Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File:                     bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier:          G0XigEejrCi7YvCrxp1Xu3T7NQmgnAKW53j1YGXzjcQ=
Subject key identifier:   A1:37:F3:04:CE:03:80:D7:EA:2B:39:23:6D:8A:65:E4:D9:58:BB:22
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer:       /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial:       019E209225898239526B2E57C7108156446F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number:          0D14
Signing time:             Wed 13 May 2026 09:01:49 +0000
Manifest this update:     Wed 13 May 2026 09:01:49 +0000
Manifest next update:     Thu 14 May 2026 09:01:49 +0000
Files and hashes:         1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: uaPWYcWVZcaj7TZWPAz2Rp1EODTyLUk6Ke/ovUyqyDs=)
                          2: xedQc8k1ZNFjpdsXA6TYOm-QwAo.roa (hash: 4/kRGVQh8aCzWxXk3+Kdjd95nYFMZaC5eRjEmyP9N4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 09:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:25:89:82:39:52:6b:2e:57:c7:10:81:56:44:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
        Validity
            Not Before: May 13 09:01:49 2026 GMT
            Not After : May 14 09:01:49 2026 GMT
        Subject: CN=a137f304ce0380d7ea2b39236d8a65e4d958bb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:d2:af:28:57:27:b4:65:ad:31:f5:33:f8:
                    bf:c7:c3:48:bb:59:9a:98:8e:c9:a0:db:5e:41:e8:
                    04:72:ee:38:34:2e:c4:12:44:79:bc:32:b2:bf:34:
                    b5:a3:3f:d4:b9:be:61:a9:24:67:b3:29:6b:b3:06:
                    3d:74:61:d8:62:84:88:db:67:98:59:f3:e2:45:bf:
                    17:28:9e:ea:fc:f7:cf:c6:5a:91:89:cf:f1:21:d4:
                    af:6a:30:33:46:73:10:c8:e1:af:9b:2a:92:57:90:
                    17:b5:8c:a0:69:b4:72:09:0f:e8:b8:2e:c3:9f:c3:
                    a1:8f:f0:14:62:04:9a:d4:00:e2:2b:22:cb:56:f4:
                    9e:ea:31:bc:5c:b9:99:07:c0:29:c1:cb:48:30:3a:
                    ff:ef:ca:58:3f:c1:d7:e3:2d:23:53:c8:09:bc:9f:
                    6c:0f:09:7c:bb:0c:92:87:6e:96:a5:80:89:a0:65:
                    d5:7c:18:f7:3a:b9:ef:da:9c:2a:95:81:0e:6b:8e:
                    8a:74:d6:36:f9:00:cd:fa:e1:ca:87:f5:9a:5d:1c:
                    a0:ec:1f:ef:b8:48:59:89:ca:04:12:ff:6e:80:26:
                    03:fe:88:62:ac:8a:2d:88:25:4a:36:8c:08:31:d1:
                    21:e5:b4:b9:58:08:6c:e5:52:1f:bf:6d:0c:07:d8:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:37:F3:04:CE:03:80:D7:EA:2B:39:23:6D:8A:65:E4:D9:58:BB:22
            X509v3 Authority Key Identifier:
                keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c8:1d:e8:ae:11:b0:1a:73:64:5e:86:2e:ee:eb:28:bb:bd:
         06:38:f6:b6:91:59:35:92:57:24:e6:87:be:f6:d3:4f:c3:06:
         7e:11:32:a1:42:40:3d:37:8b:44:fc:3b:5f:c4:0c:48:1c:50:
         41:16:ca:a4:ad:be:91:9d:47:f1:cb:7a:2d:9c:fa:73:c4:4a:
         db:42:ab:a6:29:fa:4f:01:07:d4:b1:9a:36:df:8a:c9:17:22:
         84:50:d8:8f:8c:43:87:cd:0d:13:34:a7:ed:ba:31:d6:cc:ba:
         96:ab:38:46:89:66:66:fe:bd:5d:74:94:71:25:19:8e:c5:e6:
         f4:cb:9a:7a:44:a1:64:c5:3f:41:ce:a3:7c:a0:ca:1e:66:9c:
         94:61:5a:33:2b:54:c4:c7:b9:e0:95:8c:8c:81:32:9a:b6:da:
         c6:c5:83:45:5f:1d:04:00:7c:e1:28:65:b4:f7:2c:63:fd:8f:
         f7:d1:9c:39:2d:89:d7:b1:be:f9:5a:d4:e3:8a:a5:05:f1:7e:
         7f:0a:a3:d7:ef:ec:b5:7e:37:00:0e:f1:60:4d:85:98:2a:c5:
         9d:25:b4:84:9b:e4:1a:88:ab:37:03:d9:3e:8a:88:60:7e:04:
         41:e2:94:58:13:9c:bb:bb:b7:75:d7:93:15:e1:0f:59:f3:5a:
         b0:0c:16:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkiWJgjlSay5XxxCBVkRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjhkMzNkM2RhMTRkM2JiY2ZjZmMyZTQ5MmRjMTY3Mzg0
OWFhNmMwHhcNMjYwNTEzMDkwMTQ5WhcNMjYwNTE0MDkwMTQ5WjAzMTEwLwYDVQQD
EyhhMTM3ZjMwNGNlMDM4MGQ3ZWEyYjM5MjM2ZDhhNjVlNGQ5NThiYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv67SryhXJ7RlrTH1M/i/x8NIu1ma
mI7JoNteQegEcu44NC7EEkR5vDKyvzS1oz/Uub5hqSRnsylrswY9dGHYYoSI22eY
WfPiRb8XKJ7q/PfPxlqRic/xIdSvajAzRnMQyOGvmyqSV5AXtYygabRyCQ/ouC7D
n8Ohj/AUYgSa1ADiKyLLVvSe6jG8XLmZB8ApwctIMDr/78pYP8HX4y0jU8gJvJ9s
Dwl8uwySh26WpYCJoGXVfBj3Ornv2pwqlYEOa46KdNY2+QDN+uHKh/WaXRyg7B/v
uEhZicoEEv9ugCYD/ohirIotiCVKNowIMdEh5bS5WAhs5VIfv20MB9jmGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKE38wTOA4DX6is5I22KZeTZWLsiMB8GA1UdIwQY
MBaAFG1o0z09oU07vPz8LkktwWc4SapsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUt
MmExZTM5ZGQ2MzNjLzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUtMmExZTM5ZGQ2MzNj
LzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMgd6K4R
sBpzZF6GLu7rKLu9Bjj2tpFZNZJXJOaHvvbTT8MGfhEyoUJAPTeLRPw7X8QMSBxQ
QRbKpK2+kZ1H8ct6LZz6c8RK20Krpin6TwEH1LGaNt+KyRcihFDYj4xDh80NEzSn
7box1sy6lqs4RolmZv69XXSUcSUZjsXm9MuaekShZMU/Qc6jfKDKHmaclGFaMytU
xMe54JWMjIEymrbaxsWDRV8dBAB84ShltPcsY/2P99GcOS2J17G++VrU44qlBfF+
fwqj1+/stX43AA7xYE2FmCrFnSW0hJvkGoirNwPZPoqIYH4EQeKUWBOcu7u3ddeT
FeEPWfNasAwW2g==
-----END CERTIFICATE-----
Generated at Wed May 13 17:25:58 2026 by rpki-client