Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File:                     AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier:          LnlcNDuVZk/qFDfFXInrjLMBtVQf6okBeWJEu//c2+Q=
Subject key identifier:   75:9E:73:41:B9:C7:29:78:4A:5E:2E:B0:87:EE:3D:79:51:CB:6D:E7
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer:       /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial:       019E1D22E75603E16ACB3BB9DF05402454EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number:          06BE
Signing time:             Tue 12 May 2026 17:01:27 +0000
Manifest this update:     Tue 12 May 2026 17:01:27 +0000
Manifest next update:     Wed 13 May 2026 17:01:27 +0000
Files and hashes:         1: 0N508Xe1lkHiB3GV4gBTEAMYSg0.roa (hash: 9ysDCSkav8KkWk0caqcKxtu4CxhKYt/csAkRzD0sTbY=)
                          2: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: U1oVkjXsGyhV0y41gt3JkKz2hhgJmU6Lgh6xQyFVO5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:e7:56:03:e1:6a:cb:3b:b9:df:05:40:24:54:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
        Validity
            Not Before: May 12 17:01:27 2026 GMT
            Not After : May 13 17:01:27 2026 GMT
        Subject: CN=759e7341b9c729784a5e2eb087ee3d7951cb6de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:98:db:14:a6:2c:ab:d3:58:06:46:d9:cb:
                    2b:58:da:fd:93:c3:57:e4:ce:ea:7e:3f:a5:51:5d:
                    de:ab:e5:e8:e5:34:00:3c:53:cd:87:85:ff:61:80:
                    29:9f:c0:de:04:f8:43:7d:a8:4c:5b:7b:79:74:ff:
                    16:ea:03:ce:4d:71:91:af:0f:64:d0:bc:0a:2b:92:
                    8b:ee:c8:ec:d9:96:6e:91:6a:f0:73:6e:2d:70:ec:
                    3c:17:0d:c7:45:ce:d4:8c:c3:ab:32:fc:b1:d1:28:
                    8e:de:ca:8a:b9:9e:5a:cd:13:e8:ec:c9:0d:3e:8f:
                    d7:86:a2:7d:ce:c7:f7:3b:16:36:fb:af:8f:83:aa:
                    fa:16:26:79:05:43:1a:64:98:c8:59:bb:42:67:f6:
                    c0:b4:87:24:7e:ec:01:0c:48:74:aa:da:45:a9:1d:
                    51:40:93:06:8c:3f:98:fd:23:99:6d:67:b7:2c:02:
                    3a:f2:32:0a:6a:da:fd:b6:ec:35:0a:ac:6a:9d:08:
                    d1:e5:a7:e2:ff:e2:b8:b1:6e:5b:05:03:90:e4:8c:
                    2d:ef:39:85:f2:ac:26:54:21:3a:13:d3:34:c4:14:
                    63:b1:b2:87:be:a4:f7:12:f6:d6:64:4b:4c:e6:22:
                    fd:ab:8b:b0:67:2b:ab:4c:65:35:39:8c:c1:8d:9a:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9E:73:41:B9:C7:29:78:4A:5E:2E:B0:87:EE:3D:79:51:CB:6D:E7
            X509v3 Authority Key Identifier:
                keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:87:9b:7c:fb:d9:70:13:87:d8:e1:b2:9b:5f:f9:40:33:ea:
         25:77:18:fb:08:a0:a0:74:e9:5e:2d:c9:3d:4e:69:fa:a9:f4:
         c5:6c:2c:90:d5:18:ee:24:8f:7d:f5:f4:23:3a:27:7c:71:28:
         b3:6c:73:43:d6:6c:30:8e:35:fe:0f:0e:e5:2e:3f:c5:30:72:
         99:b9:0c:05:64:93:85:62:a5:b9:dc:b4:bc:56:ae:a4:06:8e:
         85:3f:7a:7e:bb:a7:e6:c2:c2:d9:eb:50:63:bb:eb:1f:9d:66:
         81:75:fe:cb:ea:eb:26:7d:4d:47:21:e9:be:a8:80:fe:bb:5d:
         80:99:cc:4a:5b:58:c3:21:07:e6:7b:a2:5d:05:e1:10:5b:a7:
         1d:da:7d:9b:1f:af:67:db:2b:d4:fd:24:a0:ac:6c:34:26:f2:
         45:c3:e1:0b:11:4d:f7:e4:03:ad:d8:2d:cb:d2:56:d5:5f:03:
         e0:29:d6:a3:7a:75:2a:44:1e:5a:43:75:7a:90:fb:de:0f:eb:
         df:98:cb:c5:6d:87:03:3e:0c:88:e1:57:b9:e1:bb:c9:57:15:
         40:71:5f:8b:3b:25:fe:aa:f7:03:3d:27:29:c0:58:d8:bf:5e:
         e6:d9:43:93:47:66:a5:62:c9:f8:17:91:76:70:78:d1:ec:a8:
         a3:71:9e:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIudWA+Fqyzu53wVAJFTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMDQ5NjA0NzM3Yzc4YmQyNGRiYjI1ZWIzMzZmNGE0MTZl
NjQ1ZjYwHhcNMjYwNTEyMTcwMTI3WhcNMjYwNTEzMTcwMTI3WjAzMTEwLwYDVQQD
Eyg3NTllNzM0MWI5YzcyOTc4NGE1ZTJlYjA4N2VlM2Q3OTUxY2I2ZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL2Y2xSmLKvTWAZG2csrWNr9k8NX
5M7qfj+lUV3eq+Xo5TQAPFPNh4X/YYApn8DeBPhDfahMW3t5dP8W6gPOTXGRrw9k
0LwKK5KL7sjs2ZZukWrwc24tcOw8Fw3HRc7UjMOrMvyx0SiO3sqKuZ5azRPo7MkN
Po/XhqJ9zsf3OxY2+6+Pg6r6FiZ5BUMaZJjIWbtCZ/bAtIckfuwBDEh0qtpFqR1R
QJMGjD+Y/SOZbWe3LAI68jIKatr9tuw1CqxqnQjR5afi/+K4sW5bBQOQ5Iwt7zmF
8qwmVCE6E9M0xBRjsbKHvqT3EvbWZEtM5iL9q4uwZyurTGU1OYzBjZqKuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWec0G5xyl4Sl4usIfuPXlRy23nMB8GA1UdIwQY
MBaAFAMElgRzfHi9JNuyXrM29KQW5kX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zNWI0YzUtMjk3Yi00MjBjLTgyMmEt
MTY5ZTUzN2E4OTBjLzEvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zNWI0YzUtMjk3Yi00MjBjLTgyMmEtMTY5ZTUzN2E4OTBj
LzEvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApoebfPvZ
cBOH2OGym1/5QDPqJXcY+wigoHTpXi3JPU5p+qn0xWwskNUY7iSPffX0IzonfHEo
s2xzQ9ZsMI41/g8O5S4/xTBymbkMBWSThWKludy0vFaupAaOhT96frun5sLC2etQ
Y7vrH51mgXX+y+rrJn1NRyHpvqiA/rtdgJnMSltYwyEH5nuiXQXhEFunHdp9mx+v
Z9sr1P0koKxsNCbyRcPhCxFN9+QDrdgty9JW1V8D4CnWo3p1KkQeWkN1epD73g/r
35jLxW2HAz4MiOFXueG7yVcVQHFfizsl/qr3Az0nKcBY2L9e5tlDk0dmpWLJ+BeR
dnB40eyoo3GeTA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:17:56 2026 by rpki-client