Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File:                     bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier:          0gRA5B1E3BGADfUAMRo00BoDotpk1FxkNWjwwahsjwA=
Subject key identifier:   EB:7E:3D:C7:19:40:DC:F2:B0:FE:10:EC:CA:76:D6:16:F4:91:77:22
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer:       /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial:       019E1DC718040BC78C7A7BE849E6A9A74F7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number:          1078
Signing time:             Tue 12 May 2026 20:00:47 +0000
Manifest this update:     Tue 12 May 2026 20:00:47 +0000
Manifest next update:     Wed 13 May 2026 20:00:47 +0000
Files and hashes:         1: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: TzxK1qlyRqx7mUGhCaUY7hWnHSpgKh03TjdgjAnz2BU=)
                          2: iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa (hash: FB/BMBEamJIqVqVJfEJTOhtef+eT9KEQL0toFCPu1aM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:18:04:0b:c7:8c:7a:7b:e8:49:e6:a9:a7:4f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
        Validity
            Not Before: May 12 20:00:47 2026 GMT
            Not After : May 13 20:00:47 2026 GMT
        Subject: CN=eb7e3dc71940dcf2b0fe10ecca76d616f4917722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:c0:f0:49:ec:9e:90:10:45:99:20:75:f3:
                    34:99:18:d8:1e:55:8e:fc:0a:58:56:fd:8f:1d:06:
                    22:ff:28:d1:cf:0a:4b:f2:22:94:cd:33:4d:ce:0d:
                    ba:7d:b3:69:56:69:6c:00:e0:e4:85:7f:d8:81:76:
                    32:be:e9:3b:93:a3:8a:9b:89:82:5d:59:81:70:f1:
                    87:13:c7:81:ca:7d:2d:0c:91:87:70:0c:74:82:cf:
                    97:4c:b4:32:16:06:3c:87:f4:29:3b:c9:2c:37:b7:
                    fb:16:fa:9a:84:bc:21:02:38:de:93:b0:bc:fd:a9:
                    56:88:d7:81:7c:de:47:b3:9a:eb:78:2b:1a:58:d7:
                    26:9b:90:5a:cf:49:b9:d7:6d:a0:e5:23:2c:08:7c:
                    23:22:c5:f9:c7:cd:e7:2b:22:1a:ba:e7:33:4f:ee:
                    32:91:9a:fe:64:ff:b5:2e:b3:40:2e:7f:32:7a:37:
                    62:51:34:fc:99:3f:c0:d0:f6:9d:e1:56:29:d8:b6:
                    e4:bc:be:b6:99:36:89:b1:4c:1d:07:94:05:33:a2:
                    1a:15:70:f4:9e:24:ee:5e:7d:cd:42:a7:1f:57:ef:
                    ef:68:de:9a:55:85:9c:fe:47:12:c0:87:fd:31:70:
                    8d:66:8f:a7:c6:91:7e:ef:da:d3:18:f4:d8:4d:da:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7E:3D:C7:19:40:DC:F2:B0:FE:10:EC:CA:76:D6:16:F4:91:77:22
            X509v3 Authority Key Identifier:
                keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b6:73:2a:80:8f:5f:8c:89:ed:01:41:50:c6:b6:8d:c2:dd:
         00:6d:16:b0:75:a5:05:72:02:d5:24:94:36:8a:aa:ec:e3:82:
         ac:07:92:3d:3d:53:40:59:3a:13:7e:87:ad:a7:c2:3d:f8:3c:
         8f:44:10:ad:71:72:48:1b:9c:44:28:ec:60:aa:b7:a9:84:87:
         9b:28:dd:3f:30:11:38:c6:2d:2c:ba:84:3a:f2:3f:22:e4:8d:
         ea:af:02:1a:4c:75:95:66:37:ec:40:05:8b:f4:4e:08:7a:5d:
         a6:73:ee:5e:ce:54:1d:ab:be:52:49:90:ca:41:1d:3a:ff:17:
         53:a1:c5:d7:8c:92:c3:5d:41:56:02:c8:d2:c2:83:82:9e:83:
         3e:e6:4c:e1:84:20:a5:ca:7a:67:3c:12:e1:f1:8d:eb:28:dc:
         97:e8:ff:48:d2:88:55:96:5b:2b:19:de:96:a0:f5:57:fe:5b:
         9e:e0:ac:df:48:c6:4f:9d:ca:38:5f:d5:c8:19:69:39:43:b0:
         06:22:aa:f4:eb:ab:a4:e7:53:84:4f:8c:b4:f9:a5:6f:29:49:
         10:40:9d:ec:70:46:ac:17:65:b7:22:0d:d1:ad:ca:b4:f5:7c:
         03:0f:5c:72:a3:22:e3:a0:d8:da:29:62:a4:88:93:e1:f8:1d:
         e2:9f:2d:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxxgEC8eMenvoSeapp098MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZWZhNDExZjA5MzZhNDY2ZDg0MWVjMjkwY2Q4MGNjNTUw
YTdmNmUwHhcNMjYwNTEyMjAwMDQ3WhcNMjYwNTEzMjAwMDQ3WjAzMTEwLwYDVQQD
EyhlYjdlM2RjNzE5NDBkY2YyYjBmZTEwZWNjYTc2ZDYxNmY0OTE3NzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwzA8EnsnpAQRZkgdfM0mRjYHlWO
/ApYVv2PHQYi/yjRzwpL8iKUzTNNzg26fbNpVmlsAODkhX/YgXYyvuk7k6OKm4mC
XVmBcPGHE8eByn0tDJGHcAx0gs+XTLQyFgY8h/QpO8ksN7f7FvqahLwhAjjek7C8
/alWiNeBfN5Hs5rreCsaWNcmm5Baz0m5122g5SMsCHwjIsX5x83nKyIauuczT+4y
kZr+ZP+1LrNALn8yejdiUTT8mT/A0Pad4VYp2LbkvL62mTaJsUwdB5QFM6IaFXD0
niTuXn3NQqcfV+/vaN6aVYWc/kcSwIf9MXCNZo+nxpF+79rTGPTYTdpiQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOt+PccZQNzysP4Q7Mp21hb0kXciMB8GA1UdIwQY
MBaAFGzvpBHwk2pGbYQewpDNgMxVCn9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEt
ZTgxMWQ5NDA3ZTdhLzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEtZTgxMWQ5NDA3ZTdh
LzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrZzKoCP
X4yJ7QFBUMa2jcLdAG0WsHWlBXIC1SSUNoqq7OOCrAeSPT1TQFk6E36HrafCPfg8
j0QQrXFySBucRCjsYKq3qYSHmyjdPzAROMYtLLqEOvI/IuSN6q8CGkx1lWY37EAF
i/ROCHpdpnPuXs5UHau+UkmQykEdOv8XU6HF14ySw11BVgLI0sKDgp6DPuZM4YQg
pcp6ZzwS4fGN6yjcl+j/SNKIVZZbKxnelqD1V/5bnuCs30jGT53KOF/VyBlpOUOw
BiKq9OurpOdThE+MtPmlbylJEECd7HBGrBdltyIN0a3KtPV8Aw9ccqMi46DY2ili
pIiT4fgd4p8tUA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:41:30 2026 by rpki-client