Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File:                     bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier:          4liJQvSit23cXuRr1goFM/E7UtkP5Z5Kz4S5gS46log=
Subject key identifier:   EB:DE:92:49:3B:44:3E:BE:93:FC:AB:F0:D7:6D:3B:71:CE:E9:7E:28
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer:       /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial:       019E1DFE913CCA2087086E40554256D9EA6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number:          15F2
Signing time:             Tue 12 May 2026 21:01:22 +0000
Manifest this update:     Tue 12 May 2026 21:01:22 +0000
Manifest next update:     Wed 13 May 2026 21:01:22 +0000
Files and hashes:         1: Oon2IIrGkbnZaP-hb1ZNPn5crpM.roa (hash: aV6nVsAigskV1T2EnkJOb7mIfcRM6nE2dCNvULEtGlA=)
                          2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: 44jJaHEG0UI5+uQeWwRvwCn67ko3FDubol6UoUIGtLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:91:3c:ca:20:87:08:6e:40:55:42:56:d9:ea:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
        Validity
            Not Before: May 12 21:01:22 2026 GMT
            Not After : May 13 21:01:22 2026 GMT
        Subject: CN=ebde92493b443ebe93fcabf0d76d3b71cee97e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:02:d6:ee:97:a4:cb:de:49:a5:43:c0:f0:
                    59:7b:7a:fb:48:11:61:5f:96:e9:d8:f0:df:da:90:
                    92:44:d3:66:eb:20:a8:9e:a9:2d:36:85:26:62:47:
                    3c:4d:0a:19:cc:7b:41:36:07:1c:73:aa:2b:a1:cb:
                    a1:18:b9:f0:59:dc:82:f5:bf:e9:22:20:22:7d:bf:
                    e5:56:1f:2e:5b:ee:cf:39:52:30:ba:fa:23:4f:d6:
                    75:f2:9a:18:41:2d:f2:40:86:d1:10:91:25:2c:0c:
                    e3:cd:86:74:14:62:36:61:77:88:22:bc:78:41:f5:
                    6a:d8:e0:fa:82:8c:b1:90:79:59:13:41:0e:37:57:
                    7c:8f:5f:d5:03:13:16:e7:dc:97:d5:33:3c:e2:35:
                    07:1d:45:b2:c8:02:5c:f5:30:40:19:35:5e:10:a1:
                    ee:ce:ed:f4:42:04:c1:fa:74:29:37:b4:27:a9:bb:
                    aa:54:08:f4:56:a5:28:be:ab:75:1d:39:20:b8:11:
                    d8:b5:27:69:c2:29:94:4c:8f:27:1a:1d:2f:47:64:
                    23:16:70:c8:6a:69:a2:15:72:f4:11:6b:b2:ee:8e:
                    e0:51:74:55:48:be:c3:d7:46:21:cc:cc:67:dd:f1:
                    9a:08:8c:68:ae:d4:38:ef:a9:df:f1:2e:df:6d:68:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DE:92:49:3B:44:3E:BE:93:FC:AB:F0:D7:6D:3B:71:CE:E9:7E:28
            X509v3 Authority Key Identifier:
                keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:5a:ca:37:bb:44:ad:e7:d6:c3:c6:43:d7:e3:85:52:bc:24:
         55:e8:16:c7:b7:b8:49:dc:9a:c9:1c:bc:2c:96:a0:37:75:d7:
         71:c6:fe:e5:56:7a:90:14:f9:9a:b8:1b:cd:5e:5d:e1:dc:72:
         7a:e5:5b:98:7b:4e:16:bc:b1:ad:51:ef:88:b3:ac:ab:87:d7:
         1e:b2:8c:92:16:a0:44:45:96:ad:0a:ac:f8:f4:f3:41:ad:41:
         a8:9a:fa:d4:9a:0c:ae:4f:b5:aa:9f:dc:1d:d5:68:e5:2f:17:
         fc:06:4d:04:86:38:3b:a7:59:aa:e8:46:aa:25:ba:0e:16:7e:
         e7:46:e7:bc:c6:d0:85:88:d1:d6:8d:76:17:de:3c:93:2d:8c:
         30:1c:f0:20:0d:e7:b3:36:46:3c:2d:0d:a1:c1:0b:8e:e8:f0:
         e4:a6:fb:3c:85:e9:23:9f:02:3f:37:b3:30:fd:b7:a1:a7:28:
         ba:c3:7c:17:4b:0d:0c:21:40:ae:6a:d7:07:7a:51:b6:89:d2:
         1b:be:7a:52:e5:3d:f7:df:0f:34:7a:ba:d7:38:9d:a7:17:a5:
         8b:bb:d6:bb:a5:e1:9c:d3:5d:87:1d:3a:fd:87:ec:47:f6:16:
         6b:bb:65:63:f0:24:db:4e:36:06:87:d2:5b:99:3a:72:50:35:
         b7:5a:1f:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/pE8yiCHCG5AVUJW2epqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlM2U1MDFkMjUxM2U1YWVkNDQyM2Q3ZWIyNjVlNjA4MjJh
OGU3OGQwHhcNMjYwNTEyMjEwMTIyWhcNMjYwNTEzMjEwMTIyWjAzMTEwLwYDVQQD
EyhlYmRlOTI0OTNiNDQzZWJlOTNmY2FiZjBkNzZkM2I3MWNlZTk3ZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMcC1u6XpMveSaVDwPBZe3r7SBFh
X5bp2PDf2pCSRNNm6yConqktNoUmYkc8TQoZzHtBNgccc6orocuhGLnwWdyC9b/p
IiAifb/lVh8uW+7POVIwuvojT9Z18poYQS3yQIbREJElLAzjzYZ0FGI2YXeIIrx4
QfVq2OD6goyxkHlZE0EON1d8j1/VAxMW59yX1TM84jUHHUWyyAJc9TBAGTVeEKHu
zu30QgTB+nQpN7QnqbuqVAj0VqUovqt1HTkguBHYtSdpwimUTI8nGh0vR2QjFnDI
ammiFXL0EWuy7o7gUXRVSL7D10YhzMxn3fGaCIxortQ476nf8S7fbWi6eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvekkk7RD6+k/yr8NdtO3HO6X4oMB8GA1UdIwQY
MBaAFG4+UB0lE+Wu1EI9frJl5ggiqOeNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQt
MTFkYWYxNzBkN2NkLzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQtMTFkYWYxNzBkN2Nk
LzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxVrKN7tE
refWw8ZD1+OFUrwkVegWx7e4SdyayRy8LJagN3XXccb+5VZ6kBT5mrgbzV5d4dxy
euVbmHtOFryxrVHviLOsq4fXHrKMkhagREWWrQqs+PTzQa1BqJr61JoMrk+1qp/c
HdVo5S8X/AZNBIY4O6dZquhGqiW6DhZ+50bnvMbQhYjR1o12F948ky2MMBzwIA3n
szZGPC0NocELjujw5Kb7PIXpI58CPzezMP23oacousN8F0sNDCFArmrXB3pRtonS
G756UuU9998PNHq61zidpxeli7vWu6XhnNNdhx06/YfsR/YWa7tlY/Ak2042BofS
W5k6clA1t1ofGQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:04:02 2026 by rpki-client