Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
File:                     Ben594wsu8X6CLm4nwoR0rC6Rzw.mft (raw, json)
Hash identifier:          Dz5eEYh2jxt8fdjYannt2Dik5NPQOX+IQ6hdE6etzJk=
Subject key identifier:   6C:B9:8E:2D:5E:B5:15:B4:7C:8D:6D:90:C3:2E:64:D0:9E:EB:C6:C5
Authority key identifier: 05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C
Certificate issuer:       /CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
Certificate serial:       019E1E6CB94E3FD66C46C440639E9FC3EFE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
Manifest number:          028E
Signing time:             Tue 12 May 2026 23:01:42 +0000
Manifest this update:     Tue 12 May 2026 23:01:42 +0000
Manifest next update:     Wed 13 May 2026 23:01:42 +0000
Files and hashes:         1: Ben594wsu8X6CLm4nwoR0rC6Rzw.crl (hash: 65dwKRlpzFwQqXxouXyGTiDpGcBD+k+iVse3kFp60oI=)
                          2: vSLbgxeH91r7M2JRpNUpQwdC5-I.roa (hash: AdNOFRCrmnc/Q9ZTTzxNg6TKfbh1MeWTSjQqXPic1XU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:b9:4e:3f:d6:6c:46:c4:40:63:9e:9f:c3:ef:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
        Validity
            Not Before: May 12 23:01:42 2026 GMT
            Not After : May 13 23:01:42 2026 GMT
        Subject: CN=6cb98e2d5eb515b47c8d6d90c32e64d09eebc6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4a:f8:b4:79:31:12:87:34:db:83:17:f4:11:
                    b0:05:fb:e5:d8:11:4e:60:c5:ba:aa:f8:93:10:aa:
                    ba:84:cd:0a:27:67:21:7d:29:fc:bd:43:0b:8d:ad:
                    9e:89:7e:28:23:be:b7:0c:d5:16:7b:5e:8e:57:dc:
                    81:41:08:26:39:55:60:e3:dc:95:e9:5b:d8:e7:c6:
                    d0:9f:1b:fa:21:9a:bf:ce:87:08:a3:d4:3f:fc:4e:
                    86:a5:94:f7:ac:9e:aa:65:da:8d:33:0c:f4:a7:7a:
                    f5:8b:f4:ca:df:35:ae:01:4b:21:35:4f:62:b3:a9:
                    fd:d0:36:93:7f:d4:3f:58:3f:b7:a4:3d:2f:40:22:
                    af:d0:54:15:69:05:89:f9:74:32:9d:bf:09:21:7c:
                    8d:5c:d0:96:76:98:1a:a6:7e:5e:7e:b3:50:e1:b9:
                    31:7c:65:66:d2:24:af:cd:4c:c0:cb:77:6b:bb:fe:
                    2c:cb:d9:fb:36:94:90:14:79:f7:5e:fe:46:7e:a6:
                    7b:7f:a4:dd:ec:42:4d:4f:a7:e8:b7:9e:c0:e0:93:
                    66:52:d9:0f:0d:c2:b5:21:d2:b1:c0:8d:19:d4:d1:
                    10:20:ea:c2:13:73:df:d5:2f:60:08:1a:7b:88:70:
                    00:df:7c:0b:88:21:5f:79:3a:8c:b1:10:19:f5:c1:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B9:8E:2D:5E:B5:15:B4:7C:8D:6D:90:C3:2E:64:D0:9E:EB:C6:C5
            X509v3 Authority Key Identifier:
