Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File:                     BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier:          MmwHOunOUNuUsA/kbst3aVF/pKPy/4ospARTmADFx34=
Subject key identifier:   FB:FF:3D:75:8F:81:1A:87:64:62:A5:DE:36:4B:84:84:1A:F4:2B:E2
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer:       /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial:       019E1D91041B8302772783773ABF536FB35E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 19:01:43 +0000
Manifest this update:     Tue 12 May 2026 19:01:43 +0000
Manifest next update:     Wed 13 May 2026 19:01:43 +0000
Files and hashes:         1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: tcWWfEZujZVph4RmLbtyB3fl9GdTdu47Bu3JODQwmmo=)
                          2: a32MUCBEBD7yImaxmD5xprVyEpU.asa (hash: LEIQqHPZ7Deh8zzcjOaSyrr8jOCT4jyKKlMIZpGKUJc=)
                          3: hSa-jL7A0Cvb7swNmNrYjsj_n70.roa (hash: TUV2Alqz5JkF7MwZ8HViCcGRzdJK6kTlEyLaHmA8NLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:04:1b:83:02:77:27:83:77:3a:bf:53:6f:b3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
        Validity
            Not Before: May 12 19:01:43 2026 GMT
            Not After : May 13 19:01:43 2026 GMT
        Subject: CN=fbff3d758f811a876462a5de364b84841af42be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:e2:29:ce:ae:8e:0e:c3:df:56:fe:80:00:
                    f6:5f:85:4a:8c:37:09:f1:6d:45:07:e2:38:ed:56:
                    fe:a9:a2:86:39:cd:7c:b6:c3:96:1f:ba:89:17:f1:
                    a6:52:32:6c:d1:5d:00:3a:59:df:be:56:37:5e:1e:
                    42:6f:9e:d6:50:a3:7f:47:92:b7:e6:9a:84:ef:ee:
                    90:aa:80:2c:66:bc:28:8d:25:77:9d:f0:aa:d4:1e:
                    8f:98:51:43:dd:de:79:a0:2d:a6:9f:17:e0:c5:04:
                    bd:fc:5c:32:1c:d2:04:84:aa:5c:b9:91:1d:f1:77:
                    c9:98:bc:5f:c9:a9:76:04:bc:1a:fe:cc:55:71:56:
                    b5:8f:7f:c4:07:2a:23:f0:a9:06:35:60:31:fe:1e:
                    b7:8a:05:d5:80:d2:17:9f:10:4a:e0:23:5e:ca:8b:
                    d3:29:fb:a0:95:a6:47:29:c6:7e:2d:39:43:e7:f2:
                    a3:f7:34:05:43:d1:c6:6a:2f:eb:35:b9:f9:0c:a9:
                    6d:d3:f1:5a:f0:db:ba:0e:c3:13:e0:03:18:fa:46:
                    a9:67:ef:09:e4:66:1a:fe:46:3c:83:0e:28:6c:ef:
                    a8:ba:d3:9a:d7:a0:9a:38:a4:53:9d:ec:38:fa:76:
                    07:11:91:aa:99:eb:05:63:7c:bb:c4:77:65:88:ab:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FF:3D:75:8F:81:1A:87:64:62:A5:DE:36:4B:84:84:1A:F4:2B:E2
            X509v3 Authority Key Identifier:
                keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:02:ba:4d:ff:01:04:8f:94:b5:b1:7a:9b:53:5f:30:b4:94:
         87:bd:22:94:00:83:4c:bd:9a:c3:be:f5:e6:53:17:61:95:e1:
         46:e0:60:fb:e9:33:c3:90:30:b9:fd:9d:d4:d0:1e:f9:a6:0a:
         14:58:ed:63:b9:90:62:79:5e:92:98:5b:d9:a7:30:f8:da:62:
         c7:e2:60:0e:e2:fd:a0:76:44:a1:81:3b:cd:86:1c:ca:23:c0:
         5a:77:7a:b5:62:cb:0b:82:37:62:bb:fc:64:39:ce:48:15:6e:
         ae:ce:fc:aa:35:6a:77:7c:3e:8f:cb:0f:85:23:bb:60:ab:6a:
         89:c8:ed:84:94:42:7b:9c:f7:66:c1:ed:fa:47:60:89:28:83:
         11:1b:18:d7:df:2f:40:90:94:10:e5:a0:b6:86:a3:93:5c:f4:
         75:01:d1:b2:9c:8a:03:44:e0:72:84:43:39:7e:bc:b4:0a:18:
         3e:13:e2:97:df:a1:d2:55:2b:0b:e4:c2:07:30:d5:bd:8e:e0:
         b8:c8:97:a3:c6:b8:43:bb:8d:a3:d0:ef:d1:c7:14:8a:53:3a:
         ed:12:3b:35:ff:7e:2d:85:e2:b2:cb:87:cd:aa:ad:2c:4c:2c:
         fd:ad:db:8b:bf:3b:db:27:52:84:89:21:e9:0a:e3:0b:3e:0d:
         a7:5f:4b:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkQQbgwJ3J4N3Or9Tb7NeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YzA5YzQxZDIzODk2YjJkNTQyODE4MjYyM2Y4OGZhNjc2
ZTZjOTAwHhcNMjYwNTEyMTkwMTQzWhcNMjYwNTEzMTkwMTQzWjAzMTEwLwYDVQQD
EyhmYmZmM2Q3NThmODExYTg3NjQ2MmE1ZGUzNjRiODQ4NDFhZjQyYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVniKc6ujg7D31b+gAD2X4VKjDcJ
8W1FB+I47Vb+qaKGOc18tsOWH7qJF/GmUjJs0V0AOlnfvlY3Xh5Cb57WUKN/R5K3
5pqE7+6QqoAsZrwojSV3nfCq1B6PmFFD3d55oC2mnxfgxQS9/FwyHNIEhKpcuZEd
8XfJmLxfyal2BLwa/sxVcVa1j3/EByoj8KkGNWAx/h63igXVgNIXnxBK4CNeyovT
KfuglaZHKcZ+LTlD5/Kj9zQFQ9HGai/rNbn5DKlt0/Fa8Nu6DsMT4AMY+kapZ+8J
5GYa/kY8gw4obO+outOa16CaOKRTnew4+nYHEZGqmesFY3y7xHdliKtwQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPv/PXWPgRqHZGKl3jZLhIQa9CviMB8GA1UdIwQY
MBaAFAXAnEHSOJay1UKBgmI/iPpnbmyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMt
YjMzNDQwYWFhYjcyLzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMtYjMzNDQwYWFhYjcy
LzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxQK6Tf8B
BI+UtbF6m1NfMLSUh70ilACDTL2aw7715lMXYZXhRuBg++kzw5Awuf2d1NAe+aYK
FFjtY7mQYnlekphb2acw+Npix+JgDuL9oHZEoYE7zYYcyiPAWnd6tWLLC4I3Yrv8
ZDnOSBVurs78qjVqd3w+j8sPhSO7YKtqicjthJRCe5z3ZsHt+kdgiSiDERsY198v
QJCUEOWgtoajk1z0dQHRspyKA0TgcoRDOX68tAoYPhPil9+h0lUrC+TCBzDVvY7g
uMiXo8a4Q7uNo9Dv0ccUilM67RI7Nf9+LYXissuHzaqtLEws/a3bi7872ydShIkh
6QrjCz4Np19LtA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:12:30 2026 by rpki-client