Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File:                     b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier:          wJN0zlPi3o6Ukwm5Sj02/olellaG4dBp+2omUC3NdTA=
Subject key identifier:   D0:51:37:54:23:CF:A8:4A:44:96:5D:10:DC:F9:D9:46:D1:51:DD:7B
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer:       /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial:       019E1FEC588ECC99AB673E12D0F4177FBB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number:          0FE9
Signing time:             Wed 13 May 2026 06:00:43 +0000
Manifest this update:     Wed 13 May 2026 06:00:43 +0000
Manifest next update:     Thu 14 May 2026 06:00:43 +0000
Files and hashes:         1: aXJznUL0xUln13cBfkJIhsiborQ.roa (hash: jlyCOLcXpbHCPjdfEeooCCZpqWJT8+78wdU1bfNr7vE=)
                          2: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: 22NNYe1hklsszA9xAHs1LLTtBwIWRmK4nB4uiBd8kcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:58:8e:cc:99:ab:67:3e:12:d0:f4:17:7f:bb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
        Validity
            Not Before: May 13 06:00:43 2026 GMT
            Not After : May 14 06:00:43 2026 GMT
        Subject: CN=d051375423cfa84a44965d10dcf9d946d151dd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:06:53:7b:4b:d6:14:4c:e6:0d:1f:60:72:f7:
                    59:f0:fc:99:a7:03:2c:e8:69:34:2e:1f:da:6a:7c:
                    34:39:87:9c:13:49:97:95:63:47:93:93:61:37:c1:
                    fb:29:0b:50:d5:5f:f2:0d:72:7f:1a:c1:f0:a5:b5:
                    f1:b1:c2:d1:bc:8c:dd:3f:ea:24:ad:b6:1b:7d:14:
                    7d:1e:36:b4:4b:74:1a:ae:b8:33:e3:47:2c:8b:11:
                    91:43:8c:4c:f7:c8:39:82:2f:fd:95:c3:0b:87:17:
                    c1:60:c3:ee:c3:3c:c7:fe:9d:39:3d:6d:db:1d:43:
                    cf:54:9d:77:cc:0f:0e:25:5d:63:94:84:ab:6f:83:
                    f3:85:b8:5e:d1:2b:fe:5d:26:72:1c:29:b9:f9:66:
                    08:ce:d0:b5:67:2c:9f:07:d6:56:34:43:6d:91:0f:
                    24:5f:f4:59:bb:bb:23:9b:a3:e9:43:f9:89:00:54:
                    80:8b:85:e5:9a:b8:6c:d5:a6:8c:59:cd:2a:00:40:
                    04:31:6b:1d:c7:fb:8d:b7:42:1b:a2:9e:fd:76:04:
                    d0:7b:36:b1:16:59:fd:c9:ee:b4:f9:f0:5c:a5:d7:
                    d9:0e:6f:c7:33:bf:40:00:35:89:4a:11:7f:5e:dc:
                    36:27:2d:4b:2a:55:71:f8:e2:35:0f:97:6c:3a:29:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:51:37:54:23:CF:A8:4A:44:96:5D:10:DC:F9:D9:46:D1:51:DD:7B
            X509v3 Authority Key Identifier:
                keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:9e:22:6a:7b:2b:4b:60:0c:b8:91:d2:71:49:50:88:3a:33:
         11:31:b4:5d:cc:0e:af:a4:3e:b1:66:97:6f:3a:20:12:0a:8c:
         30:15:c8:e5:58:29:f1:a0:9f:f2:cc:00:0d:1e:5c:be:8d:98:
         f4:60:55:61:78:1a:c0:6d:a4:36:15:e8:21:67:af:44:51:ad:
         6a:15:41:6b:aa:05:3d:60:eb:6e:6a:52:2c:9a:91:87:ea:f7:
         11:9a:51:0d:34:02:2e:8f:72:12:8f:db:4a:3d:54:60:41:f7:
         78:d0:63:27:81:b8:8f:1b:ba:5c:f5:ae:0a:d9:6b:c8:a8:b6:
         2a:ce:c2:fe:5f:f1:c5:f6:e8:cc:a8:75:b9:60:93:73:05:b4:
         22:16:da:9f:9b:a7:69:87:a3:a1:76:ba:83:3e:06:cf:d1:29:
         49:2e:18:2e:9b:62:7c:97:48:3b:4d:2a:7e:84:92:de:01:37:
         b4:91:50:a3:1b:a5:96:5f:bc:57:e0:60:b6:2e:11:4e:1c:68:
         f2:98:75:30:04:e0:25:49:7e:d6:30:4b:7e:56:30:da:fc:ec:
         c6:db:2f:2b:19:9e:c1:b1:33:33:5d:69:ce:4a:d3:8a:7f:a2:
         3c:44:3d:76:02:35:a0:d6:89:5f:b8:a6:2f:4b:fe:32:5c:f3:
         16:e8:4f:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7FiOzJmrZz4S0PQXf7thMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNTc5MmFiOGI3NTlhYTc3MzAzOGQ5MjA3N2E5OWJjZjhk
ODFhYTAwHhcNMjYwNTEzMDYwMDQzWhcNMjYwNTE0MDYwMDQzWjAzMTEwLwYDVQQD
EyhkMDUxMzc1NDIzY2ZhODRhNDQ5NjVkMTBkY2Y5ZDk0NmQxNTFkZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AZTe0vWFEzmDR9gcvdZ8PyZpwMs
6Gk0Lh/aanw0OYecE0mXlWNHk5NhN8H7KQtQ1V/yDXJ/GsHwpbXxscLRvIzdP+ok
rbYbfRR9Hja0S3Qarrgz40csixGRQ4xM98g5gi/9lcMLhxfBYMPuwzzH/p05PW3b
HUPPVJ13zA8OJV1jlISrb4Pzhbhe0Sv+XSZyHCm5+WYIztC1ZyyfB9ZWNENtkQ8k
X/RZu7sjm6PpQ/mJAFSAi4Xlmrhs1aaMWc0qAEAEMWsdx/uNt0Ibop79dgTQezax
Fln9ye60+fBcpdfZDm/HM79AADWJShF/Xtw2Jy1LKlVx+OI1D5dsOimVpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBRN1Qjz6hKRJZdENz52UbRUd17MB8GA1UdIwQY
MBaAFG9XkquLdZqncwONkgd6mbz42BqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMt
NWQxYjFlY2I5OWJmLzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMtNWQxYjFlY2I5OWJm
LzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJ4iansr
S2AMuJHScUlQiDozETG0XcwOr6Q+sWaXbzogEgqMMBXI5Vgp8aCf8swADR5cvo2Y
9GBVYXgawG2kNhXoIWevRFGtahVBa6oFPWDrbmpSLJqRh+r3EZpRDTQCLo9yEo/b
Sj1UYEH3eNBjJ4G4jxu6XPWuCtlryKi2Ks7C/l/xxfbozKh1uWCTcwW0Ihban5un
aYejoXa6gz4Gz9EpSS4YLptifJdIO00qfoSS3gE3tJFQoxulll+8V+Bgti4RThxo
8ph1MATgJUl+1jBLflYw2vzsxtsvKxmewbEzM11pzkrTin+iPEQ9dgI1oNaJX7im
L0v+MlzzFuhPsg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:38:24 2026 by rpki-client