                keyid:05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:00:e1:00:16:d5:97:61:6a:81:71:e2:5f:5d:07:ea:15:a8:
         a3:c8:be:4a:c0:cf:4a:a3:f4:0f:8f:22:5a:69:d6:03:4b:fe:
         d9:6c:af:d5:be:64:7b:2b:1a:e4:a3:c0:80:21:97:be:3c:59:
         57:46:b9:6b:8b:c3:c5:cc:50:e6:d1:cd:03:d1:85:f1:70:cc:
         24:18:06:10:06:a3:52:6c:ef:c6:3a:af:55:39:fa:01:f2:b4:
         6b:9c:53:9f:44:43:41:1b:cb:47:ea:62:e0:6b:32:46:75:0a:
         92:f5:7d:ef:fa:18:fd:da:57:82:de:29:d3:b0:59:f9:d0:b4:
         ee:c2:d0:d7:77:34:ba:e3:d4:f4:df:c1:36:81:0c:8f:7b:c1:
         bf:dc:ac:f5:d3:10:10:c8:a9:c8:7a:21:52:24:69:31:67:51:
         e6:bc:a9:b1:74:b6:04:11:84:eb:db:89:4e:61:9b:43:1a:06:
         8b:72:34:f0:5a:85:0e:03:dc:8f:7c:07:16:ba:54:43:b6:d4:
         cd:a2:85:27:0d:26:e2:c4:21:df:23:16:6a:b7:bc:27:93:78:
         99:ec:02:d5:31:7a:b0:44:02:e2:77:0a:15:f2:9f:aa:b6:a2:
         ec:3b:b0:b4:c0:73:07:91:bb:cb:e4:c9:56:0e:d9:7c:25:66:
         48:90:c4:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebLlOP9ZsRsRAY56fw+/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZTlmOWY3OGMyY2JiYzVmYTA4YjliODlmMGExMWQyYjBi
YTQ3M2MwHhcNMjYwNTEyMjMwMTQyWhcNMjYwNTEzMjMwMTQyWjAzMTEwLwYDVQQD
Eyg2Y2I5OGUyZDVlYjUxNWI0N2M4ZDZkOTBjMzJlNjRkMDllZWJjNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Er4tHkxEoc024MX9BGwBfvl2BFO
YMW6qviTEKq6hM0KJ2chfSn8vUMLja2eiX4oI763DNUWe16OV9yBQQgmOVVg49yV
6VvY58bQnxv6IZq/zocIo9Q//E6GpZT3rJ6qZdqNMwz0p3r1i/TK3zWuAUshNU9i
s6n90DaTf9Q/WD+3pD0vQCKv0FQVaQWJ+XQynb8JIXyNXNCWdpgapn5efrNQ4bkx
fGVm0iSvzUzAy3dru/4sy9n7NpSQFHn3Xv5GfqZ7f6Td7EJNT6fot57A4JNmUtkP
DcK1IdKxwI0Z1NEQIOrCE3Pf1S9gCBp7iHAA33wLiCFfeTqMsRAZ9cGXvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGy5ji1etRW0fI1tkMMuZNCe68bFMB8GA1UdIwQY
MBaAFAXp+feMLLvF+gi5uJ8KEdKwukc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVuNTk0d3N1OFg2Q0xtNG53b1IwckM2Unp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83NjUzOGMtZGY1YS00YTZhLTliODYt
YTZhYjk3YTBmNDQ1LzEvQmVuNTk0d3N1OFg2Q0xtNG53b1IwckM2Unp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83NjUzOGMtZGY1YS00YTZhLTliODYtYTZhYjk3YTBmNDQ1
LzEvQmVuNTk0d3N1OFg2Q0xtNG53b1IwckM2Unp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwDhABbV
l2FqgXHiX10H6hWoo8i+SsDPSqP0D48iWmnWA0v+2Wyv1b5keysa5KPAgCGXvjxZ
V0a5a4vDxcxQ5tHNA9GF8XDMJBgGEAajUmzvxjqvVTn6AfK0a5xTn0RDQRvLR+pi
4GsyRnUKkvV97/oY/dpXgt4p07BZ+dC07sLQ13c0uuPU9N/BNoEMj3vBv9ys9dMQ
EMipyHohUiRpMWdR5rypsXS2BBGE69uJTmGbQxoGi3I08FqFDgPcj3wHFrpUQ7bU
zaKFJw0m4sQh3yMWare8J5N4mewC1TF6sEQC4ncKFfKfqrai7DuwtMBzB5G7y+TJ
Vg7ZfCVmSJDEGA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:12:26 2026 by rpki-client