Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
File:                     Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json)
Hash identifier:          l3JjAK5HWHyfljJ+ZytSQQI0FrwKLu6C4WWZU4nH7BE=
Subject key identifier:   15:08:A9:C5:A2:D5:B6:7E:3A:2C:5C:EC:36:4A:1E:D9:AC:A6:6E:DE
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Certificate issuer:       /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial:       019E58927E221DC1EB14CA4C7B9536E00B08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
Manifest number:          03F7
Signing time:             Sun 24 May 2026 06:00:55 +0000
Manifest this update:     Sun 24 May 2026 06:00:55 +0000
Manifest next update:     Mon 25 May 2026 06:00:55 +0000
Files and hashes:         1: 9dGvdWlNpFyFHCXA6RbwTGwzlgw.roa (hash: EKwo4lR/lHxGWjUPRhdL7zbwa8l0PAt3OjON/sSOuEs=)
                          2: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: o7CmCGLflUC+MJC7DvSo0ASp4/PzTILIyOkvsGTxjvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:58:92:7e:22:1d:c1:eb:14:ca:4c:7b:95:36:e0:0b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
        Validity
            Not Before: May 24 06:00:55 2026 GMT
            Not After : May 25 06:00:55 2026 GMT
        Subject: CN=1508a9c5a2d5b67e3a2c5cec364a1ed9aca66ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:b7:75:04:1f:7a:3a:d8:86:bf:f0:16:c2:
                    f3:53:82:f6:4b:a5:36:c7:e0:a6:37:1b:a6:d0:0a:
                    ad:3e:94:c3:5a:57:5f:f3:4c:ca:38:4c:45:a2:d6:
                    11:85:d9:4c:f0:21:07:5c:23:db:64:57:4d:a4:73:
                    04:7d:7a:92:f6:0f:97:77:2c:e6:82:65:e8:d6:2b:
                    05:ce:f3:5d:8c:93:56:4e:4d:93:59:88:6e:fe:73:
                    ff:27:0d:1d:7e:4c:dd:a8:d5:0c:b9:c7:67:57:c9:
                    5b:50:5a:b2:89:0e:53:b4:f8:c9:43:7b:bb:82:62:
                    41:db:fc:25:9e:25:25:91:c1:e1:31:2b:81:47:b7:
                    8d:47:88:0c:33:17:7b:a0:55:3a:5b:30:6b:e9:c5:
                    27:78:fe:a9:94:1b:af:b1:f9:fc:4f:8e:cd:95:81:
                    15:df:90:e2:36:b4:70:c0:39:d7:4f:14:da:04:e4:
                    da:6f:50:93:90:25:22:2b:92:7e:25:06:32:df:e0:
                    d1:a1:39:32:1c:44:3e:58:ea:9a:c9:34:1e:11:8f:
                    e2:a9:5a:0f:69:21:73:4b:a0:e0:83:dc:a1:f2:07:
                    4d:4b:c9:b5:ad:16:7a:4d:f8:86:94:83:1c:fe:ff:
                    e7:36:9a:f7:6a:94:d2:71:73:70:e7:88:66:d9:e4:
                    f0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:08:A9:C5:A2:D5:B6:7E:3A:2C:5C:EC:36:4A:1E:D9:AC:A6:6E:DE
            X509v3 Authority Key Identifier:
                keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cc:42:f7:1c:aa:3d:ea:2f:c5:3e:3b:e5:eb:4e:be:75:f7:
         08:3d:09:03:2c:b5:40:1b:f3:d0:93:70:27:ff:a2:cb:8b:69:
         30:2e:53:50:73:fa:29:3b:58:de:e7:b9:26:c2:78:61:cc:a0:
         d7:7a:50:71:a0:f7:69:e6:81:57:9c:d3:60:c1:ce:89:15:45:
         59:92:43:a1:b9:88:c6:4d:2b:ff:94:0c:e9:bd:2a:e9:4f:ec:
         94:3d:2d:be:f5:6d:65:6e:03:47:b3:57:52:78:77:d2:f4:c7:
         3a:6b:87:ff:c9:26:cc:30:36:f1:e3:e0:d8:34:24:de:8a:6c:
         80:0d:d0:05:f8:14:f6:a7:2e:c7:bf:e5:52:e8:0b:3a:dd:cf:
         fc:e1:51:77:6a:e9:ed:e2:17:40:fb:1b:b9:66:b1:83:3b:7d:
         56:c6:e5:e1:6f:f0:cb:f7:d9:ca:e4:e8:7d:78:ae:3d:a6:bd:
         f2:3b:8f:4e:c0:f9:12:31:af:9f:3d:2f:d8:96:cd:4d:b4:20:
         1d:39:7e:13:d6:33:e2:1a:04:e6:c8:a8:6c:c7:71:c7:24:7f:
         7e:85:37:fb:24:c8:cd:13:58:ce:c2:c5:19:d2:f1:9a:88:10:
         ac:6b:6a:97:ef:be:74:af:98:36:f7:a9:ef:ac:01:9d:64:96:
         da:fe:fa:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5Ykn4iHcHrFMpMe5U24AsIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzZmMmRmOTQ2YmY1MjViM2MzY2E4MmY1MWJhZDU1ZDAy
ZTM2ZWYwHhcNMjYwNTI0MDYwMDU1WhcNMjYwNTI1MDYwMDU1WjAzMTEwLwYDVQQD
EygxNTA4YTljNWEyZDViNjdlM2EyYzVjZWMzNjRhMWVkOWFjYTY2ZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7O3dQQfejrYhr/wFsLzU4L2S6U2
x+CmNxum0AqtPpTDWldf80zKOExFotYRhdlM8CEHXCPbZFdNpHMEfXqS9g+Xdyzm
gmXo1isFzvNdjJNWTk2TWYhu/nP/Jw0dfkzdqNUMucdnV8lbUFqyiQ5TtPjJQ3u7
gmJB2/wlniUlkcHhMSuBR7eNR4gMMxd7oFU6WzBr6cUneP6plBuvsfn8T47NlYEV
35DiNrRwwDnXTxTaBOTab1CTkCUiK5J+JQYy3+DRoTkyHEQ+WOqayTQeEY/iqVoP
aSFzS6Dgg9yh8gdNS8m1rRZ6TfiGlIMc/v/nNpr3apTScXNw54hm2eTwxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUIqcWi1bZ+Oixc7DZKHtmspm7eMB8GA1UdIwQY
MBaAFAc28t+Ua/Uls8PKgvUbrVXQLjbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQt
ZDg0MWIzODJkNmQ4LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQtZDg0MWIzODJkNmQ4
LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsxC9xyq
PeovxT475etOvnX3CD0JAyy1QBvz0JNwJ/+iy4tpMC5TUHP6KTtY3ue5JsJ4Ycyg
13pQcaD3aeaBV5zTYMHOiRVFWZJDobmIxk0r/5QM6b0q6U/slD0tvvVtZW4DR7NX
Unh30vTHOmuH/8kmzDA28ePg2DQk3opsgA3QBfgU9qcux7/lUugLOt3P/OFRd2rp
7eIXQPsbuWaxgzt9Vsbl4W/wy/fZyuTofXiuPaa98juPTsD5EjGvnz0v2JbNTbQg
HTl+E9Yz4hoE5siobMdxxyR/foU3+yTIzRNYzsLFGdLxmogQrGtql+++dK+YNvep
76wBnWSW2v76mA==
-----END CERTIFICATE-----
Generated at Sun May 24 08:45:04 2026 by rpki-client