Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
File:                     B16ZPnb51_pATWmmy2DUv5jyuh4.mft (raw, json)
Hash identifier:          2i0/F06erwSV9fSdnvm0tWqsAQ8tjaEXhaiOPjQ/AWs=
Subject key identifier:   09:98:3F:DC:C0:0B:2D:A7:CB:93:12:A7:89:AC:B5:C2:9B:67:5B:BA
Authority key identifier: 07:5E:99:3E:76:F9:D7:FA:40:4D:69:A6:CB:60:D4:BF:98:F2:BA:1E
Certificate issuer:       /CN=075e993e76f9d7fa404d69a6cb60d4bf98f2ba1e
Certificate serial:       019E1D22F71FD5C3C267CD704B5C80DE04AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
Manifest number:          0FE8
Signing time:             Tue 12 May 2026 17:01:31 +0000
Manifest this update:     Tue 12 May 2026 17:01:31 +0000
Manifest next update:     Wed 13 May 2026 17:01:31 +0000
Files and hashes:         1: B16ZPnb51_pATWmmy2DUv5jyuh4.crl (hash: J7J7ypbDY8YxdkmrprEORG74ksgXYHuqi+aFNY3RFg4=)
                          2: Mi5D2M_HprHAZ6xFScJJj8v0UdM.roa (hash: IpYxb24SlDnBpv9XoJmCrfHXM9lZpB+q4SQWyKfbWes=)
                          3: s10C4U4_iMbhAR-vN3wyqp0CB_I.roa (hash: A8eBTCP+tcWaGZkZbjSTGKteJJ98FWaM61rC4IT5gZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:f7:1f:d5:c3:c2:67:cd:70:4b:5c:80:de:04:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075e993e76f9d7fa404d69a6cb60d4bf98f2ba1e
        Validity
            Not Before: May 12 17:01:31 2026 GMT
            Not After : May 13 17:01:31 2026 GMT
        Subject: CN=09983fdcc00b2da7cb9312a789acb5c29b675bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:6e:3f:02:d4:8e:7e:9a:26:11:a5:f2:fb:
                    33:b8:c7:18:8b:11:7b:45:38:ab:3d:76:f5:32:4c:
                    d5:83:73:61:35:86:07:0f:54:6d:f5:93:fb:f9:14:
                    32:4f:4f:e0:8b:20:1c:49:2f:51:30:86:46:ac:f2:
                    07:c3:cb:73:27:a7:4b:e9:00:87:09:13:df:a4:3a:
                    80:ec:3c:b8:ff:c1:cb:86:9c:b9:f4:51:40:65:e6:
                    89:6f:c4:17:f3:43:6f:0a:bf:d7:39:eb:e3:ef:ae:
                    29:c8:19:ab:29:b5:bb:1d:77:64:ac:1e:6e:c9:d5:
                    1f:f6:b1:38:c4:f6:25:b2:1d:e0:72:c8:fe:4f:b8:
                    89:24:7a:c0:01:d9:f9:6e:ff:b6:71:a9:03:19:73:
                    3e:61:db:42:4f:97:cb:b3:9a:e2:29:1c:c0:84:e9:
                    92:7c:67:b8:82:2c:97:48:82:f0:c1:46:8e:63:6d:
                    42:da:ea:bb:3f:f9:21:9f:89:42:bf:0c:9a:a7:3c:
                    44:61:55:e6:44:81:2b:59:a7:0e:25:19:55:9d:b2:
                    2f:78:a7:5c:7c:49:4b:d0:c1:cc:ee:f5:d4:8c:c4:
                    72:99:91:de:ef:a8:ef:a9:11:48:35:44:b0:66:91:
                    7e:e1:cc:a8:82:4f:03:b3:af:1e:ab:09:6f:5c:30:
                    49:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:98:3F:DC:C0:0B:2D:A7:CB:93:12:A7:89:AC:B5:C2:9B:67:5B:BA
