Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File:                     BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier:          FeEq16q5ynreyPsvRet577cMBd8/92l+ZHvLnZbXi0s=
Subject key identifier:   C3:5E:CE:03:92:AE:AB:E0:B8:BF:98:0F:88:9A:46:EA:D8:A3:3D:BD
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer:       /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial:       019E3071FE6C552352DC214B1FC8891336A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 11:00:37 +0000
Manifest this update:     Sat 16 May 2026 11:00:37 +0000
Manifest next update:     Sun 17 May 2026 11:00:37 +0000
Files and hashes:         1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: 6A4a3eRELXFycu6IX7iZGr9ArRXd7E7f/iafyucpg8k=)
                          2: tdO4wEk8YpGTzq5kd9vPeqnDeDo.roa (hash: cB5CSJkT3O+9UBmuTizqC0w9ZxVIs1IRBERe6k5DKkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:71:fe:6c:55:23:52:dc:21:4b:1f:c8:89:13:36:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
        Validity
            Not Before: May 16 11:00:37 2026 GMT
            Not After : May 17 11:00:37 2026 GMT
        Subject: CN=c35ece0392aeabe0b8bf980f889a46ead8a33dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:90:f3:dd:b7:ab:ba:95:1f:0e:ce:c6:9d:03:
                    11:46:b3:7f:1d:24:8b:ec:7f:70:14:2d:7f:71:1f:
                    08:5d:a1:e1:6a:6d:59:1e:5f:9e:60:fd:38:c0:64:
                    f8:cc:e6:63:19:a4:e9:42:c5:6b:12:56:59:07:9f:
                    7b:c1:d4:04:07:00:f7:c5:f1:52:91:19:da:76:ea:
                    0e:98:bb:d9:69:71:11:f7:22:3e:05:17:10:3a:c4:
                    a8:bb:6e:a8:33:5e:bf:99:d3:dc:99:66:24:be:2b:
                    8b:82:97:50:49:12:e2:0a:5b:fa:26:68:21:c6:22:
                    77:16:1a:54:49:0b:c0:92:d6:b5:4c:94:d7:37:e1:
                    fc:a2:cd:e7:64:13:8e:54:fb:dd:c9:4f:ef:72:d0:
                    c6:aa:c0:25:35:4f:94:89:10:8c:34:5b:b5:aa:42:
                    9e:77:be:ca:a9:af:ce:e9:7f:4a:2f:54:ae:83:3b:
                    2b:83:ea:06:93:5c:d7:27:b5:55:f7:01:67:69:a5:
                    58:44:c5:81:25:22:d6:f0:85:ed:89:93:f5:98:f5:
                    fc:60:7e:ea:c1:60:17:25:08:07:25:84:a2:c4:ec:
                    20:f4:f8:09:38:65:23:36:ef:be:fe:ce:9b:92:d0:
                    24:bc:36:91:a1:4d:17:fc:78:8a:fa:9b:d2:e8:f4:
                    46:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5E:CE:03:92:AE:AB:E0:B8:BF:98:0F:88:9A:46:EA:D8:A3:3D:BD
            X509v3 Authority Key Identifier:
                keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:30:42:b7:6e:91:93:47:2c:6b:9b:6c:d1:39:60:ff:1a:ad:
         e9:3c:c4:f8:32:1d:d6:b7:0e:e1:98:b8:da:95:47:75:44:e8:
         9e:23:41:48:b9:f6:a5:74:d4:19:c3:55:ad:09:06:8b:3f:5f:
         c7:1a:60:07:7d:a5:64:d1:1c:9b:6c:08:d2:48:a2:db:a9:44:
         d9:b1:32:a7:82:87:2e:ca:0e:6c:26:bc:12:37:c1:da:ba:9c:
         4f:81:17:83:62:1e:0a:66:e5:a5:3f:e4:fc:bc:08:1c:62:64:
         ad:1c:ed:0b:ff:ee:ae:78:38:7c:72:10:43:f9:20:c2:53:b5:
         4d:1a:ef:0f:da:aa:a5:82:f9:be:77:16:be:d0:5a:1e:bb:02:
         33:ac:fe:7c:8b:e9:60:1c:4d:79:fe:52:d1:67:da:85:53:b8:
         a1:9e:ea:3b:1e:b9:65:47:9e:a5:b1:84:4b:ac:3a:85:7f:31:
         75:51:e5:93:cf:57:f0:14:36:05:b1:e0:07:32:5a:ea:2f:f2:
         ef:b9:b7:9e:df:6c:a6:83:cf:eb:88:b3:25:16:22:75:04:ff:
         7f:ff:d4:8b:43:61:5e:9b:90:93:0d:cc:2b:fd:30:71:5d:74:
         c9:df:8c:f8:ad:2c:05:c1:75:30:73:1e:65:a9:e4:0e:87:5e:
         36:b2:68:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcf5sVSNS3CFLH8iJEzapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0N2VlNzRhYzQ5MGUzMWYxZDQwNzY0ZjA5MjQxMWVlMjVl
YjE2NjUwHhcNMjYwNTE2MTEwMDM3WhcNMjYwNTE3MTEwMDM3WjAzMTEwLwYDVQQD
EyhjMzVlY2UwMzkyYWVhYmUwYjhiZjk4MGY4ODlhNDZlYWQ4YTMzZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpDz3berupUfDs7GnQMRRrN/HSSL
7H9wFC1/cR8IXaHham1ZHl+eYP04wGT4zOZjGaTpQsVrElZZB597wdQEBwD3xfFS
kRnaduoOmLvZaXER9yI+BRcQOsSou26oM16/mdPcmWYkviuLgpdQSRLiClv6Jmgh
xiJ3FhpUSQvAkta1TJTXN+H8os3nZBOOVPvdyU/vctDGqsAlNU+UiRCMNFu1qkKe
d77Kqa/O6X9KL1Sugzsrg+oGk1zXJ7VV9wFnaaVYRMWBJSLW8IXtiZP1mPX8YH7q
wWAXJQgHJYSixOwg9PgJOGUjNu++/s6bktAkvDaRoU0X/HiK+pvS6PRGBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNezgOSrqvguL+YD4iaRurYoz29MB8GA1UdIwQY
MBaAFAR+50rEkOMfHUB2TwkkEe4l6xZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xN2Y3NjktNTgzMy00ZjI2LTkzZjgt
ZWE3ZjIxOGZkYjUwLzEvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xN2Y3NjktNTgzMy00ZjI2LTkzZjgtZWE3ZjIxOGZkYjUw
LzEvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyDBCt26R
k0csa5ts0Tlg/xqt6TzE+DId1rcO4Zi42pVHdUToniNBSLn2pXTUGcNVrQkGiz9f
xxpgB32lZNEcm2wI0kii26lE2bEyp4KHLsoObCa8EjfB2rqcT4EXg2IeCmblpT/k
/LwIHGJkrRztC//urng4fHIQQ/kgwlO1TRrvD9qqpYL5vncWvtBaHrsCM6z+fIvp
YBxNef5S0WfahVO4oZ7qOx65ZUeepbGES6w6hX8xdVHlk89X8BQ2BbHgBzJa6i/y
77m3nt9spoPP64izJRYidQT/f//Ui0NhXpuQkw3MK/0wcV10yd+M+K0sBcF1MHMe
ZankDodeNrJozA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:38 2026 by rpki-client