Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File:                     bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier:          AtTNhqkBanHWN1N+ivJwR7Uc5sd/FEk3GgZs7Ls0Vu8=
Subject key identifier:   90:85:75:95:E9:7F:67:7D:A8:F1:05:C1:F5:65:E5:F5:FB:14:37:CD
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer:       /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial:       019E20239E54E02408DA90EE65AE523B7F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number:          0CCC
Signing time:             Wed 13 May 2026 07:01:05 +0000
Manifest this update:     Wed 13 May 2026 07:01:05 +0000
Manifest next update:     Thu 14 May 2026 07:01:05 +0000
Files and hashes:         1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: PQte7+VoN5NVReXBtvE/h+jcv7hP1qR7E7PMSAqOjeA=)
                          2: gq6lk47TA17e6REZA-zN8if3ODs.roa (hash: j1zLYjz1yht8bRIjCyc5xCvjTG5lN3f/7Pg2PlyRjnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:9e:54:e0:24:08:da:90:ee:65:ae:52:3b:7f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
        Validity
            Not Before: May 13 07:01:05 2026 GMT
            Not After : May 14 07:01:05 2026 GMT
        Subject: CN=90857595e97f677da8f105c1f565e5f5fb1437cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:bc:d7:97:4b:51:98:e0:d3:c8:f9:84:77:
                    91:c3:13:fd:93:bf:82:33:49:f5:b3:91:14:50:48:
                    56:37:02:45:53:35:10:f4:52:da:4d:02:52:49:4b:
                    1c:82:24:d0:4f:5e:e1:3c:7d:45:5c:55:66:61:3f:
                    da:4e:ca:0b:dc:0e:7d:d6:5b:22:c6:cc:5a:bc:c1:
                    bf:6a:73:e7:9c:95:a9:a6:3e:bb:f0:ac:9a:0b:9a:
                    5d:5d:91:d9:80:7f:fc:e4:3e:b5:60:b1:96:0a:bc:
                    47:8b:e1:e9:fa:9e:01:60:bb:51:ef:59:13:f4:df:
                    2a:21:99:81:0b:63:38:3d:ba:32:17:3e:b8:ed:18:
                    79:e2:37:82:67:be:b9:77:fa:1a:42:5c:bc:97:f6:
                    c8:98:d3:80:03:b6:af:fc:5a:77:5d:90:94:11:d1:
                    34:65:f2:19:ef:9f:07:0c:e3:d6:55:ce:8a:fa:87:
                    dc:61:d1:cc:eb:68:be:3d:16:32:2b:cf:a0:1e:2b:
                    01:77:fb:f6:34:05:26:df:24:1a:3f:b4:4c:8a:17:
                    a8:ae:f9:5f:f6:58:5a:06:89:24:74:8e:f1:0e:14:
                    c2:b9:4b:ba:45:5b:dd:72:08:1c:2a:e2:1d:08:f0:
                    5d:5e:85:ea:3f:98:2d:de:46:6d:5d:57:b7:1d:fc:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:85:75:95:E9:7F:67:7D:A8:F1:05:C1:F5:65:E5:F5:FB:14:37:CD
            X509v3 Authority Key Identifier:
                keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:83:d1:c6:83:bf:1f:c8:d9:25:e0:a3:e8:c3:55:4e:3a:10:
         2d:16:0f:b0:7e:3b:65:1d:b7:0e:eb:8e:04:99:80:1f:12:d1:
         88:d2:19:43:68:88:99:b6:70:3f:47:02:19:df:e0:ef:94:12:
         8f:5e:d0:26:8a:cc:ee:2f:07:83:88:af:ed:1d:3d:c9:2d:ce:
         60:0a:ef:c9:9c:bd:69:5e:3a:69:6f:7c:02:e4:ca:46:a3:aa:
         9e:de:68:80:03:91:b4:4c:7e:8b:09:d0:f8:6f:f1:bd:96:42:
         6e:32:30:71:83:8a:e1:b3:e2:f1:75:99:e4:ff:94:15:94:8e:
         7b:73:c5:9e:ce:68:22:27:12:f3:55:30:bb:4c:aa:0c:45:ad:
         e0:1e:28:f2:19:fc:ed:d1:5c:37:a9:c1:c6:59:fb:0f:5e:97:
         82:cd:29:2d:da:06:3d:c8:67:c8:de:96:a6:db:dc:ee:c2:1d:
         7f:b4:03:fc:78:c2:59:01:0d:c2:09:7f:04:34:1e:53:6b:3f:
         6e:4d:a8:98:2e:17:e5:e7:a8:a3:84:4c:f3:13:59:49:04:61:
         2b:4c:6e:c0:71:32:77:3f:7f:0a:76:d5:c3:67:ff:0a:c3:d0:
         f5:42:df:aa:e7:ed:4a:60:07:74:5b:bb:7f:3d:da:74:0c:c5:
         df:f8:d9:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI55U4CQI2pDuZa5SO387MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYWYxNmRjYzU1MGNmODFlY2YwZjgxOTUyMTc5YTA0ODEz
MDg3N2EwHhcNMjYwNTEzMDcwMTA1WhcNMjYwNTE0MDcwMTA1WjAzMTEwLwYDVQQD
Eyg5MDg1NzU5NWU5N2Y2NzdkYThmMTA1YzFmNTY1ZTVmNWZiMTQzN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1O815dLUZjg08j5hHeRwxP9k7+C
M0n1s5EUUEhWNwJFUzUQ9FLaTQJSSUscgiTQT17hPH1FXFVmYT/aTsoL3A591lsi
xsxavMG/anPnnJWppj678KyaC5pdXZHZgH/85D61YLGWCrxHi+Hp+p4BYLtR71kT
9N8qIZmBC2M4PboyFz647Rh54jeCZ765d/oaQly8l/bImNOAA7av/Fp3XZCUEdE0
ZfIZ758HDOPWVc6K+ofcYdHM62i+PRYyK8+gHisBd/v2NAUm3yQaP7RMiheorvlf
9lhaBokkdI7xDhTCuUu6RVvdcggcKuIdCPBdXoXqP5gt3kZtXVe3HfwW0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCFdZXpf2d9qPEFwfVl5fX7FDfNMB8GA1UdIwQY
MBaAFG6vFtzFUM+B7PD4GVIXmgSBMId6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEt
NGZhMzQ4MWE0N2UxLzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEtNGZhMzQ4MWE0N2Ux
LzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYPRxoO/
H8jZJeCj6MNVTjoQLRYPsH47ZR23DuuOBJmAHxLRiNIZQ2iImbZwP0cCGd/g75QS
j17QJorM7i8Hg4iv7R09yS3OYArvyZy9aV46aW98AuTKRqOqnt5ogAORtEx+iwnQ
+G/xvZZCbjIwcYOK4bPi8XWZ5P+UFZSOe3PFns5oIicS81Uwu0yqDEWt4B4o8hn8
7dFcN6nBxln7D16Xgs0pLdoGPchnyN6Wptvc7sIdf7QD/HjCWQENwgl/BDQeU2s/
bk2omC4X5eeoo4RM8xNZSQRhK0xuwHEydz9/CnbVw2f/CsPQ9ULfquftSmAHdFu7
fz3adAzF3/jZgw==
-----END CERTIFICATE-----
Generated at Wed May 13 13:39:18 2026 by rpki-client