            X509v3 Authority Key Identifier:
                keyid:07:5E:99:3E:76:F9:D7:FA:40:4D:69:A6:CB:60:D4:BF:98:F2:BA:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9e:d0:34:4b:f2:da:60:a7:7b:68:d7:f7:6e:60:ed:e8:3a:
         0e:ca:50:13:70:57:6a:db:f8:70:ae:30:2b:3d:32:aa:04:99:
         6a:24:0e:de:93:d9:b9:9d:99:bc:d8:24:2a:3e:b5:dc:50:74:
         8e:fe:80:9e:2c:82:c6:10:a9:fd:0d:16:4c:ca:6d:a0:fc:76:
         48:4d:85:87:da:61:44:61:24:6d:b2:00:de:e4:a4:11:17:90:
         59:fb:e6:6f:fe:37:7f:86:64:1b:51:46:cc:e7:e6:f7:ec:6e:
         13:bc:05:ba:f3:cc:a0:27:f6:b8:e6:bd:43:f9:e7:79:e1:e1:
         5b:7b:da:0d:1a:09:bb:2e:65:31:77:d4:08:07:91:56:0e:82:
         1c:8e:81:72:6f:1d:78:c8:f3:d2:57:bd:0d:aa:62:a7:41:b1:
         10:42:32:dd:d5:76:78:8b:db:dc:37:61:e6:37:bb:51:70:38:
         6b:a5:b3:0a:18:c5:ba:21:be:79:dc:fd:1f:e1:76:5d:db:8d:
         a7:aa:42:db:a4:83:2d:97:e9:86:43:b9:2b:87:21:21:6f:15:
         ce:93:1e:3c:f9:82:43:94:0f:fa:81:65:36:16:06:e5:23:25:
         69:09:76:a9:85:8f:77:b2:e6:29:65:7e:31:78:ea:4d:e8:9a:
         1a:7d:e4:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIvcf1cPCZ81wS1yA3gSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NWU5OTNlNzZmOWQ3ZmE0MDRkNjlhNmNiNjBkNGJmOThm
MmJhMWUwHhcNMjYwNTEyMTcwMTMxWhcNMjYwNTEzMTcwMTMxWjAzMTEwLwYDVQQD
EygwOTk4M2ZkY2MwMGIyZGE3Y2I5MzEyYTc4OWFjYjVjMjliNjc1YmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyspuPwLUjn6aJhGl8vszuMcYixF7
RTirPXb1MkzVg3NhNYYHD1Rt9ZP7+RQyT0/giyAcSS9RMIZGrPIHw8tzJ6dL6QCH
CRPfpDqA7Dy4/8HLhpy59FFAZeaJb8QX80NvCr/XOevj764pyBmrKbW7HXdkrB5u
ydUf9rE4xPYlsh3gcsj+T7iJJHrAAdn5bv+2cakDGXM+YdtCT5fLs5riKRzAhOmS
fGe4giyXSILwwUaOY21C2uq7P/khn4lCvwyapzxEYVXmRIErWacOJRlVnbIveKdc
fElL0MHM7vXUjMRymZHe76jvqRFINUSwZpF+4cyogk8Ds68eqwlvXDBJXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmYP9zACy2ny5MSp4mstcKbZ1u6MB8GA1UdIwQY
MBaAFAdemT52+df6QE1ppstg1L+Y8roeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjE2WlBuYjUxX3BBVFdtbXkyRFV2NWp5dWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iNDU2NmItYmNjOC00ZGY1LWJhMmYt
ZTE1ZTY2NmFkNmMyLzEvQjE2WlBuYjUxX3BBVFdtbXkyRFV2NWp5dWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iNDU2NmItYmNjOC00ZGY1LWJhMmYtZTE1ZTY2NmFkNmMy
LzEvQjE2WlBuYjUxX3BBVFdtbXkyRFV2NWp5dWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZ7QNEvy
2mCne2jX925g7eg6DspQE3BXatv4cK4wKz0yqgSZaiQO3pPZuZ2ZvNgkKj613FB0
jv6AniyCxhCp/Q0WTMptoPx2SE2Fh9phRGEkbbIA3uSkEReQWfvmb/43f4ZkG1FG
zOfm9+xuE7wFuvPMoCf2uOa9Q/nneeHhW3vaDRoJuy5lMXfUCAeRVg6CHI6Bcm8d
eMjz0le9Dapip0GxEEIy3dV2eIvb3Ddh5je7UXA4a6WzChjFuiG+edz9H+F2XduN
p6pC26SDLZfphkO5K4chIW8VzpMePPmCQ5QP+oFlNhYG5SMlaQl2qYWPd7LmKWV+
MXjqTeiaGn3kGA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:40:07 2026 by rpki-client