYuwZzA36sJ1+Z/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsVubdPF9WJmZkarwJtSzhCvqGPMB8GA1UdIwQY
MBaAFAQTWdoNC3qCnkIP2TLK/B48FXLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkJOWjJnMExlb0tlUWdfWk1zcjhIandWY3Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80ZGZmYjAtMTk5YS00YzVlLWFjOTEt
ODZmZTM2Y2EwYjc0LzEvQkJOWjJnMExlb0tlUWdfWk1zcjhIandWY3Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80ZGZmYjAtMTk5YS00YzVlLWFjOTEtODZmZTM2Y2EwYjc0
LzEvQkJOWjJnMExlb0tlUWdfWk1zcjhIandWY3Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUW1KmhH9
thdKxHBkwXqwQWVI/e8Azhs3OHnaGT9wND7LTnPGZd1UUBU1z4HDee47fb89AdDK
BNf9wgS1HkXFfGigzWlFG2JZtPjnbWHlxXESaowtp2e3Ivip5jxWDMiv+bvpWxJu
ZULpmj25HznDG/pK1a88/AbaDf1qTN01pbnHQ1DiH+sDXCz+EwiPrqQxcEuOvsVL
KuO2u7XMLyT6JDw5tIXQMm850w9wwLk/CsOIe4jgKHsi62KalO4nMcYWmt2pxIPN
+M49Qc9V9y2DK5CSh3nXiZEHzL4sA9dkBz9TbZIjYkfOlBCADfiQLSWVAqxzMMen
re1EtIzm+eHuQw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:59 2026 by rpki-client