Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File:                     1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier:          MW+zS8QKQPJQxJhDiN1KVl/j3J4OUVlGuYLLvncXxfQ=
Subject key identifier:   7B:1B:FA:A4:FB:B7:8F:BF:B3:68:D2:23:6F:9B:01:D5:71:5C:A4:EF
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer:       /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial:       019E1D59A9234B451F2F160520AA89639250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number:          1194
Signing time:             Tue 12 May 2026 18:01:15 +0000
Manifest this update:     Tue 12 May 2026 18:01:15 +0000
Manifest next update:     Wed 13 May 2026 18:01:15 +0000
Files and hashes:         1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: V0supfL0/D54RD/RfDzJaXTlaLJG19Ty/BjLWSCmhOc=)
                          2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
                          3: 6mVE9UvtAfo4Qyo5mfFiFR5CYCE.roa (hash: 7jvO+7DiigtIMsr2CKWo896+gSiIAOMeoyBPHjSRSp0=)
                          4: Bh-T23qknIeIH3OoC5e589rNtKc.asa (hash: fzH1wDHUsYlpNJwrEYlI/LoWVi84gSQemumRr98/KQM=)
                          5: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
                          6: k7K2nGDuPiO7Se_nhxH46pUsKyo.asa (hash: xc6+rKQG4W4vPyLrCUrae4qpuB00CQX79V15oGw6dqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:a9:23:4b:45:1f:2f:16:05:20:aa:89:63:92:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
        Validity
            Not Before: May 12 18:01:15 2026 GMT
            Not After : May 13 18:01:15 2026 GMT
        Subject: CN=7b1bfaa4fbb78fbfb368d2236f9b01d5715ca4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:07:c2:29:99:bd:75:1b:36:47:77:c8:86:
                    e8:75:aa:d2:c9:c2:f8:6a:72:aa:4f:fa:0e:d3:a2:
                    40:4a:60:96:70:d0:a8:c2:86:68:18:6c:d1:d5:9f:
                    5b:47:97:45:4e:f2:7a:db:dc:56:88:07:48:db:8c:
                    4e:03:22:e0:80:f7:56:4f:11:74:fb:53:37:5c:38:
                    f2:37:22:ac:da:58:33:f4:77:90:80:60:dd:a0:ec:
                    a8:90:df:a7:9e:92:7d:58:00:49:3b:f2:0d:d0:8f:
                    b2:81:8f:1b:17:bd:c4:f1:aa:0f:fe:36:6d:5a:08:
                    ad:d4:1a:fa:87:48:93:9c:1c:83:54:57:94:b9:28:
                    8d:58:ab:99:07:20:77:5d:d0:47:f4:7d:c9:12:fa:
                    31:9c:96:03:5a:a5:28:cd:c1:84:15:d4:77:7d:0e:
                    be:f3:21:cd:d3:d5:99:7b:19:50:94:f4:ae:00:f2:
                    43:70:3c:28:52:52:37:88:b7:5c:02:4d:23:5b:ea:
                    10:7a:d1:e0:c6:e0:c4:f9:1c:03:df:88:77:63:c1:
                    3f:77:ef:07:a7:b0:91:2f:5a:e7:cb:f1:84:c3:af:
                    38:f6:e5:96:6b:09:17:2e:4d:8e:ed:5d:99:ab:e8:
                    b7:4f:cd:d3:0a:f8:e8:a1:7d:b5:1a:dc:02:a7:92:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1B:FA:A4:FB:B7:8F:BF:B3:68:D2:23:6F:9B:01:D5:71:5C:A4:EF
            X509v3 Authority Key Identifier:
                keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:b0:eb:f9:03:cf:bb:a4:f3:ea:2a:48:e4:99:51:2b:42:db:
         23:5c:62:b3:e9:a0:f4:92:25:72:52:67:6b:fa:6f:e8:84:df:
         b5:a8:c6:ee:00:f7:a6:64:d9:ca:13:69:b6:07:42:65:10:01:
         7b:8c:60:e4:ef:e2:74:2d:79:bc:82:05:cb:36:39:f4:e9:19:
         e1:41:e4:e0:db:32:66:14:c6:d8:a0:45:bf:c6:c6:5e:ea:7b:
         56:8a:9b:25:42:14:7e:cd:94:86:31:b6:88:af:d4:84:de:0e:
         85:59:b9:cd:e9:2d:ef:90:c8:1f:9b:a6:98:a7:d5:1d:84:43:
         15:8a:d4:de:53:3e:54:0b:d0:71:19:54:b5:f0:5f:af:23:25:
         13:b7:09:ff:cc:4e:dc:d8:a2:bd:85:00:80:2d:9c:22:bd:e2:
         98:6b:54:53:20:b0:90:66:b6:23:ee:0f:fc:82:39:ad:e7:3d:
         9b:1f:4f:79:0c:92:29:7b:5b:f5:24:d5:dc:63:4d:6d:d4:65:
         24:4a:4e:90:8d:45:89:7a:16:7f:07:56:de:ae:62:18:59:3c:
         67:c2:3c:b3:99:82:9c:76:d1:a3:9c:3c:f0:2c:30:e9:d4:da:
         39:31:7c:1b:96:18:00:51:ec:7f:75:06:fc:e2:d7:01:0f:f3:
         54:21:62:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWakjS0UfLxYFIKqJY5JQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz
MjA5MjgwHhcNMjYwNTEyMTgwMTE1WhcNMjYwNTEzMTgwMTE1WjAzMTEwLwYDVQQD
Eyg3YjFiZmFhNGZiYjc4ZmJmYjM2OGQyMjM2ZjliMDFkNTcxNWNhNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNkHwimZvXUbNkd3yIbodarSycL4
anKqT/oO06JASmCWcNCowoZoGGzR1Z9bR5dFTvJ629xWiAdI24xOAyLggPdWTxF0
+1M3XDjyNyKs2lgz9HeQgGDdoOyokN+nnpJ9WABJO/IN0I+ygY8bF73E8aoP/jZt
Wgit1Br6h0iTnByDVFeUuSiNWKuZByB3XdBH9H3JEvoxnJYDWqUozcGEFdR3fQ6+
8yHN09WZexlQlPSuAPJDcDwoUlI3iLdcAk0jW+oQetHgxuDE+RwD34h3Y8E/d+8H
p7CRL1rny/GEw6849uWWawkXLk2O7V2Zq+i3T83TCvjooX21GtwCp5J/5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsb+qT7t4+/s2jSI2+bAdVxXKTvMB8GA1UdIwQY
MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt
ZDRlODgyMDgzZTRmLzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm
LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxrDr+QPP
u6Tz6ipI5JlRK0LbI1xis+mg9JIlclJna/pv6ITftajG7gD3pmTZyhNptgdCZRAB
e4xg5O/idC15vIIFyzY59OkZ4UHk4NsyZhTG2KBFv8bGXup7VoqbJUIUfs2UhjG2
iK/UhN4OhVm5zekt75DIH5ummKfVHYRDFYrU3lM+VAvQcRlUtfBfryMlE7cJ/8xO
3NiivYUAgC2cIr3imGtUUyCwkGa2I+4P/II5rec9mx9PeQySKXtb9STV3GNNbdRl
JEpOkI1FiXoWfwdW3q5iGFk8Z8I8s5mCnHbRo5w88Cww6dTaOTF8G5YYAFHsf3UG
/OLXAQ/zVCFi2g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:40:41 2026 by rpki-client